0x800000bf) 18:08:22 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) ioctl$FICLONE(r2, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:22 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:22 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000bf) 18:08:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 291.584206] input: syz1 as /devices/virtual/input/input10 18:08:22 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") unshare(0x400) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180), 0x8) 18:08:22 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000bf) 18:08:22 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:22 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) ioctl$FICLONE(r2, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:22 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000bf) 18:08:22 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) [ 291.837787] input: syz1 as /devices/virtual/input/input11 18:08:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:22 executing program 5: 18:08:22 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:22 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:22 executing program 5: 18:08:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:22 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) ioctl$FICLONE(r2, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r1) 18:08:23 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:23 executing program 5: 18:08:23 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:23 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) [ 292.173726] input: syz1 as /devices/virtual/input/input12 18:08:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:23 executing program 1: r0 = socket$unix(0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:23 executing program 5: 18:08:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r1) 18:08:23 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:23 executing program 5: [ 292.358713] input: syz1 as /devices/virtual/input/input13 18:08:23 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:23 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:23 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:23 executing program 5: 18:08:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:23 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:23 executing program 5: 18:08:23 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r1) 18:08:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:23 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:23 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:23 executing program 5: 18:08:23 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 292.727119] input: syz1 as /devices/virtual/input/input14 18:08:23 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r1, 0x0, 0x800000bf) 18:08:23 executing program 5: 18:08:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) 18:08:23 executing program 5: 18:08:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:23 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:23 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r1, 0x0, 0x800000bf) [ 292.922193] input: syz1 as /devices/virtual/input/input15 18:08:24 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:24 executing program 5: 18:08:24 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r1, 0x0, 0x800000bf) 18:08:24 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) 18:08:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:24 executing program 5: 18:08:24 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) [ 293.097513] input: syz1 as /devices/virtual/input/input16 18:08:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) 18:08:24 executing program 5: 18:08:24 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:24 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) [ 293.250319] input: syz1 as /devices/virtual/input/input17 18:08:24 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:24 executing program 5: 18:08:24 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:24 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:24 executing program 5: 18:08:24 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:24 executing program 5: 18:08:24 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:24 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:24 executing program 4: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:24 executing program 5: 18:08:24 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x0, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:24 executing program 5: 18:08:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:24 executing program 4: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:24 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x0, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:24 executing program 5: 18:08:24 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:24 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x0, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:24 executing program 4: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:24 executing program 5: 18:08:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:24 executing program 5: 18:08:24 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, 0x0) sendfile(r0, r2, 0x0, 0x800000bf) 18:08:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:24 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:24 executing program 5: 18:08:25 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, 0x0) sendfile(r0, r2, 0x0, 0x800000bf) 18:08:25 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:25 executing program 5: 18:08:25 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, 0x0) sendfile(r0, r2, 0x0, 0x800000bf) 18:08:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:25 executing program 1: socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000bf) 18:08:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:25 executing program 5: 18:08:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:25 executing program 5: 18:08:25 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:25 executing program 5: 18:08:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:25 executing program 1: socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000bf) 18:08:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2, 0x0) ioctl$TCSETAF(r0, 0x5416, &(0x7f0000000040)) 18:08:25 executing program 1: socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000bf) 18:08:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:25 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000bf) 18:08:25 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r1, r0) 18:08:25 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:25 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x2, 0x48bcdf06152626ae) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000c40)={{}, {}, [], {}, [{}, {}, {}, {}]}, 0x44, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000340)=""/196) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) 18:08:25 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000bf) 18:08:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:25 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:25 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r1, r0) 18:08:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:25 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000bf) 18:08:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:25 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}, {}, {}]}, 0x4c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 18:08:25 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 294.912077] overlayfs: filesystem on './file0' not supported as upperdir 18:08:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:25 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x0) 18:08:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:26 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r1, r0) 18:08:26 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:26 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x0) 18:08:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:26 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:26 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x0) [ 295.252961] overlayfs: filesystem on './file0' not supported as upperdir 18:08:26 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:26 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}, {}, {}]}, 0x4c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 18:08:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:26 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}, {}, {}]}, 0x4c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 18:08:26 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:26 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1c0000001a005f0214f9f407000904001100"/28, 0x1c) recvmmsg(r0, &(0x7f0000005340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0) 18:08:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:26 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:26 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}], {}, [{}, {}, {}, {}]}, 0x4c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 18:08:26 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:26 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000013c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x2}]}}, &(0x7f0000000280)=""/237, 0x26, 0xed, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f00000008c0)={0x0, 0x6}}, 0x10) 18:08:27 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:27 executing program 1: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) ioctl$FICLONE(r2, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r1) 18:08:27 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:27 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 296.272320] input: syz1 as /devices/virtual/input/input26 18:08:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:27 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:27 executing program 5: write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='udf\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 18:08:27 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:27 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) [ 296.885026] print_req_error: 14 callbacks suppressed [ 296.885032] print_req_error: I/O error, dev loop11, sector 64 [ 296.898726] print_req_error: I/O error, dev loop11, sector 256 [ 296.905819] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=256, location=256 18:08:27 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) [ 296.938025] print_req_error: I/O error, dev loop11, sector 512 [ 296.946088] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=512, location=512 [ 296.975843] UDF-fs: warning (device loop11): udf_load_vrs: No anchor found [ 297.003030] UDF-fs: Scanning with blocksize 512 failed 18:08:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:28 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 297.026660] print_req_error: I/O error, dev loop11, sector 64 [ 297.036186] print_req_error: I/O error, dev loop11, sector 512 [ 297.048140] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=256, location=256 18:08:28 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) [ 297.097202] print_req_error: I/O error, dev loop11, sector 1024 [ 297.103595] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=512, location=512 [ 297.113617] UDF-fs: warning (device loop11): udf_load_vrs: No anchor found [ 297.128424] UDF-fs: Scanning with blocksize 1024 failed [ 297.151890] print_req_error: I/O error, dev loop11, sector 64 [ 297.159193] print_req_error: I/O error, dev loop11, sector 1024 [ 297.168662] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=256, location=256 [ 297.195102] print_req_error: I/O error, dev loop11, sector 2048 [ 297.204436] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=512, location=512 [ 297.223192] UDF-fs: warning (device loop11): udf_load_vrs: No anchor found [ 297.237876] UDF-fs: Scanning with blocksize 2048 failed [ 297.261902] print_req_error: I/O error, dev loop11, sector 64 [ 297.268947] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=256, location=256 [ 297.279855] UDF-fs: error (device loop11): udf_read_tagged: read failed, block=512, location=512 [ 297.289645] UDF-fs: warning (device loop11): udf_load_vrs: No anchor found [ 297.300893] UDF-fs: Scanning with blocksize 4096 failed [ 297.306447] UDF-fs: warning (device loop11): udf_fill_super: No partition found (1) 18:08:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:28 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:28 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:28 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae91, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000240)=0x4) syz_open_procfs(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="030400306c00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x6c, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) getsockopt$inet6_opts(r6, 0x29, 0x13, &(0x7f0000000280)=""/109, &(0x7f0000000300)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r5, @ANYBLOB="33db7306831705c42d8540e571b55ecdcb36b8fd1eaf039371cb80032214971f7335642df6db3a730c00020ef011392cb175ef5c3e218dae"], 0x20}}, 0x0) 18:08:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:28 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:28 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:28 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:29 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 298.165891] input: syz1 as /devices/virtual/input/input31 [ 298.470134] protocol 88fb is buggy, dev hsr_slave_0 [ 298.475261] protocol 88fb is buggy, dev hsr_slave_1 18:08:29 executing program 5 (fault-call:4 fault-nth:0): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:29 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:29 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:29 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, 0x0, 0x0) [ 298.698353] input: syz1 as /devices/virtual/input/input32 [ 298.720916] FAULT_INJECTION: forcing a failure. [ 298.720916] name failslab, interval 1, probability 0, space 0, times 1 18:08:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 298.776170] CPU: 0 PID: 9097 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 298.783995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.793407] Call Trace: [ 298.793492] dump_stack+0x142/0x197 [ 298.793564] should_fail.cold+0x10f/0x159 [ 298.793621] should_failslab+0xdb/0x130 [ 298.793633] kmem_cache_alloc_trace+0x2e9/0x790 [ 298.812842] ? file_has_perm+0x163/0x2c0 [ 298.816961] alloc_pipe_info+0xb0/0x380 [ 298.821011] splice_direct_to_actor+0x5d2/0x7b0 [ 298.825684] ? selinux_file_permission+0x85/0x480 [ 298.830528] ? generic_pipe_buf_nosteal+0x10/0x10 [ 298.835428] ? security_file_permission+0x89/0x1f0 [ 298.840370] ? do_splice_to+0x170/0x170 [ 298.844393] ? rw_verify_area+0xea/0x2b0 [ 298.848459] do_splice_direct+0x18d/0x230 [ 298.852611] ? splice_direct_to_actor+0x7b0/0x7b0 [ 298.857467] ? rw_verify_area+0xea/0x2b0 [ 298.861537] do_sendfile+0x4db/0xbd0 [ 298.865272] ? do_compat_pwritev64+0x140/0x140 [ 298.869876] ? fput+0xd4/0x150 18:08:29 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:29 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, 0x0, 0x0) [ 298.873072] SyS_sendfile64+0x102/0x110 [ 298.877047] ? SyS_sendfile+0x130/0x130 [ 298.881030] ? do_syscall_64+0x53/0x640 [ 298.885011] ? SyS_sendfile+0x130/0x130 [ 298.888989] do_syscall_64+0x1e8/0x640 [ 298.892879] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 298.901179] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 298.901189] RIP: 0033:0x45a6f9 [ 298.901194] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 298.901204] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 18:08:29 executing program 5 (fault-call:4 fault-nth:1): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:29 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, 0x0, 0x0) [ 298.901208] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 298.901213] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 298.901218] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 [ 298.901223] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 [ 298.990465] FAULT_INJECTION: forcing a failure. [ 298.990465] name failslab, interval 1, probability 0, space 0, times 0 [ 299.038487] CPU: 0 PID: 9115 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 299.046333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.055697] Call Trace: [ 299.058306] dump_stack+0x142/0x197 [ 299.061945] should_fail.cold+0x10f/0x159 [ 299.061962] should_failslab+0xdb/0x130 [ 299.070066] __kmalloc+0x2f0/0x7a0 [ 299.070075] ? kmem_cache_alloc_trace+0x623/0x790 [ 299.070086] ? alloc_pipe_info+0x15c/0x380 [ 299.070097] alloc_pipe_info+0x15c/0x380 [ 299.070111] splice_direct_to_actor+0x5d2/0x7b0 [ 299.070124] ? selinux_file_permission+0x85/0x480 [ 299.070132] ? generic_pipe_buf_nosteal+0x10/0x10 [ 299.070145] ? security_file_permission+0x89/0x1f0 [ 299.070154] ? do_splice_to+0x170/0x170 [ 299.070162] ? rw_verify_area+0xea/0x2b0 [ 299.070173] do_splice_direct+0x18d/0x230 [ 299.118523] ? splice_direct_to_actor+0x7b0/0x7b0 [ 299.123372] ? rw_verify_area+0xea/0x2b0 [ 299.127544] do_sendfile+0x4db/0xbd0 [ 299.131264] ? do_compat_pwritev64+0x140/0x140 [ 299.135846] ? fput+0xd4/0x150 [ 299.139036] SyS_sendfile64+0x102/0x110 [ 299.143006] ? SyS_sendfile+0x130/0x130 [ 299.146974] ? do_syscall_64+0x53/0x640 [ 299.150958] ? SyS_sendfile+0x130/0x130 [ 299.154944] do_syscall_64+0x1e8/0x640 [ 299.158834] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.163681] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 299.168865] RIP: 0033:0x45a6f9 [ 299.172055] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 299.179771] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 18:08:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:30 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90}, 0x90) [ 299.187042] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 299.194326] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 299.201602] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 [ 299.208882] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 18:08:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:30 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:30 executing program 5 (fault-call:4 fault-nth:2): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:30 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90}, 0x90) [ 299.523086] FAULT_INJECTION: forcing a failure. [ 299.523086] name failslab, interval 1, probability 0, space 0, times 0 [ 299.568789] CPU: 1 PID: 9134 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 299.575518] input: syz1 as /devices/virtual/input/input33 [ 299.576736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.576742] Call Trace: [ 299.576760] dump_stack+0x142/0x197 [ 299.576777] should_fail.cold+0x10f/0x159 [ 299.591664] should_failslab+0xdb/0x130 [ 299.591676] kmem_cache_alloc_node_trace+0x280/0x770 [ 299.591771] ? lock_downgrade+0x740/0x740 [ 299.591785] __kmalloc_node+0x3d/0x80 [ 299.591821] kvmalloc_node+0x4e/0xe0 [ 299.598175] iov_iter_get_pages_alloc+0x4a7/0xef0 [ 299.598190] ? iov_iter_revert+0x9c0/0x9c0 [ 299.611373] ? iov_iter_pipe+0x9f/0x2c0 [ 299.611388] default_file_splice_read+0x17c/0x870 [ 299.611397] ? __kmalloc+0x15d/0x7a0 [ 299.611406] ? alloc_pipe_info+0x15c/0x380 [ 299.611428] ? splice_direct_to_actor+0x5d2/0x7b0 [ 299.611435] ? do_splice_direct+0x18d/0x230 [ 299.611445] ? do_syscall_64+0x1e8/0x640 [ 299.611456] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 299.611470] ? page_cache_pipe_buf_release+0x220/0x220 [ 299.644758] ? trace_hardirqs_on+0x10/0x10 [ 299.644768] ? trace_hardirqs_on+0x10/0x10 [ 299.644779] ? save_trace+0x290/0x290 [ 299.653844] ? save_trace+0x290/0x290 [ 299.653867] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 299.653877] ? fsnotify+0x11e0/0x11e0 [ 299.653891] ? __inode_security_revalidate+0xd6/0x130 [ 299.653900] ? avc_policy_seqno+0x9/0x20 [ 299.653908] ? selinux_file_permission+0x85/0x480 [ 299.653922] ? security_file_permission+0x89/0x1f0 18:08:30 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 299.653933] ? rw_verify_area+0xea/0x2b0 [ 299.722680] ? page_cache_pipe_buf_release+0x220/0x220 [ 299.727958] do_splice_to+0x105/0x170 [ 299.731762] splice_direct_to_actor+0x222/0x7b0 [ 299.736439] ? generic_pipe_buf_nosteal+0x10/0x10 [ 299.741297] ? do_splice_to+0x170/0x170 [ 299.745275] ? rw_verify_area+0xea/0x2b0 [ 299.749339] do_splice_direct+0x18d/0x230 [ 299.753499] ? splice_direct_to_actor+0x7b0/0x7b0 [ 299.758505] ? rw_verify_area+0xea/0x2b0 [ 299.762552] do_sendfile+0x4db/0xbd0 [ 299.766252] ? do_compat_pwritev64+0x140/0x140 [ 299.770825] ? fput+0xd4/0x150 [ 299.774150] SyS_sendfile64+0x102/0x110 [ 299.778109] ? SyS_sendfile+0x130/0x130 [ 299.782069] ? do_syscall_64+0x53/0x640 [ 299.786024] ? SyS_sendfile+0x130/0x130 [ 299.789986] do_syscall_64+0x1e8/0x640 [ 299.793882] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.798717] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 299.803908] RIP: 0033:0x45a6f9 [ 299.807082] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 18:08:30 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90}, 0x90) 18:08:30 executing program 5 (fault-call:4 fault-nth:3): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:30 executing program 4 (fault-call:5 fault-nth:0): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) [ 299.814788] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 [ 299.822045] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 299.829299] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 299.836552] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 [ 299.843808] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 [ 299.909075] FAULT_INJECTION: forcing a failure. [ 299.909075] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 299.936858] CPU: 1 PID: 9155 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 299.944724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.954085] Call Trace: [ 299.956679] dump_stack+0x142/0x197 [ 299.960320] should_fail.cold+0x10f/0x159 [ 299.964531] ? __might_sleep+0x93/0xb0 [ 299.968484] __alloc_pages_nodemask+0x1d6/0x7a0 [ 299.973162] ? __alloc_pages_slowpath+0x2930/0x2930 [ 299.978657] ? rcu_read_lock_sched_held+0x110/0x130 [ 299.983720] alloc_pages_current+0xec/0x1e0 [ 299.988086] push_pipe+0x3cb/0x780 [ 299.991631] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 299.996476] ? iov_iter_revert+0x9c0/0x9c0 [ 300.000706] ? iov_iter_pipe+0x9f/0x2c0 [ 300.004690] default_file_splice_read+0x17c/0x870 18:08:30 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 300.009527] ? __kmalloc+0x15d/0x7a0 [ 300.013238] ? alloc_pipe_info+0x15c/0x380 [ 300.017468] ? splice_direct_to_actor+0x5d2/0x7b0 [ 300.022309] ? do_splice_direct+0x18d/0x230 [ 300.026632] ? do_syscall_64+0x1e8/0x640 [ 300.030696] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 300.036071] ? page_cache_pipe_buf_release+0x220/0x220 [ 300.041353] ? trace_hardirqs_on+0x10/0x10 [ 300.045597] ? trace_hardirqs_on+0x10/0x10 [ 300.049846] ? save_trace+0x290/0x290 [ 300.053688] ? save_trace+0x290/0x290 [ 300.053713] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 300.064144] ? fsnotify+0x11e0/0x11e0 [ 300.064156] ? __inode_security_revalidate+0xd6/0x130 [ 300.064164] ? avc_policy_seqno+0x9/0x20 [ 300.064174] ? selinux_file_permission+0x85/0x480 [ 300.064187] ? security_file_permission+0x89/0x1f0 [ 300.064197] ? rw_verify_area+0xea/0x2b0 [ 300.064207] ? page_cache_pipe_buf_release+0x220/0x220 [ 300.064218] do_splice_to+0x105/0x170 [ 300.064230] splice_direct_to_actor+0x222/0x7b0 [ 300.104779] ? generic_pipe_buf_nosteal+0x10/0x10 [ 300.109699] ? do_splice_to+0x170/0x170 [ 300.113677] ? rw_verify_area+0xea/0x2b0 [ 300.117738] do_splice_direct+0x18d/0x230 [ 300.121873] ? splice_direct_to_actor+0x7b0/0x7b0 [ 300.126705] ? rw_verify_area+0xea/0x2b0 [ 300.130760] do_sendfile+0x4db/0xbd0 [ 300.134474] ? do_compat_pwritev64+0x140/0x140 [ 300.139039] ? fput+0xd4/0x150 [ 300.142218] SyS_sendfile64+0x102/0x110 [ 300.146175] ? SyS_sendfile+0x130/0x130 [ 300.150138] ? do_syscall_64+0x53/0x640 [ 300.154121] ? SyS_sendfile+0x130/0x130 [ 300.158087] do_syscall_64+0x1e8/0x640 [ 300.161958] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 300.166797] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 300.171980] RIP: 0033:0x45a6f9 [ 300.175164] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 300.182854] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 [ 300.190109] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 300.197371] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 18:08:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:31 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x4, {0xa, 0x4e24, 0x401, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}}, 0x38) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}}, 0x90) [ 300.204634] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 [ 300.211892] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 18:08:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:31 executing program 5 (fault-call:4 fault-nth:4): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:31 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000040)={0x1, 0x6, 0x1000, 0xb3, &(0x7f0000000180)="ea579a4235f430f79af8b03bc0d85975ef74ffbe28e3ab64320f84d1ce5793739f7c88d36933d58f200fb8dcf8a85cc062501becccd9fd83cb46cd3c3eee123c4209b2b069055c95b3481dd0c035438f6f8d433d65c0f3b5eaccf8cb02b6b2736d4c851e0fbfa9147c5475e1b8afe63e056dcd9ec2f2487990e0a1cac4f36ed7fb7b9b644ca325a5b0eed3400973c7d751078e17f0867e7d42d9af7d6032bde5a5a7b5fa05020b36e385ba74677957df54fafc", 0xe6, 0x0, &(0x7f0000000340)="22884c67945ef836860a6f1171552c5c9c6a6a89ff1d253757126b2c5eda9dcae73b5b5df6671ada08e199718803aafba0e62ce53ead12ff50fcb8692333a094ba9dabd368c71864717d5709605c2a1ff7c9b68ba9be78ef29c8040b13fb331fdfa624e42610207685aca630d264c86fdf9bcf865186ec5ff333e70b3047452a8f083eabd1f88570c07508266e12bac8a7ca77a86aa28165a6bbeb67999b984f4e581339cceeb6000301e0752650ca3f8558c00d479f3bee9eaf49f6a5081a52cca76dcbb25712df57c43e7943ea0a8dec4531e5c52bed43a8a6669c344d9ee1ed7c298e924e"}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000004000)=[{{&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000004480)=""/258, 0x102}, {&(0x7f00000002c0)=""/55, 0x37}], 0x2, &(0x7f0000000580)=""/42, 0x2a}}, {{&(0x7f00000005c0)=@nfc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000640)=""/54, 0x36}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/208, 0xd0}, {&(0x7f0000000840)=""/16, 0x10}], 0x4, &(0x7f00000008c0)=""/84, 0x54}, 0x6}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000045c0)=""/155}, {&(0x7f0000004680)=""/25}, {&(0x7f00000046c0)=""/182}, {&(0x7f0000004780)=""/115}]}, 0x6}, {{&(0x7f0000000a00)=@l2, 0x80, &(0x7f0000001000)=[{&(0x7f0000000a80)=""/34, 0x22}, {&(0x7f0000000ac0)=""/81, 0x51}, {&(0x7f0000000b40)=""/170, 0x1ac}, {&(0x7f0000000c00)=""/158, 0xa7}, {&(0x7f0000000cc0)=""/165, 0xa5}, {&(0x7f0000000d80)=""/156, 0x9c}, {&(0x7f0000000e40)=""/148, 0x94}, {&(0x7f0000000f00)=""/1, 0x1}, {&(0x7f0000000f40)=""/141, 0x8d}], 0x9}, 0x7ff}, {{&(0x7f00000010c0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001140)=""/197, 0xc5}, {&(0x7f0000001240)=""/179, 0xb3}, {&(0x7f0000001300)=""/233, 0xe9}, {&(0x7f0000001400)=""/223, 0xdf}, {&(0x7f0000001500)=""/254, 0xfe}], 0x5, &(0x7f0000001680)=""/111, 0x6f}, 0x6}, {{&(0x7f0000001700)=@x25, 0x80, &(0x7f0000002780)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1, &(0x7f00000027c0)=""/251, 0xfb}, 0xdbc}, {{&(0x7f00000028c0)=@nfc_llcp, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002940)=""/237, 0xed}], 0x1, &(0x7f0000002a80)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000003a80)=@tipc, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003b00)=""/173, 0xad}], 0x1}, 0x3}, {{&(0x7f0000003c00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003c80)=""/85, 0x55}, {&(0x7f0000003d00)=""/208, 0xd0}, {&(0x7f0000003e00)=""/206, 0xce}], 0x3, &(0x7f0000003f40)=""/153, 0x99}, 0x8}], 0x9, 0xd0f26352164a9165, &(0x7f0000004240)={0x77359400}) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004300)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x21021000}, 0xc, &(0x7f0000004400)={&(0x7f0000004340)={0x94, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x95f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5f}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000240)={r9}, 0x14) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000004280)={r9, 0x101}, &(0x7f00000042c0)=0x8) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) [ 300.409561] FAULT_INJECTION: forcing a failure. [ 300.409561] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 300.438829] CPU: 1 PID: 9179 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 300.446661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.456026] Call Trace: 18:08:31 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 300.458621] dump_stack+0x142/0x197 [ 300.462260] should_fail.cold+0x10f/0x159 [ 300.466412] ? __might_sleep+0x93/0xb0 [ 300.470311] __alloc_pages_nodemask+0x1d6/0x7a0 [ 300.474988] ? __alloc_pages_slowpath+0x2930/0x2930 [ 300.480016] ? rcu_read_lock_sched_held+0x110/0x130 [ 300.485044] alloc_pages_current+0xec/0x1e0 [ 300.489386] push_pipe+0x3cb/0x780 [ 300.492941] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 300.497797] ? iov_iter_revert+0x9c0/0x9c0 [ 300.502050] ? iov_iter_pipe+0x9f/0x2c0 18:08:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) [ 300.502068] default_file_splice_read+0x17c/0x870 [ 300.502078] ? __kmalloc+0x15d/0x7a0 [ 300.502087] ? alloc_pipe_info+0x15c/0x380 [ 300.502094] ? splice_direct_to_actor+0x5d2/0x7b0 [ 300.502101] ? do_splice_direct+0x18d/0x230 [ 300.502112] ? do_syscall_64+0x1e8/0x640 [ 300.502124] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 300.502136] ? page_cache_pipe_buf_release+0x220/0x220 [ 300.502150] ? trace_hardirqs_on+0x10/0x10 [ 300.510946] ? trace_hardirqs_on+0x10/0x10 [ 300.510956] ? save_trace+0x290/0x290 [ 300.510965] ? save_trace+0x290/0x290 [ 300.510988] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 300.510997] ? fsnotify+0x11e0/0x11e0 [ 300.511011] ? __inode_security_revalidate+0xd6/0x130 [ 300.511019] ? avc_policy_seqno+0x9/0x20 [ 300.511027] ? selinux_file_permission+0x85/0x480 [ 300.511040] ? security_file_permission+0x89/0x1f0 [ 300.518952] ? rw_verify_area+0xea/0x2b0 [ 300.546963] ? page_cache_pipe_buf_release+0x220/0x220 [ 300.554964] do_splice_to+0x105/0x170 [ 300.554978] splice_direct_to_actor+0x222/0x7b0 18:08:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) [ 300.554994] ? generic_pipe_buf_nosteal+0x10/0x10 [ 300.578475] ? do_splice_to+0x170/0x170 [ 300.578486] ? rw_verify_area+0xea/0x2b0 [ 300.578498] do_splice_direct+0x18d/0x230 [ 300.588390] ? splice_direct_to_actor+0x7b0/0x7b0 [ 300.588408] ? rw_verify_area+0xea/0x2b0 [ 300.588419] do_sendfile+0x4db/0xbd0 [ 300.588435] ? do_compat_pwritev64+0x140/0x140 [ 300.597746] ? fput+0xd4/0x150 [ 300.597759] SyS_sendfile64+0x102/0x110 [ 300.597769] ? SyS_sendfile+0x130/0x130 [ 300.597779] ? do_syscall_64+0x53/0x640 [ 300.597789] ? SyS_sendfile+0x130/0x130 18:08:31 executing program 5 (fault-call:4 fault-nth:5): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) [ 300.628049] do_syscall_64+0x1e8/0x640 [ 300.628059] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 300.628077] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 300.635816] RIP: 0033:0x45a6f9 [ 300.635822] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 300.635834] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 [ 300.635839] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 300.635844] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 300.635854] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 [ 300.643596] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 [ 300.732893] FAULT_INJECTION: forcing a failure. [ 300.732893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 300.745309] CPU: 1 PID: 9200 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 300.753118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.762467] Call Trace: [ 300.765062] dump_stack+0x142/0x197 [ 300.768698] should_fail.cold+0x10f/0x159 [ 300.772855] ? __might_sleep+0x93/0xb0 [ 300.776763] __alloc_pages_nodemask+0x1d6/0x7a0 [ 300.781442] ? __alloc_pages_slowpath+0x2930/0x2930 [ 300.786465] ? rcu_read_lock_sched_held+0x110/0x130 [ 300.791487] alloc_pages_current+0xec/0x1e0 [ 300.795817] push_pipe+0x3cb/0x780 [ 300.799359] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 300.804206] ? iov_iter_revert+0x9c0/0x9c0 18:08:31 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 300.808438] ? iov_iter_pipe+0x9f/0x2c0 [ 300.812416] default_file_splice_read+0x17c/0x870 [ 300.817257] ? __kmalloc+0x15d/0x7a0 [ 300.820967] ? alloc_pipe_info+0x15c/0x380 [ 300.825194] ? splice_direct_to_actor+0x5d2/0x7b0 [ 300.825204] ? do_splice_direct+0x18d/0x230 [ 300.832450] input: syz1 as /devices/virtual/input/input37 [ 300.834357] ? do_syscall_64+0x1e8/0x640 [ 300.834371] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 300.834386] ? page_cache_pipe_buf_release+0x220/0x220 [ 300.843975] ? trace_hardirqs_on+0x10/0x10 [ 300.843986] ? trace_hardirqs_on+0x10/0x10 [ 300.843997] ? save_trace+0x290/0x290 [ 300.844007] ? save_trace+0x290/0x290 [ 300.854639] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 300.854648] ? fsnotify+0x11e0/0x11e0 [ 300.854663] ? __inode_security_revalidate+0xd6/0x130 [ 300.854673] ? avc_policy_seqno+0x9/0x20 [ 300.854683] ? selinux_file_permission+0x85/0x480 [ 300.854696] ? security_file_permission+0x89/0x1f0 [ 300.854709] ? rw_verify_area+0xea/0x2b0 [ 300.854720] ? page_cache_pipe_buf_release+0x220/0x220 [ 300.854730] do_splice_to+0x105/0x170 [ 300.854742] splice_direct_to_actor+0x222/0x7b0 [ 300.866975] ? generic_pipe_buf_nosteal+0x10/0x10 [ 300.866989] ? do_splice_to+0x170/0x170 [ 300.867001] ? rw_verify_area+0xea/0x2b0 [ 300.867012] do_splice_direct+0x18d/0x230 [ 300.877443] ? splice_direct_to_actor+0x7b0/0x7b0 [ 300.877459] ? rw_verify_area+0xea/0x2b0 [ 300.877471] do_sendfile+0x4db/0xbd0 [ 300.877486] ? do_compat_pwritev64+0x140/0x140 [ 300.890486] ? fput+0xd4/0x150 [ 300.890499] SyS_sendfile64+0x102/0x110 [ 300.890508] ? SyS_sendfile+0x130/0x130 [ 300.890519] ? do_syscall_64+0x53/0x640 [ 300.890528] ? SyS_sendfile+0x130/0x130 [ 300.890538] do_syscall_64+0x1e8/0x640 [ 300.890549] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 300.900295] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 300.900303] RIP: 0033:0x45a6f9 [ 300.900308] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 300.900319] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 [ 300.900324] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 300.900329] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 300.900335] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 [ 300.900341] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 18:08:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:32 executing program 5 (fault-call:4 fault-nth:6): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) [ 301.175251] FAULT_INJECTION: forcing a failure. [ 301.175251] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 301.187979] CPU: 0 PID: 9212 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 301.195811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.205155] Call Trace: [ 301.207735] dump_stack+0x142/0x197 [ 301.211355] should_fail.cold+0x10f/0x159 [ 301.215488] ? __might_sleep+0x93/0xb0 [ 301.219386] __alloc_pages_nodemask+0x1d6/0x7a0 [ 301.224062] ? __alloc_pages_slowpath+0x2930/0x2930 [ 301.229062] ? rcu_read_lock_sched_held+0x110/0x130 [ 301.234072] alloc_pages_current+0xec/0x1e0 [ 301.234089] push_pipe+0x3cb/0x780 [ 301.241925] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 301.241939] ? iov_iter_revert+0x9c0/0x9c0 [ 301.241947] ? iov_iter_pipe+0x9f/0x2c0 [ 301.241960] default_file_splice_read+0x17c/0x870 [ 301.241968] ? __kmalloc+0x15d/0x7a0 [ 301.241978] ? alloc_pipe_info+0x15c/0x380 [ 301.259813] ? splice_direct_to_actor+0x5d2/0x7b0 [ 301.267722] ? do_splice_direct+0x18d/0x230 [ 301.267736] ? do_syscall_64+0x1e8/0x640 [ 301.267751] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 301.286267] ? page_cache_pipe_buf_release+0x220/0x220 [ 301.291528] ? trace_hardirqs_on+0x10/0x10 [ 301.295741] ? trace_hardirqs_on+0x10/0x10 [ 301.299956] ? save_trace+0x290/0x290 [ 301.303736] ? save_trace+0x290/0x290 [ 301.307524] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 301.314167] ? fsnotify+0x11e0/0x11e0 [ 301.317953] ? __inode_security_revalidate+0xd6/0x130 [ 301.324697] ? avc_policy_seqno+0x9/0x20 [ 301.328780] ? selinux_file_permission+0x85/0x480 [ 301.333605] ? security_file_permission+0x89/0x1f0 [ 301.338518] ? rw_verify_area+0xea/0x2b0 [ 301.342561] ? page_cache_pipe_buf_release+0x220/0x220 [ 301.347834] do_splice_to+0x105/0x170 [ 301.351635] splice_direct_to_actor+0x222/0x7b0 [ 301.356292] ? generic_pipe_buf_nosteal+0x10/0x10 [ 301.361288] ? do_splice_to+0x170/0x170 [ 301.365256] ? rw_verify_area+0xea/0x2b0 [ 301.372965] do_splice_direct+0x18d/0x230 [ 301.377110] ? splice_direct_to_actor+0x7b0/0x7b0 [ 301.381960] ? rw_verify_area+0xea/0x2b0 [ 301.386022] do_sendfile+0x4db/0xbd0 [ 301.389728] ? do_compat_pwritev64+0x140/0x140 [ 301.394294] ? fput+0xd4/0x150 [ 301.397468] SyS_sendfile64+0x102/0x110 [ 301.401422] ? SyS_sendfile+0x130/0x130 [ 301.405379] ? do_syscall_64+0x53/0x640 [ 301.409332] ? SyS_sendfile+0x130/0x130 [ 301.413313] do_syscall_64+0x1e8/0x640 [ 301.417180] ? trace_hardirqs_off_thunk+0x1a/0x1c 18:08:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:32 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 301.422061] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 301.427239] RIP: 0033:0x45a6f9 [ 301.430416] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 301.438103] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 [ 301.445353] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 301.452601] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 301.459859] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 [ 301.467108] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 18:08:32 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x1, 0x0) fstat(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) r5 = getgid() fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$unix(r0, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e) getgroups(0x4, &(0x7f0000000040)=[r4, r5, r6, 0xee00]) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r7, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:32 executing program 5 (fault-call:4 fault-nth:7): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:32 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xc) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) ioctl$CAPI_CLR_FLAGS(r3, 0x80044325, &(0x7f0000000040)) write$FUSE_ENTRY(r4, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) [ 301.558494] input: syz1 as /devices/virtual/input/input38 [ 301.619922] FAULT_INJECTION: forcing a failure. [ 301.619922] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 301.649274] CPU: 0 PID: 9235 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 301.658182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.667540] Call Trace: [ 301.670138] dump_stack+0x142/0x197 [ 301.673779] should_fail.cold+0x10f/0x159 [ 301.677936] ? __might_sleep+0x93/0xb0 [ 301.681838] __alloc_pages_nodemask+0x1d6/0x7a0 [ 301.686531] ? __alloc_pages_slowpath+0x2930/0x2930 [ 301.691569] ? rcu_read_lock_sched_held+0x110/0x130 [ 301.696592] alloc_pages_current+0xec/0x1e0 [ 301.700915] push_pipe+0x3cb/0x780 [ 301.704439] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 301.709264] ? iov_iter_revert+0x9c0/0x9c0 [ 301.713573] ? iov_iter_pipe+0x9f/0x2c0 [ 301.717533] default_file_splice_read+0x17c/0x870 [ 301.722361] ? __kmalloc+0x15d/0x7a0 [ 301.726059] ? alloc_pipe_info+0x15c/0x380 [ 301.730277] ? splice_direct_to_actor+0x5d2/0x7b0 [ 301.735098] ? do_splice_direct+0x18d/0x230 [ 301.739408] ? do_syscall_64+0x1e8/0x640 [ 301.743466] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 301.748813] ? page_cache_pipe_buf_release+0x220/0x220 [ 301.754075] ? trace_hardirqs_on+0x10/0x10 [ 301.758288] ? trace_hardirqs_on+0x10/0x10 [ 301.762503] ? save_trace+0x290/0x290 [ 301.766281] ? save_trace+0x290/0x290 [ 301.770070] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 301.776721] ? fsnotify+0x11e0/0x11e0 [ 301.780506] ? __inode_security_revalidate+0xd6/0x130 [ 301.785675] ? avc_policy_seqno+0x9/0x20 [ 301.789869] ? selinux_file_permission+0x85/0x480 [ 301.794699] ? security_file_permission+0x89/0x1f0 [ 301.799612] ? rw_verify_area+0xea/0x2b0 [ 301.803716] ? page_cache_pipe_buf_release+0x220/0x220 [ 301.808983] do_splice_to+0x105/0x170 [ 301.812768] splice_direct_to_actor+0x222/0x7b0 [ 301.817417] ? generic_pipe_buf_nosteal+0x10/0x10 [ 301.822240] ? do_splice_to+0x170/0x170 [ 301.826237] ? rw_verify_area+0xea/0x2b0 [ 301.830290] do_splice_direct+0x18d/0x230 [ 301.834468] ? splice_direct_to_actor+0x7b0/0x7b0 [ 301.839294] ? rw_verify_area+0xea/0x2b0 [ 301.843347] do_sendfile+0x4db/0xbd0 [ 301.847071] ? do_compat_pwritev64+0x140/0x140 [ 301.851646] ? fput+0xd4/0x150 [ 301.854830] SyS_sendfile64+0x102/0x110 [ 301.858793] ? SyS_sendfile+0x130/0x130 [ 301.862754] ? do_syscall_64+0x53/0x640 [ 301.866719] ? SyS_sendfile+0x130/0x130 [ 301.870682] do_syscall_64+0x1e8/0x640 [ 301.874553] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 301.879430] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 301.884597] RIP: 0033:0x45a6f9 [ 301.887765] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 301.895452] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 [ 301.902702] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 301.909950] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 18:08:32 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:32 executing program 4: signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r4, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:32 executing program 5 (fault-call:4 fault-nth:8): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) [ 301.917233] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 [ 301.924484] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 18:08:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[]}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:32 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 302.074734] FAULT_INJECTION: forcing a failure. [ 302.074734] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 302.095356] input: syz1 as /devices/virtual/input/input39 [ 302.116258] CPU: 0 PID: 9251 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 302.124086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.133448] Call Trace: [ 302.136061] dump_stack+0x142/0x197 [ 302.139710] should_fail.cold+0x10f/0x159 [ 302.143866] ? __might_sleep+0x93/0xb0 [ 302.147753] __alloc_pages_nodemask+0x1d6/0x7a0 [ 302.152410] ? __alloc_pages_slowpath+0x2930/0x2930 [ 302.157410] ? rcu_read_lock_sched_held+0x110/0x130 [ 302.162432] alloc_pages_current+0xec/0x1e0 [ 302.166745] push_pipe+0x3cb/0x780 [ 302.170278] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 302.175107] ? iov_iter_revert+0x9c0/0x9c0 [ 302.179349] ? iov_iter_pipe+0x9f/0x2c0 [ 302.183310] default_file_splice_read+0x17c/0x870 [ 302.188131] ? __kmalloc+0x15d/0x7a0 [ 302.192018] ? alloc_pipe_info+0x15c/0x380 [ 302.196260] ? splice_direct_to_actor+0x5d2/0x7b0 [ 302.201085] ? do_splice_direct+0x18d/0x230 [ 302.205395] ? do_syscall_64+0x1e8/0x640 [ 302.209448] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.214843] ? page_cache_pipe_buf_release+0x220/0x220 [ 302.220128] ? trace_hardirqs_on+0x10/0x10 [ 302.224344] ? trace_hardirqs_on+0x10/0x10 [ 302.228604] ? save_trace+0x290/0x290 [ 302.232390] ? save_trace+0x290/0x290 [ 302.236269] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 302.242960] ? fsnotify+0x11e0/0x11e0 [ 302.246751] ? __inode_security_revalidate+0xd6/0x130 [ 302.251926] ? avc_policy_seqno+0x9/0x20 [ 302.255989] ? selinux_file_permission+0x85/0x480 [ 302.260839] ? security_file_permission+0x89/0x1f0 [ 302.265760] ? rw_verify_area+0xea/0x2b0 [ 302.269801] ? page_cache_pipe_buf_release+0x220/0x220 [ 302.278011] do_splice_to+0x105/0x170 [ 302.281800] splice_direct_to_actor+0x222/0x7b0 [ 302.286507] ? generic_pipe_buf_nosteal+0x10/0x10 [ 302.291334] ? do_splice_to+0x170/0x170 [ 302.295289] ? rw_verify_area+0xea/0x2b0 [ 302.299387] do_splice_direct+0x18d/0x230 [ 302.303532] ? splice_direct_to_actor+0x7b0/0x7b0 [ 302.308367] ? rw_verify_area+0xea/0x2b0 [ 302.312420] do_sendfile+0x4db/0xbd0 [ 302.316130] ? do_compat_pwritev64+0x140/0x140 [ 302.320823] ? fput+0xd4/0x150 [ 302.324002] SyS_sendfile64+0x102/0x110 [ 302.327959] ? SyS_sendfile+0x130/0x130 [ 302.331914] ? do_syscall_64+0x53/0x640 [ 302.335909] ? SyS_sendfile+0x130/0x130 [ 302.339867] do_syscall_64+0x1e8/0x640 [ 302.343732] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 302.348564] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.353740] RIP: 0033:0x45a6f9 [ 302.356962] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 302.364753] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 18:08:33 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:33 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 302.372013] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 302.379360] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 302.386618] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 [ 302.393877] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 18:08:33 executing program 5 (fault-call:4 fault-nth:9): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:33 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) [ 302.486596] FAULT_INJECTION: forcing a failure. [ 302.486596] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 302.518569] CPU: 0 PID: 9272 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 302.526422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.535780] Call Trace: [ 302.538383] dump_stack+0x142/0x197 [ 302.542023] should_fail.cold+0x10f/0x159 [ 302.546173] ? __might_sleep+0x93/0xb0 [ 302.550066] __alloc_pages_nodemask+0x1d6/0x7a0 [ 302.554741] ? __alloc_pages_slowpath+0x2930/0x2930 [ 302.559784] ? rcu_read_lock_sched_held+0x110/0x130 [ 302.564801] alloc_pages_current+0xec/0x1e0 [ 302.569146] push_pipe+0x3cb/0x780 [ 302.572699] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 302.577558] ? iov_iter_revert+0x9c0/0x9c0 [ 302.581789] ? iov_iter_pipe+0x9f/0x2c0 [ 302.585768] default_file_splice_read+0x17c/0x870 [ 302.590610] ? __kmalloc+0x15d/0x7a0 [ 302.594334] ? alloc_pipe_info+0x15c/0x380 [ 302.598570] ? splice_direct_to_actor+0x5d2/0x7b0 [ 302.603408] ? do_splice_direct+0x18d/0x230 [ 302.603423] ? do_syscall_64+0x1e8/0x640 [ 302.603437] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.603452] ? page_cache_pipe_buf_release+0x220/0x220 [ 302.603466] ? trace_hardirqs_on+0x10/0x10 [ 302.603474] ? trace_hardirqs_on+0x10/0x10 [ 302.603488] ? save_trace+0x290/0x290 18:08:33 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 302.611849] ? save_trace+0x290/0x290 [ 302.627052] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 302.627064] ? fsnotify+0x11e0/0x11e0 [ 302.627082] ? __inode_security_revalidate+0xd6/0x130 [ 302.627090] ? avc_policy_seqno+0x9/0x20 [ 302.627103] ? selinux_file_permission+0x85/0x480 [ 302.639045] ? security_file_permission+0x89/0x1f0 [ 302.639060] ? rw_verify_area+0xea/0x2b0 [ 302.639073] ? page_cache_pipe_buf_release+0x220/0x220 [ 302.639084] do_splice_to+0x105/0x170 [ 302.654714] splice_direct_to_actor+0x222/0x7b0 [ 302.654727] ? generic_pipe_buf_nosteal+0x10/0x10 [ 302.654741] ? do_splice_to+0x170/0x170 [ 302.654752] ? rw_verify_area+0xea/0x2b0 [ 302.654765] do_splice_direct+0x18d/0x230 [ 302.654777] ? splice_direct_to_actor+0x7b0/0x7b0 [ 302.654790] ? rw_verify_area+0xea/0x2b0 [ 302.654800] do_sendfile+0x4db/0xbd0 [ 302.663682] ? do_compat_pwritev64+0x140/0x140 [ 302.663696] ? fput+0xd4/0x150 [ 302.663709] SyS_sendfile64+0x102/0x110 [ 302.663718] ? SyS_sendfile+0x130/0x130 [ 302.663730] ? do_syscall_64+0x53/0x640 18:08:33 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 302.663740] ? SyS_sendfile+0x130/0x130 [ 302.663751] do_syscall_64+0x1e8/0x640 [ 302.663761] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 302.663778] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 302.681020] input: syz1 as /devices/virtual/input/input40 [ 302.682210] RIP: 0033:0x45a6f9 [ 302.682216] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 302.682228] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 [ 302.682233] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 18:08:33 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) syz_open_dev$ptys(0xc, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BLKRESETZONE(r4, 0x40101283, &(0x7f0000000040)={0x7, 0x1ff}) 18:08:33 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 302.682239] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 302.682245] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 [ 302.682251] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 18:08:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[]}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:33 executing program 5 (fault-call:4 fault-nth:10): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:33 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 302.964158] FAULT_INJECTION: forcing a failure. [ 302.964158] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:08:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:34 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 303.026609] input: syz1 as /devices/virtual/input/input41 [ 303.051942] CPU: 1 PID: 9302 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 303.059784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.069165] Call Trace: [ 303.071767] dump_stack+0x142/0x197 18:08:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 303.075411] should_fail.cold+0x10f/0x159 [ 303.079570] ? __might_sleep+0x93/0xb0 [ 303.083488] __alloc_pages_nodemask+0x1d6/0x7a0 [ 303.088180] ? __alloc_pages_slowpath+0x2930/0x2930 [ 303.093209] ? rcu_read_lock_sched_held+0x110/0x130 [ 303.098229] alloc_pages_current+0xec/0x1e0 [ 303.102549] push_pipe+0x3cb/0x780 [ 303.102563] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 303.102576] ? iov_iter_revert+0x9c0/0x9c0 [ 303.102584] ? iov_iter_pipe+0x9f/0x2c0 [ 303.102600] default_file_splice_read+0x17c/0x870 18:08:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 303.102609] ? __kmalloc+0x15d/0x7a0 [ 303.102619] ? alloc_pipe_info+0x15c/0x380 [ 303.132085] ? splice_direct_to_actor+0x5d2/0x7b0 [ 303.136938] ? do_splice_direct+0x18d/0x230 [ 303.141264] ? do_syscall_64+0x1e8/0x640 [ 303.145328] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 303.150700] ? page_cache_pipe_buf_release+0x220/0x220 [ 303.155993] ? trace_hardirqs_on+0x10/0x10 [ 303.160229] ? trace_hardirqs_on+0x10/0x10 [ 303.160241] ? save_trace+0x290/0x290 [ 303.160250] ? save_trace+0x290/0x290 [ 303.160273] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 303.172066] ? fsnotify+0x11e0/0x11e0 [ 303.172083] ? __inode_security_revalidate+0xd6/0x130 [ 303.172092] ? avc_policy_seqno+0x9/0x20 [ 303.172102] ? selinux_file_permission+0x85/0x480 [ 303.172118] ? security_file_permission+0x89/0x1f0 [ 303.172132] ? rw_verify_area+0xea/0x2b0 [ 303.172146] ? page_cache_pipe_buf_release+0x220/0x220 [ 303.172155] do_splice_to+0x105/0x170 [ 303.172167] splice_direct_to_actor+0x222/0x7b0 [ 303.172179] ? generic_pipe_buf_nosteal+0x10/0x10 [ 303.172191] ? do_splice_to+0x170/0x170 [ 303.228127] ? rw_verify_area+0xea/0x2b0 [ 303.232177] do_splice_direct+0x18d/0x230 [ 303.236324] ? splice_direct_to_actor+0x7b0/0x7b0 [ 303.241153] ? rw_verify_area+0xea/0x2b0 [ 303.245207] do_sendfile+0x4db/0xbd0 [ 303.248919] ? do_compat_pwritev64+0x140/0x140 [ 303.253492] ? fput+0xd4/0x150 [ 303.256668] SyS_sendfile64+0x102/0x110 [ 303.260624] ? SyS_sendfile+0x130/0x130 [ 303.264583] ? do_syscall_64+0x53/0x640 [ 303.268551] ? SyS_sendfile+0x130/0x130 [ 303.272509] do_syscall_64+0x1e8/0x640 [ 303.276377] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 303.281211] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 303.286380] RIP: 0033:0x45a6f9 [ 303.289551] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 303.297242] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 [ 303.304495] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 303.311744] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 303.320768] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 18:08:34 executing program 5 (fault-call:4 fault-nth:11): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) [ 303.328019] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 [ 303.406799] FAULT_INJECTION: forcing a failure. [ 303.406799] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 303.425648] CPU: 0 PID: 9324 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 303.433556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.433562] Call Trace: [ 303.433584] dump_stack+0x142/0x197 [ 303.433605] should_fail.cold+0x10f/0x159 [ 303.433617] ? __might_sleep+0x93/0xb0 [ 303.433633] __alloc_pages_nodemask+0x1d6/0x7a0 [ 303.461863] ? __alloc_pages_slowpath+0x2930/0x2930 [ 303.466934] ? rcu_read_lock_sched_held+0x110/0x130 [ 303.471983] alloc_pages_current+0xec/0x1e0 [ 303.476321] push_pipe+0x3cb/0x780 [ 303.479868] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 303.484769] ? iov_iter_revert+0x9c0/0x9c0 [ 303.489010] ? iov_iter_pipe+0x9f/0x2c0 [ 303.493003] default_file_splice_read+0x17c/0x870 [ 303.497853] ? __kmalloc+0x15d/0x7a0 [ 303.501566] ? alloc_pipe_info+0x15c/0x380 [ 303.501578] ? splice_direct_to_actor+0x5d2/0x7b0 [ 303.501587] ? do_splice_direct+0x18d/0x230 [ 303.501601] ? do_syscall_64+0x1e8/0x640 [ 303.501614] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 303.501628] ? page_cache_pipe_buf_release+0x220/0x220 [ 303.501642] ? trace_hardirqs_on+0x10/0x10 [ 303.501650] ? trace_hardirqs_on+0x10/0x10 [ 303.501662] ? save_trace+0x290/0x290 [ 303.521707] ? save_trace+0x290/0x290 [ 303.521736] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 303.521747] ? fsnotify+0x11e0/0x11e0 [ 303.521762] ? __inode_security_revalidate+0xd6/0x130 [ 303.521771] ? avc_policy_seqno+0x9/0x20 [ 303.521780] ? selinux_file_permission+0x85/0x480 [ 303.521794] ? security_file_permission+0x89/0x1f0 [ 303.536650] ? rw_verify_area+0xea/0x2b0 [ 303.536664] ? page_cache_pipe_buf_release+0x220/0x220 [ 303.536677] do_splice_to+0x105/0x170 [ 303.536691] splice_direct_to_actor+0x222/0x7b0 [ 303.536701] ? generic_pipe_buf_nosteal+0x10/0x10 [ 303.536712] ? do_splice_to+0x170/0x170 [ 303.536720] ? rw_verify_area+0xea/0x2b0 [ 303.536732] do_splice_direct+0x18d/0x230 [ 303.536744] ? splice_direct_to_actor+0x7b0/0x7b0 [ 303.536756] ? rw_verify_area+0xea/0x2b0 [ 303.536767] do_sendfile+0x4db/0xbd0 [ 303.536782] ? do_compat_pwritev64+0x140/0x140 [ 303.548586] ? fput+0xd4/0x150 [ 303.548600] SyS_sendfile64+0x102/0x110 [ 303.548610] ? SyS_sendfile+0x130/0x130 [ 303.548622] ? do_syscall_64+0x53/0x640 [ 303.548631] ? SyS_sendfile+0x130/0x130 [ 303.548641] do_syscall_64+0x1e8/0x640 [ 303.548650] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 303.548669] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 303.548677] RIP: 0033:0x45a6f9 [ 303.548682] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 303.548691] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 [ 303.548699] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 303.559143] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 303.559152] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 18:08:34 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:34 executing program 5 (fault-call:4 fault-nth:12): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) [ 303.568551] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 18:08:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[]}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:34 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r5, 0xae80, 0x0) dup2(r2, r5) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) r9 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r9, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) shutdown(r9, 0x0) write$FUSE_ENTRY(r6, &(0x7f00000000c0)={0x90, 0x0, 0x4000004, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, {0x0, 0x40, 0x4, 0x1100000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x2}}}, 0x90) [ 303.757169] FAULT_INJECTION: forcing a failure. [ 303.757169] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 303.858389] input: syz1 as /devices/virtual/input/input42 [ 303.881427] CPU: 0 PID: 9331 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 303.889289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.889296] Call Trace: [ 303.889318] dump_stack+0x142/0x197 18:08:34 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 303.889344] should_fail.cold+0x10f/0x159 [ 303.889368] ? __might_sleep+0x93/0xb0 [ 303.901400] __alloc_pages_nodemask+0x1d6/0x7a0 [ 303.901416] ? __alloc_pages_slowpath+0x2930/0x2930 [ 303.901432] ? rcu_read_lock_sched_held+0x110/0x130 [ 303.901448] alloc_pages_current+0xec/0x1e0 [ 303.909207] push_pipe+0x3cb/0x780 [ 303.909224] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 303.909239] ? iov_iter_revert+0x9c0/0x9c0 [ 303.909248] ? iov_iter_pipe+0x9f/0x2c0 [ 303.909263] default_file_splice_read+0x17c/0x870 [ 303.909274] ? __kmalloc+0x15d/0x7a0 [ 303.957766] ? alloc_pipe_info+0x15c/0x380 [ 303.962012] ? splice_direct_to_actor+0x5d2/0x7b0 [ 303.966851] ? do_splice_direct+0x18d/0x230 [ 303.971252] ? do_syscall_64+0x1e8/0x640 [ 303.975321] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 303.980684] ? page_cache_pipe_buf_release+0x220/0x220 [ 303.985958] ? trace_hardirqs_on+0x10/0x10 [ 303.990187] ? trace_hardirqs_on+0x10/0x10 [ 303.994425] ? save_trace+0x290/0x290 [ 303.998226] ? save_trace+0x290/0x290 [ 304.002036] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 18:08:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 304.008707] ? fsnotify+0x11e0/0x11e0 [ 304.012514] ? __inode_security_revalidate+0xd6/0x130 [ 304.017707] ? avc_policy_seqno+0x9/0x20 [ 304.021765] ? selinux_file_permission+0x85/0x480 [ 304.021779] ? security_file_permission+0x89/0x1f0 [ 304.031608] ? rw_verify_area+0xea/0x2b0 [ 304.031621] ? page_cache_pipe_buf_release+0x220/0x220 [ 304.031631] do_splice_to+0x105/0x170 [ 304.031644] splice_direct_to_actor+0x222/0x7b0 [ 304.031656] ? generic_pipe_buf_nosteal+0x10/0x10 [ 304.031669] ? do_splice_to+0x170/0x170 [ 304.031677] ? rw_verify_area+0xea/0x2b0 [ 304.031689] do_splice_direct+0x18d/0x230 [ 304.066400] ? splice_direct_to_actor+0x7b0/0x7b0 [ 304.071320] ? rw_verify_area+0xea/0x2b0 [ 304.075363] do_sendfile+0x4db/0xbd0 [ 304.079061] ? do_compat_pwritev64+0x140/0x140 [ 304.083625] ? fput+0xd4/0x150 [ 304.086802] SyS_sendfile64+0x102/0x110 [ 304.090759] ? SyS_sendfile+0x130/0x130 [ 304.094712] ? do_syscall_64+0x53/0x640 [ 304.098674] ? SyS_sendfile+0x130/0x130 [ 304.102637] do_syscall_64+0x1e8/0x640 [ 304.106520] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 304.111364] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 304.116543] RIP: 0033:0x45a6f9 [ 304.119733] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 304.127429] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 [ 304.134689] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 304.141937] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 18:08:35 executing program 5 (fault-call:4 fault-nth:13): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) [ 304.152922] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 [ 304.160170] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 18:08:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 304.210976] FAULT_INJECTION: forcing a failure. [ 304.210976] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 304.245376] CPU: 0 PID: 9351 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 304.253222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.262616] Call Trace: [ 304.265224] dump_stack+0x142/0x197 [ 304.268949] should_fail.cold+0x10f/0x159 [ 304.273103] ? __might_sleep+0x93/0xb0 [ 304.276999] __alloc_pages_nodemask+0x1d6/0x7a0 [ 304.281698] ? __alloc_pages_slowpath+0x2930/0x2930 [ 304.286726] ? rcu_read_lock_sched_held+0x110/0x130 [ 304.291749] alloc_pages_current+0xec/0x1e0 [ 304.296074] push_pipe+0x3cb/0x780 [ 304.299615] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 304.304462] ? iov_iter_revert+0x9c0/0x9c0 18:08:35 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 304.308692] ? iov_iter_pipe+0x9f/0x2c0 [ 304.312672] default_file_splice_read+0x17c/0x870 [ 304.317510] ? __kmalloc+0x15d/0x7a0 [ 304.321218] ? alloc_pipe_info+0x15c/0x380 [ 304.325449] ? splice_direct_to_actor+0x5d2/0x7b0 [ 304.330306] ? do_splice_direct+0x18d/0x230 [ 304.334714] ? do_syscall_64+0x1e8/0x640 [ 304.338785] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 304.344168] ? page_cache_pipe_buf_release+0x220/0x220 [ 304.349447] ? trace_hardirqs_on+0x10/0x10 [ 304.353684] ? trace_hardirqs_on+0x10/0x10 [ 304.357924] ? save_trace+0x290/0x290 [ 304.361711] ? save_trace+0x290/0x290 [ 304.365524] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 304.372177] ? fsnotify+0x11e0/0x11e0 [ 304.375963] ? __inode_security_revalidate+0xd6/0x130 [ 304.381136] ? avc_policy_seqno+0x9/0x20 [ 304.385195] ? selinux_file_permission+0x85/0x480 [ 304.390030] ? security_file_permission+0x89/0x1f0 [ 304.394948] ? rw_verify_area+0xea/0x2b0 [ 304.398996] ? page_cache_pipe_buf_release+0x220/0x220 [ 304.404259] do_splice_to+0x105/0x170 [ 304.408051] splice_direct_to_actor+0x222/0x7b0 [ 304.412713] ? generic_pipe_buf_nosteal+0x10/0x10 [ 304.417580] ? do_splice_to+0x170/0x170 [ 304.421549] ? rw_verify_area+0xea/0x2b0 [ 304.425596] do_splice_direct+0x18d/0x230 [ 304.429750] ? splice_direct_to_actor+0x7b0/0x7b0 [ 304.434583] ? rw_verify_area+0xea/0x2b0 [ 304.438632] do_sendfile+0x4db/0xbd0 [ 304.442353] ? do_compat_pwritev64+0x140/0x140 [ 304.446919] ? fput+0xd4/0x150 [ 304.450097] SyS_sendfile64+0x102/0x110 [ 304.454056] ? SyS_sendfile+0x130/0x130 [ 304.458015] ? do_syscall_64+0x53/0x640 [ 304.461973] ? SyS_sendfile+0x130/0x130 [ 304.465930] do_syscall_64+0x1e8/0x640 [ 304.469802] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 304.474635] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 304.479808] RIP: 0033:0x45a6f9 [ 304.482980] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 304.490674] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 [ 304.497951] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 304.505224] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 18:08:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(0x0) dup2(0xffffffffffffffff, r1) [ 304.512491] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 [ 304.519754] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 18:08:35 executing program 5 (fault-call:4 fault-nth:14): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 304.588374] input: syz1 as /devices/virtual/input/input43 [ 304.680919] FAULT_INJECTION: forcing a failure. [ 304.680919] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:08:35 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x4200, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={r2}, 0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000003c0)={r2, @in={{0x2, 0x4e24, @remote}}, 0x8, 0x4}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000004c0)={r3, 0x8000}, &(0x7f0000000500)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x204040, 0x0) ioctl$ION_IOC_HEAP_QUERY(r9, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000080)}) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000200)={0xa0, 0xfffffffffffffff5, 0x1, {{0x6, 0x1, 0xf6, 0x5, 0xfff, 0xd3d, {0x3, 0x1, 0xffffffffffffff00, 0x0, 0xa13, 0x175a, 0x2, 0x8, 0x5, 0x0, 0x40, r8, 0xee01, 0x80, 0xcf}}, {0x0, 0x4}}}, 0xa0) write$FUSE_ENTRY(r7, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) [ 304.749980] CPU: 0 PID: 9371 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 304.757824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.757830] Call Trace: [ 304.757852] dump_stack+0x142/0x197 [ 304.757872] should_fail.cold+0x10f/0x159 [ 304.777595] ? __might_sleep+0x93/0xb0 [ 304.781501] __alloc_pages_nodemask+0x1d6/0x7a0 [ 304.786190] ? __alloc_pages_slowpath+0x2930/0x2930 [ 304.792691] ? rcu_read_lock_sched_held+0x110/0x130 [ 304.792710] alloc_pages_current+0xec/0x1e0 [ 304.792728] push_pipe+0x3cb/0x780 [ 304.792743] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 304.792756] ? iov_iter_revert+0x9c0/0x9c0 [ 304.814649] ? iov_iter_pipe+0x9f/0x2c0 [ 304.818626] default_file_splice_read+0x17c/0x870 [ 304.823462] ? __kmalloc+0x15d/0x7a0 [ 304.827270] ? alloc_pipe_info+0x15c/0x380 [ 304.831486] ? splice_direct_to_actor+0x5d2/0x7b0 [ 304.836308] ? do_splice_direct+0x18d/0x230 [ 304.840668] ? do_syscall_64+0x1e8/0x640 [ 304.844715] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 304.850085] ? page_cache_pipe_buf_release+0x220/0x220 [ 304.855387] ? trace_hardirqs_on+0x10/0x10 [ 304.859602] ? trace_hardirqs_on+0x10/0x10 [ 304.863831] ? save_trace+0x290/0x290 [ 304.867632] ? save_trace+0x290/0x290 [ 304.871452] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 304.878100] ? fsnotify+0x11e0/0x11e0 [ 304.881950] ? __inode_security_revalidate+0xd6/0x130 [ 304.887120] ? avc_policy_seqno+0x9/0x20 [ 304.891171] ? selinux_file_permission+0x85/0x480 [ 304.896003] ? security_file_permission+0x89/0x1f0 [ 304.900927] ? rw_verify_area+0xea/0x2b0 [ 304.904983] ? page_cache_pipe_buf_release+0x220/0x220 [ 304.910245] do_splice_to+0x105/0x170 [ 304.914027] splice_direct_to_actor+0x222/0x7b0 [ 304.918680] ? generic_pipe_buf_nosteal+0x10/0x10 [ 304.923613] ? do_splice_to+0x170/0x170 [ 304.927628] ? rw_verify_area+0xea/0x2b0 [ 304.931679] do_splice_direct+0x18d/0x230 [ 304.935822] ? splice_direct_to_actor+0x7b0/0x7b0 [ 304.940650] ? rw_verify_area+0xea/0x2b0 [ 304.944723] do_sendfile+0x4db/0xbd0 [ 304.948427] ? do_compat_pwritev64+0x140/0x140 [ 304.952998] ? fput+0xd4/0x150 [ 304.956222] SyS_sendfile64+0x102/0x110 [ 304.960184] ? SyS_sendfile+0x130/0x130 [ 304.964149] ? do_syscall_64+0x53/0x640 [ 304.968208] ? SyS_sendfile+0x130/0x130 [ 304.972294] do_syscall_64+0x1e8/0x640 [ 304.976181] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 304.981012] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 304.986197] RIP: 0033:0x45a6f9 [ 304.989371] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 18:08:35 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:36 executing program 5 (fault-call:4 fault-nth:15): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 304.997073] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 [ 305.004332] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 305.011590] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 305.018865] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 [ 305.026132] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 18:08:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(0x0) dup2(0xffffffffffffffff, r1) [ 305.126469] FAULT_INJECTION: forcing a failure. [ 305.126469] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 305.139859] CPU: 1 PID: 9389 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 305.147674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.147679] Call Trace: [ 305.147696] dump_stack+0x142/0x197 [ 305.147715] should_fail.cold+0x10f/0x159 [ 305.147727] ? __might_sleep+0x93/0xb0 [ 305.147742] __alloc_pages_nodemask+0x1d6/0x7a0 [ 305.175960] ? __alloc_pages_slowpath+0x2930/0x2930 [ 305.180982] ? rcu_read_lock_sched_held+0x110/0x130 [ 305.186037] alloc_pages_current+0xec/0x1e0 [ 305.190379] push_pipe+0x3cb/0x780 [ 305.193925] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 305.198780] ? iov_iter_revert+0x9c0/0x9c0 [ 305.203012] ? iov_iter_pipe+0x9f/0x2c0 [ 305.206991] default_file_splice_read+0x17c/0x870 [ 305.211858] ? __kmalloc+0x15d/0x7a0 [ 305.215568] ? alloc_pipe_info+0x15c/0x380 [ 305.219797] ? splice_direct_to_actor+0x5d2/0x7b0 [ 305.224651] ? do_splice_direct+0x18d/0x230 [ 305.229007] ? do_syscall_64+0x1e8/0x640 [ 305.233070] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 305.238433] ? page_cache_pipe_buf_release+0x220/0x220 [ 305.243844] ? trace_hardirqs_on+0x10/0x10 [ 305.248075] ? trace_hardirqs_on+0x10/0x10 [ 305.252315] ? save_trace+0x290/0x290 [ 305.256131] ? save_trace+0x290/0x290 [ 305.256157] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 305.256168] ? fsnotify+0x11e0/0x11e0 [ 305.256182] ? __inode_security_revalidate+0xd6/0x130 [ 305.256192] ? avc_policy_seqno+0x9/0x20 [ 305.256200] ? selinux_file_permission+0x85/0x480 [ 305.256211] ? security_file_permission+0x89/0x1f0 [ 305.270445] ? rw_verify_area+0xea/0x2b0 [ 305.270457] ? page_cache_pipe_buf_release+0x220/0x220 [ 305.270468] do_splice_to+0x105/0x170 [ 305.270481] splice_direct_to_actor+0x222/0x7b0 [ 305.270493] ? generic_pipe_buf_nosteal+0x10/0x10 [ 305.270507] ? do_splice_to+0x170/0x170 [ 305.270516] ? rw_verify_area+0xea/0x2b0 [ 305.270528] do_splice_direct+0x18d/0x230 [ 305.270538] ? splice_direct_to_actor+0x7b0/0x7b0 [ 305.270550] ? rw_verify_area+0xea/0x2b0 [ 305.270561] do_sendfile+0x4db/0xbd0 [ 305.270576] ? do_compat_pwritev64+0x140/0x140 [ 305.270588] ? fput+0xd4/0x150 [ 305.344808] SyS_sendfile64+0x102/0x110 [ 305.348769] ? SyS_sendfile+0x130/0x130 [ 305.352728] ? do_syscall_64+0x53/0x640 [ 305.356689] ? SyS_sendfile+0x130/0x130 [ 305.360649] do_syscall_64+0x1e8/0x640 [ 305.364520] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 305.369366] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 305.374539] RIP: 0033:0x45a6f9 18:08:36 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 305.377708] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 305.385416] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 [ 305.392674] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 305.399924] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 305.407178] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 [ 305.414430] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 18:08:36 executing program 5 (fault-call:4 fault-nth:16): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 305.480551] input: syz1 as /devices/virtual/input/input44 18:08:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 305.572886] FAULT_INJECTION: forcing a failure. [ 305.572886] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 305.638799] CPU: 1 PID: 9411 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 305.646626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.655979] Call Trace: [ 305.658571] dump_stack+0x142/0x197 [ 305.662208] should_fail.cold+0x10f/0x159 [ 305.666352] ? __might_sleep+0x93/0xb0 [ 305.670249] __alloc_pages_nodemask+0x1d6/0x7a0 [ 305.674912] ? __alloc_pages_slowpath+0x2930/0x2930 [ 305.679963] ? rcu_read_lock_sched_held+0x110/0x130 [ 305.684965] alloc_pages_current+0xec/0x1e0 [ 305.689358] push_pipe+0x3cb/0x780 [ 305.692894] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 305.697735] ? iov_iter_revert+0x9c0/0x9c0 [ 305.701951] ? iov_iter_pipe+0x9f/0x2c0 [ 305.705963] default_file_splice_read+0x17c/0x870 [ 305.710971] ? __kmalloc+0x15d/0x7a0 [ 305.714784] ? alloc_pipe_info+0x15c/0x380 [ 305.719113] ? splice_direct_to_actor+0x5d2/0x7b0 [ 305.723946] ? do_splice_direct+0x18d/0x230 [ 305.728255] ? do_syscall_64+0x1e8/0x640 [ 305.732304] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 305.737709] ? page_cache_pipe_buf_release+0x220/0x220 [ 305.742975] ? trace_hardirqs_on+0x10/0x10 [ 305.747193] ? trace_hardirqs_on+0x10/0x10 [ 305.751417] ? save_trace+0x290/0x290 [ 305.755205] ? save_trace+0x290/0x290 [ 305.758997] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 305.765644] ? fsnotify+0x11e0/0x11e0 [ 305.769465] ? __inode_security_revalidate+0xd6/0x130 [ 305.774637] ? avc_policy_seqno+0x9/0x20 [ 305.778678] ? selinux_file_permission+0x85/0x480 [ 305.783503] ? security_file_permission+0x89/0x1f0 [ 305.788431] ? rw_verify_area+0xea/0x2b0 [ 305.792484] ? page_cache_pipe_buf_release+0x220/0x220 [ 305.797749] do_splice_to+0x105/0x170 [ 305.801532] splice_direct_to_actor+0x222/0x7b0 [ 305.806182] ? generic_pipe_buf_nosteal+0x10/0x10 [ 305.811016] ? do_splice_to+0x170/0x170 [ 305.814978] ? rw_verify_area+0xea/0x2b0 [ 305.819021] do_splice_direct+0x18d/0x230 [ 305.823163] ? splice_direct_to_actor+0x7b0/0x7b0 [ 305.828044] ? rw_verify_area+0xea/0x2b0 [ 305.832103] do_sendfile+0x4db/0xbd0 [ 305.835966] ? do_compat_pwritev64+0x140/0x140 [ 305.840542] ? fput+0xd4/0x150 [ 305.843728] SyS_sendfile64+0x102/0x110 [ 305.847737] ? SyS_sendfile+0x130/0x130 [ 305.851701] ? do_syscall_64+0x53/0x640 [ 305.855669] ? SyS_sendfile+0x130/0x130 [ 305.859641] do_syscall_64+0x1e8/0x640 [ 305.863514] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 305.868343] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 305.873518] RIP: 0033:0x45a6f9 [ 305.876688] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 18:08:36 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}}, 0x90) 18:08:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(0x0) dup2(0xffffffffffffffff, r1) 18:08:36 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) ioctl$FICLONE(r1, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:36 executing program 5 (fault-call:4 fault-nth:17): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) [ 305.884379] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 [ 305.891637] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 305.898954] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 305.906213] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 [ 305.913466] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 18:08:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 305.979577] input: syz1 as /devices/virtual/input/input45 [ 305.993679] FAULT_INJECTION: forcing a failure. [ 305.993679] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:08:37 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x8c000) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000280)={0x1, 0x6}) write(r0, &(0x7f0000000340), 0x41395527) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r5, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r7, 0x4008ae73, &(0x7f0000000180)={0x800, 0x1}) 18:08:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)) dup2(0xffffffffffffffff, r1) [ 306.122174] CPU: 1 PID: 9429 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 306.130022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.139388] Call Trace: [ 306.141997] dump_stack+0x142/0x197 [ 306.145671] should_fail.cold+0x10f/0x159 [ 306.145682] ? __might_sleep+0x93/0xb0 [ 306.145699] __alloc_pages_nodemask+0x1d6/0x7a0 [ 306.153738] ? __alloc_pages_slowpath+0x2930/0x2930 [ 306.163406] ? rcu_read_lock_sched_held+0x110/0x130 [ 306.163421] alloc_pages_current+0xec/0x1e0 [ 306.163435] push_pipe+0x3cb/0x780 [ 306.163449] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 306.163462] ? iov_iter_revert+0x9c0/0x9c0 [ 306.163470] ? iov_iter_pipe+0x9f/0x2c0 [ 306.163484] default_file_splice_read+0x17c/0x870 [ 306.163491] ? __kmalloc+0x15d/0x7a0 [ 306.163500] ? alloc_pipe_info+0x15c/0x380 [ 306.163507] ? splice_direct_to_actor+0x5d2/0x7b0 [ 306.163517] ? do_splice_direct+0x18d/0x230 [ 306.182068] ? do_syscall_64+0x1e8/0x640 [ 306.182081] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 306.182096] ? page_cache_pipe_buf_release+0x220/0x220 [ 306.182108] ? trace_hardirqs_on+0x10/0x10 [ 306.182116] ? trace_hardirqs_on+0x10/0x10 [ 306.182126] ? save_trace+0x290/0x290 [ 306.182134] ? save_trace+0x290/0x290 [ 306.182230] ? trace_xfs_perag_set_eofblocks+0x1c0/0x2d0 [ 306.188624] input: syz1 as /devices/virtual/input/input46 [ 306.190351] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 306.190362] ? fsnotify+0x11e0/0x11e0 [ 306.190374] ? __inode_security_revalidate+0xd6/0x130 [ 306.190382] ? avc_policy_seqno+0x9/0x20 [ 306.190396] ? selinux_file_permission+0x85/0x480 [ 306.190410] ? security_file_permission+0x89/0x1f0 [ 306.190421] ? rw_verify_area+0xea/0x2b0 [ 306.190430] ? page_cache_pipe_buf_release+0x220/0x220 [ 306.190441] do_splice_to+0x105/0x170 [ 306.190454] splice_direct_to_actor+0x222/0x7b0 [ 306.190465] ? generic_pipe_buf_nosteal+0x10/0x10 [ 306.190476] ? do_splice_to+0x170/0x170 [ 306.190485] ? rw_verify_area+0xea/0x2b0 [ 306.208113] do_splice_direct+0x18d/0x230 18:08:37 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) ioctl$FICLONE(r1, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:37 executing program 5 (fault-call:4 fault-nth:18): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) [ 306.208127] ? splice_direct_to_actor+0x7b0/0x7b0 [ 306.208142] ? rw_verify_area+0xea/0x2b0 [ 306.227117] do_sendfile+0x4db/0xbd0 [ 306.227135] ? do_compat_pwritev64+0x140/0x140 [ 306.227146] ? fput+0xd4/0x150 [ 306.235594] SyS_sendfile64+0x102/0x110 [ 306.260808] ? SyS_sendfile+0x130/0x130 [ 306.260819] ? do_syscall_64+0x53/0x640 [ 306.260828] ? SyS_sendfile+0x130/0x130 [ 306.260838] do_syscall_64+0x1e8/0x640 [ 306.260846] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 306.260862] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 306.260869] RIP: 0033:0x45a6f9 [ 306.260873] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 306.269857] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 [ 306.269862] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 306.269868] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 306.269874] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 [ 306.269880] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 [ 306.345243] FAULT_INJECTION: forcing a failure. [ 306.345243] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 306.363575] CPU: 1 PID: 9452 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 306.437026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.446372] Call Trace: [ 306.448957] dump_stack+0x142/0x197 [ 306.452575] should_fail.cold+0x10f/0x159 [ 306.456795] ? __might_sleep+0x93/0xb0 [ 306.460672] __alloc_pages_nodemask+0x1d6/0x7a0 [ 306.465327] ? __alloc_pages_slowpath+0x2930/0x2930 [ 306.470343] ? rcu_read_lock_sched_held+0x110/0x130 [ 306.475355] alloc_pages_current+0xec/0x1e0 [ 306.479662] push_pipe+0x3cb/0x780 [ 306.483202] iov_iter_get_pages_alloc+0x4fc/0xef0 [ 306.488040] ? iov_iter_revert+0x9c0/0x9c0 [ 306.492269] ? iov_iter_pipe+0x9f/0x2c0 [ 306.496235] default_file_splice_read+0x17c/0x870 [ 306.503254] ? __kmalloc+0x15d/0x7a0 [ 306.507086] ? alloc_pipe_info+0x15c/0x380 [ 306.513500] ? splice_direct_to_actor+0x5d2/0x7b0 [ 306.518332] ? do_splice_direct+0x18d/0x230 [ 306.526645] ? do_syscall_64+0x1e8/0x640 [ 306.530699] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 306.536066] ? page_cache_pipe_buf_release+0x220/0x220 [ 306.541350] ? trace_hardirqs_on+0x10/0x10 [ 306.545571] ? trace_hardirqs_on+0x10/0x10 [ 306.549796] ? save_trace+0x290/0x290 [ 306.553579] ? save_trace+0x290/0x290 [ 306.557376] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 306.564027] ? fsnotify+0x11e0/0x11e0 [ 306.567817] ? __inode_security_revalidate+0xd6/0x130 [ 306.573079] ? avc_policy_seqno+0x9/0x20 [ 306.577126] ? selinux_file_permission+0x85/0x480 [ 306.581963] ? security_file_permission+0x89/0x1f0 [ 306.586881] ? rw_verify_area+0xea/0x2b0 [ 306.590929] ? page_cache_pipe_buf_release+0x220/0x220 [ 306.596195] do_splice_to+0x105/0x170 [ 306.600013] splice_direct_to_actor+0x222/0x7b0 [ 306.604674] ? generic_pipe_buf_nosteal+0x10/0x10 [ 306.609505] ? do_splice_to+0x170/0x170 [ 306.613521] ? rw_verify_area+0xea/0x2b0 [ 306.617746] do_splice_direct+0x18d/0x230 [ 306.621882] ? splice_direct_to_actor+0x7b0/0x7b0 [ 306.626712] ? rw_verify_area+0xea/0x2b0 [ 306.630759] do_sendfile+0x4db/0xbd0 [ 306.634484] ? do_compat_pwritev64+0x140/0x140 [ 306.639080] ? fput+0xd4/0x150 [ 306.642264] SyS_sendfile64+0x102/0x110 [ 306.646221] ? SyS_sendfile+0x130/0x130 [ 306.650181] ? do_syscall_64+0x53/0x640 [ 306.654138] ? SyS_sendfile+0x130/0x130 [ 306.658096] do_syscall_64+0x1e8/0x640 [ 306.661981] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 306.666826] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 306.672002] RIP: 0033:0x45a6f9 18:08:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:37 executing program 5 (fault-call:4 fault-nth:19): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) [ 306.675183] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 306.682967] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 [ 306.690227] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 306.697483] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 306.704751] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 [ 306.712006] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 18:08:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)) dup2(0xffffffffffffffff, r1) [ 306.792674] FAULT_INJECTION: forcing a failure. [ 306.792674] name failslab, interval 1, probability 0, space 0, times 0 [ 306.812899] CPU: 1 PID: 9462 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 306.820744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.830100] Call Trace: [ 306.832691] dump_stack+0x142/0x197 [ 306.836345] should_fail.cold+0x10f/0x159 [ 306.840504] should_failslab+0xdb/0x130 [ 306.844482] __kmalloc+0x2f0/0x7a0 [ 306.848094] ? check_preemption_disabled+0x3c/0x250 [ 306.853110] ? rw_copy_check_uvector+0x1d8/0x290 [ 306.857865] rw_copy_check_uvector+0x1d8/0x290 [ 306.862493] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 306.867950] ? rcu_read_lock_sched_held+0x110/0x130 [ 306.872971] ? __alloc_pages_nodemask+0x639/0x7a0 [ 306.877818] import_iovec+0xa2/0x370 [ 306.881537] ? dup_iter+0x260/0x260 [ 306.885163] ? rcu_read_lock_sched_held+0x110/0x130 [ 306.890221] vfs_readv+0xb3/0x130 [ 306.893856] ? compat_rw_copy_check_uvector+0x310/0x310 [ 306.899233] ? push_pipe+0x3e6/0x780 [ 306.902961] ? iov_iter_get_pages_alloc+0x2c9/0xef0 [ 306.907998] ? iov_iter_revert+0x9c0/0x9c0 [ 306.912238] ? iov_iter_pipe+0x9f/0x2c0 [ 306.916216] default_file_splice_read+0x421/0x870 [ 306.916226] ? __kmalloc+0x15d/0x7a0 [ 306.916237] ? alloc_pipe_info+0x15c/0x380 [ 306.924790] ? splice_direct_to_actor+0x5d2/0x7b0 [ 306.924799] ? do_splice_direct+0x18d/0x230 18:08:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:37 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) ioctl$FICLONE(r1, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 306.924818] ? page_cache_pipe_buf_release+0x220/0x220 [ 306.924833] ? trace_hardirqs_on+0x10/0x10 [ 306.934099] ? save_trace+0x290/0x290 [ 306.934107] ? save_trace+0x290/0x290 [ 306.934141] ? rw_verify_area+0xea/0x2b0 [ 306.934152] ? page_cache_pipe_buf_release+0x220/0x220 [ 306.934162] do_splice_to+0x105/0x170 [ 306.934173] splice_direct_to_actor+0x222/0x7b0 [ 306.934185] ? generic_pipe_buf_nosteal+0x10/0x10 [ 306.934197] ? do_splice_to+0x170/0x170 [ 306.934207] ? rw_verify_area+0xea/0x2b0 [ 306.952246] do_splice_direct+0x18d/0x230 [ 306.952258] ? splice_direct_to_actor+0x7b0/0x7b0 [ 306.952272] ? rw_verify_area+0xea/0x2b0 [ 306.952284] do_sendfile+0x4db/0xbd0 [ 306.952299] ? do_compat_pwritev64+0x140/0x140 [ 306.952310] ? fput+0xd4/0x150 [ 306.952322] SyS_sendfile64+0x102/0x110 [ 306.956788] input: syz1 as /devices/virtual/input/input47 [ 306.960154] ? SyS_sendfile+0x130/0x130 [ 306.960164] ? do_syscall_64+0x53/0x640 [ 306.960174] ? SyS_sendfile+0x130/0x130 [ 306.960184] do_syscall_64+0x1e8/0x640 [ 306.960193] ? trace_hardirqs_off_thunk+0x1a/0x1c 18:08:38 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000180)={0xffffffff, 0x2, "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"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r0, r2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) name_to_handle_at(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x20, 0x7fffffff, "34282c30f3cc041020a817f5eed626274f439fc3989ef8d4"}, &(0x7f00000002c0), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r5, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) [ 306.960210] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 306.960218] RIP: 0033:0x45a6f9 [ 306.960223] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 306.960234] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 [ 306.960239] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 306.960244] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 306.960250] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 18:08:38 executing program 5 (fault-call:4 fault-nth:20): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) [ 306.960255] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 [ 307.146207] FAULT_INJECTION: forcing a failure. [ 307.146207] name failslab, interval 1, probability 0, space 0, times 0 [ 307.179682] CPU: 0 PID: 9482 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 307.187548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.196904] Call Trace: [ 307.199499] dump_stack+0x142/0x197 [ 307.203141] should_fail.cold+0x10f/0x159 [ 307.207297] should_failslab+0xdb/0x130 [ 307.211281] kmem_cache_alloc_node_trace+0x280/0x770 [ 307.216388] ? get_page_from_freelist+0x1145/0x2370 [ 307.221407] ? fs_reclaim_acquire+0x20/0x20 [ 307.225732] __kmalloc_node+0x3d/0x80 [ 307.229533] kvmalloc_node+0x4e/0xe0 [ 307.233277] seq_read+0x916/0x1280 [ 307.236856] ? __inode_security_revalidate+0xd6/0x130 [ 307.242074] ? seq_lseek+0x3c0/0x3c0 18:08:38 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) ioctl$FICLONE(r1, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 307.245793] ? avc_policy_seqno+0x9/0x20 [ 307.249854] ? selinux_file_permission+0x85/0x480 [ 307.254795] proc_reg_read+0xfa/0x170 [ 307.258767] ? seq_lseek+0x3c0/0x3c0 [ 307.262473] do_iter_read+0x3e2/0x5b0 [ 307.266276] vfs_readv+0xd3/0x130 [ 307.269715] ? compat_rw_copy_check_uvector+0x310/0x310 [ 307.275093] ? push_pipe+0x3e6/0x780 [ 307.278807] ? iov_iter_get_pages_alloc+0x2c9/0xef0 [ 307.283831] ? iov_iter_revert+0x9c0/0x9c0 [ 307.288085] ? iov_iter_pipe+0x9f/0x2c0 [ 307.292047] default_file_splice_read+0x421/0x870 [ 307.296875] ? __kmalloc+0x15d/0x7a0 [ 307.300574] ? alloc_pipe_info+0x15c/0x380 [ 307.304791] ? splice_direct_to_actor+0x5d2/0x7b0 [ 307.309614] ? do_splice_direct+0x18d/0x230 [ 307.313924] ? page_cache_pipe_buf_release+0x220/0x220 [ 307.319196] ? trace_hardirqs_on+0x10/0x10 [ 307.323417] ? save_trace+0x290/0x290 [ 307.327202] ? save_trace+0x290/0x290 [ 307.331010] ? rw_verify_area+0xea/0x2b0 [ 307.335057] ? page_cache_pipe_buf_release+0x220/0x220 [ 307.340329] do_splice_to+0x105/0x170 [ 307.344123] splice_direct_to_actor+0x222/0x7b0 [ 307.348779] ? generic_pipe_buf_nosteal+0x10/0x10 [ 307.353606] ? do_splice_to+0x170/0x170 [ 307.357578] ? rw_verify_area+0xea/0x2b0 [ 307.361635] do_splice_direct+0x18d/0x230 [ 307.365779] ? splice_direct_to_actor+0x7b0/0x7b0 [ 307.370636] ? rw_verify_area+0xea/0x2b0 [ 307.374691] do_sendfile+0x4db/0xbd0 [ 307.378392] ? do_compat_pwritev64+0x140/0x140 [ 307.382956] ? fput+0xd4/0x150 [ 307.386130] SyS_sendfile64+0x102/0x110 [ 307.390084] ? SyS_sendfile+0x130/0x130 [ 307.394047] ? do_syscall_64+0x53/0x640 [ 307.398018] ? SyS_sendfile+0x130/0x130 [ 307.401986] do_syscall_64+0x1e8/0x640 [ 307.405865] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.410812] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.416000] RIP: 0033:0x45a6f9 [ 307.419185] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 307.426986] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 [ 307.434244] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 18:08:38 executing program 5 (fault-call:4 fault-nth:21): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:08:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)) dup2(0xffffffffffffffff, r1) [ 307.441512] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 307.451033] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 [ 307.458381] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 [ 307.520931] FAULT_INJECTION: forcing a failure. [ 307.520931] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 307.532775] CPU: 1 PID: 9491 Comm: syz-executor.5 Not tainted 4.14.158-syzkaller #0 [ 307.540574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.550006] Call Trace: [ 307.552608] dump_stack+0x142/0x197 [ 307.556268] should_fail.cold+0x10f/0x159 [ 307.560435] __alloc_pages_nodemask+0x1d6/0x7a0 [ 307.565112] ? __alloc_pages_slowpath+0x2930/0x2930 [ 307.570144] cache_grow_begin+0x80/0x400 [ 307.574211] kmem_cache_alloc_node_trace+0x697/0x770 [ 307.579316] ? get_page_from_freelist+0x1145/0x2370 [ 307.584376] __kmalloc_node+0x3d/0x80 [ 307.588176] kvmalloc_node+0x4e/0xe0 [ 307.591890] seq_read+0x916/0x1280 [ 307.595439] ? __inode_security_revalidate+0xd6/0x130 [ 307.600628] ? seq_lseek+0x3c0/0x3c0 [ 307.604343] ? avc_policy_seqno+0x9/0x20 [ 307.608400] ? selinux_file_permission+0x85/0x480 [ 307.613250] proc_reg_read+0xfa/0x170 [ 307.617051] ? seq_lseek+0x3c0/0x3c0 [ 307.620765] do_iter_read+0x3e2/0x5b0 [ 307.624574] vfs_readv+0xd3/0x130 [ 307.628034] ? compat_rw_copy_check_uvector+0x310/0x310 [ 307.633573] ? push_pipe+0x3e6/0x780 [ 307.637287] ? iov_iter_get_pages_alloc+0x2c9/0xef0 [ 307.642311] ? iov_iter_revert+0x9c0/0x9c0 [ 307.646542] ? iov_iter_pipe+0x9f/0x2c0 [ 307.650608] default_file_splice_read+0x421/0x870 [ 307.655445] ? __kmalloc+0x15d/0x7a0 [ 307.659156] ? alloc_pipe_info+0x15c/0x380 [ 307.663383] ? splice_direct_to_actor+0x5d2/0x7b0 [ 307.663409] ? do_splice_direct+0x18d/0x230 [ 307.663424] ? page_cache_pipe_buf_release+0x220/0x220 [ 307.677861] ? trace_hardirqs_on+0x10/0x10 [ 307.682097] ? save_trace+0x290/0x290 [ 307.685891] ? save_trace+0x290/0x290 [ 307.689732] ? rw_verify_area+0xea/0x2b0 [ 307.689747] ? page_cache_pipe_buf_release+0x220/0x220 [ 307.699077] do_splice_to+0x105/0x170 [ 307.702884] splice_direct_to_actor+0x222/0x7b0 [ 307.707558] ? generic_pipe_buf_nosteal+0x10/0x10 [ 307.712407] ? do_splice_to+0x170/0x170 [ 307.716381] ? rw_verify_area+0xea/0x2b0 [ 307.716395] do_splice_direct+0x18d/0x230 [ 307.716408] ? splice_direct_to_actor+0x7b0/0x7b0 [ 307.716422] ? rw_verify_area+0xea/0x2b0 [ 307.723823] input: syz1 as /devices/virtual/input/input48 [ 307.724620] do_sendfile+0x4db/0xbd0 [ 307.724639] ? do_compat_pwritev64+0x140/0x140 [ 307.724650] ? fput+0xd4/0x150 [ 307.724661] SyS_sendfile64+0x102/0x110 [ 307.733548] ? SyS_sendfile+0x130/0x130 [ 307.733557] ? do_syscall_64+0x53/0x640 [ 307.733566] ? SyS_sendfile+0x130/0x130 [ 307.733577] do_syscall_64+0x1e8/0x640 18:08:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a99"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:38 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) ioctl$FICLONE(r1, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:38 executing program 5 (fault-call:4 fault-nth:22): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) [ 307.733586] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.733604] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.733612] RIP: 0033:0x45a6f9 [ 307.733616] RSP: 002b:00007f277efb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 307.733627] RAX: ffffffffffffffda RBX: 00007f277efb8c90 RCX: 000000000045a6f9 [ 307.733632] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 307.733638] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 307.733642] R10: 00000000800000bf R11: 0000000000000246 R12: 00007f277efb96d4 18:08:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 307.733649] R13: 00000000004c905a R14: 00000000004e0c50 R15: 0000000000000006 18:08:38 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = dup3(r0, r2, 0x80000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_void(r4, 0x1, 0x1b, 0x0, 0x0) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f0000000100)={0x44, 0x5, &(0x7f0000000080)="b76fb268df7ea28852a02f2f289a6eccb55220d386551153a7ec72b083cc832df130f02a81d73215c945ee2cfb3785a2e7c3323474108147c076e6d70d89404f53797393043130e62db62a2fab", {0x1, 0x6, 0xa0363159, 0x1, 0x2, 0x501, 0x19b1d583a2682c54, 0xab3e}}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r5, 0x0, 0x800800000c1) ioctl$SNDRV_TIMER_IOCTL_STATUS(r5, 0x80605414, &(0x7f0000000000)=""/65) 18:08:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a99"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) 18:08:38 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) ioctl$FICLONE(r1, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a99"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 308.017751] input: syz1 as /devices/virtual/input/input49 18:08:39 executing program 4: socketpair$unix(0x1, 0xd, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000001c0)={'veth1_to_bridge\x00', {0x2, 0x4e23, @multicast2}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) getpeername$unix(r0, &(0x7f0000000040), &(0x7f0000000180)=0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x0, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f00000005c0)=0x0) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000600)=r6) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) r7 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x3, 0x20000) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="000006ccc06231fec2de09e6650d0c003a6b000d03", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000240)={r9}, 0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000240)={0x5, 0x6, 0x201, 0xffff0000, 0x6, 0xffffff00, 0x9, 0x80000001, r9}, &(0x7f0000000280)=0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r10, 0x114, 0x7, &(0x7f00000004c0)={@nl=@proc={0x10, 0x0, 0x25dfdbff, 0xa1000}, {&(0x7f0000000400)=""/135, 0x87}, &(0x7f00000002c0), 0x1a}, 0xa0) write(r10, &(0x7f0000000340), 0x41395527) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x1, @loopback, 0x800}, @in6={0xa, 0x4e24, 0x3f2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in6={0xa, 0x4e21, 0x8, @empty, 0x97a}], 0x54) 18:08:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) 18:08:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 308.205415] input: syz1 as /devices/virtual/input/input50 18:08:39 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:39 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x4, @remote, 0x101}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000bdf8acfe8b202f3da31c0000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000240)={r6}, 0x14) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000240)={r8}, 0x14) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r8, 0x9}, 0x8) write(r3, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000000)={0x0, 0x200, 0x8001, 0x200}) 18:08:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[]}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) 18:08:39 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f42926"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 308.697308] input: syz1 as /devices/virtual/input/input51 18:08:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[]}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:39 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x4) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0x90) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x5, @local, 0x4}, @in6={0xa, 0x4e23, 0x78b, @rand_addr="04869187f5f4cf1310513d7cb60e634d", 0xe049}, @in6={0xa, 0x4e20, 0x7f, @dev={0xfe, 0x80, [], 0x24}, 0x4}], 0x54) 18:08:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f42926"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:39 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f42926"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb025"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb025"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[]}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:40 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) ioctl$FICLONE(r1, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:40 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) accept$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000040)={0x40, 0x20}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0x0, 0x7ff}) 18:08:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb025"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:40 executing program 0: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 309.704842] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 18:08:40 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1300000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}}, 0x4000000) r2 = add_key(&(0x7f0000000400)='pkcs7_test\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="ac0b4d16a7984f43d29fca1b709b3e2af7994f74c4e3da125767a723e7d7962b09a648c53b69b6c37f5de47ead514e467820ff6ce68267e98c810b9dff28afd2671d069b0cb58dcad27accdd6a7acd296b1e026a7aee0262ac208b9c36122e34684f46fe57df88f50b867513451c", 0x6e, 0xfffffffffffffff9) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="236c2406bd827e4b370e0d4dfade6fbda4ec22b71ebc49ff9a1206ba0bc20de5affa099dc6a0f0c077f61676e05a17778221fbdca708aa6098633fdf2d3580c89826f4d5116326288c6cc1a681888e14d7d31297901ba6d5f1f34fe55d9e85559d08497ba020c651ee87439d902fce859cba37dd293b18be0f6c6e430e3b95b51cb1097e00d4201b27b8b293d03880f83bb9bc9012145f608d1d3dffba0d3c", 0x9f}, {&(0x7f0000000240)="536939f5f092fbfe66570c4b14b3783a5cb836df52cc786605dea97039f6cbfa2e2fdab1f671be42296256e766f9f5ba4cf611b0602ea80283861f63d8fa02060462a476051c04ef5192d601a0c99969b309c3ebefc2ddbf6b0cb077ce5c6ba393f313beecceef0afe461569a731c933de5b8833832d6bb29cbc3d64a54fd40acc7365353a", 0x85}, {&(0x7f0000000040)="69e443849558d4e028e13c7571474a8595b0b16996c7eb7cb88f61ed9056e80a7581aeec78caed2776e6d1fac749d23afb2d17b86f59f9c4557ea55c4059695c83fdc27242e33e88c268a6031548b08d652084a1d773", 0x56}, {&(0x7f0000000340)="1533438b21fa803ca33465f7c87cc4a026452a315888f135588b013d54984468121e8534b42103088814caf621df311d4a8101602699b469ac2a6ae6ce62dfb6939ea3d983b647e29d9734f5ff5d70c8875733d0014c0150e089d5abb9b51ba5590504007100653a2333cbd52fc28fd218624104", 0x74}], 0x4, r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) msgrcv(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="000000000000000000000000000000005b784ff7658d8f3d03f430708045b516f90b0d52d4ff6ecd65ce8eea0cc6835202bb4dfed8c57dac76f8b30b9595159fca19dbee0b00"/83], 0x10, 0x3, 0x1800) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r6, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:40 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) ioctl$FICLONE(r1, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df85"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:40 executing program 0 (fault-call:5 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x1000}, 'syz1\x00', 0x1f}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:40 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) ioctl$FICLONE(r1, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[]}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:41 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x109001, 0x0) fadvise64(r0, 0xffff, 0x8001, 0x3) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x22401, 0x0) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000080), 0x2) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x1, 0x0) write$FUSE_ENTRY(r5, &(0x7f00000000c0)={0xfffffffffffffe13, 0x0, 0x7, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000}}}, 0xffffffffffffff3b) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x40010, r6, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f00000002c0)) modify_ldt$read_default(0x2, &(0x7f00000001c0)=""/219, 0xdb) 18:08:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:41 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x2}, 'syz1\x00', 0x1b}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x7f, 0xf8, 0x4, 0x3f, 0x20, 0x6, 0x62, 0x0, 0x1, 0x4}, 0xb) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000140)) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffe00, 0x101000) socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup2(r3, r2) 18:08:41 executing program 5: socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) sendfile(0xffffffffffffffff, r1, 0x0, 0x800000bf) 18:08:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 310.493101] device bridge_slave_1 left promiscuous mode [ 310.500437] bridge0: port 2(bridge_slave_1) entered disabled state 18:08:41 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 310.595103] device bridge_slave_0 left promiscuous mode [ 310.601167] bridge0: port 1(bridge_slave_0) entered disabled state 18:08:41 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 310.885975] device hsr_slave_1 left promiscuous mode 18:08:41 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 310.967598] device hsr_slave_0 left promiscuous mode [ 311.009432] team0 (unregistering): Port device team_slave_1 removed 18:08:42 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 311.079490] team0 (unregistering): Port device team_slave_0 removed [ 311.104721] bond0 (unregistering): Releasing backup interface bond_slave_1 18:08:42 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 311.165163] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 311.332558] bond0 (unregistering): Released all slaves 18:08:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:42 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:42 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x1, 0x2}}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r3, 0x0, 0x800000bf) [ 313.061458] IPVS: ftp: loaded support on port[0] = 21 [ 313.898797] chnl_net:caif_netlink_parms(): no params data found [ 313.933946] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.940424] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.947331] device bridge_slave_0 entered promiscuous mode [ 313.954388] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.961149] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.967969] device bridge_slave_1 entered promiscuous mode [ 313.984261] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 313.993668] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 314.008930] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 314.016300] team0: Port device team_slave_0 added [ 314.021832] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 314.028830] team0: Port device team_slave_1 added [ 314.034343] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 314.041875] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 314.093513] device hsr_slave_0 entered promiscuous mode [ 314.130467] device hsr_slave_1 entered promiscuous mode [ 314.200685] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 314.207791] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 314.220590] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.227026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.233688] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.240159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.269865] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 314.276533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.284704] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 314.293247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.300957] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.307672] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.317231] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 314.323465] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.332125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.339656] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.346065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.356844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.364464] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.370952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.386491] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 314.394487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 314.404401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 314.417396] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.427679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.438345] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 314.445355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.452911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 314.462443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 314.474413] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 314.482319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 314.488993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 314.499502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.890458] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 315.526285] input: syz1 as /devices/virtual/input/input52 [ 316.320767] input: syz1 as /devices/virtual/input/input53 18:08:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x4, 0x6, 0x5}}, 0x28) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={0x6}, 0x8, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r3, r2) 18:08:47 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0xa}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/deI\x1cnet/tun\x00', 0x610001, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r4, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:47 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:47 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000180)={0x8, 0x120, 0xfa00, {0x3, {0x800, 0xbc06, "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", 0x20, 0x38, 0x6, 0x6, 0x4, 0x1, 0x8}, r5}}, 0x128) setuid(r3) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r6, 0x0, 0x800000bf) 18:08:47 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 316.518622] input: syz1 as /devices/virtual/input/input54 18:08:47 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x319000, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r1, r3, 0x0, 0x800000bf) 18:08:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 316.703821] input: syz1 as /devices/virtual/input/input55 18:08:47 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x0, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0xfffffffffffffffe) 18:08:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) dup2(r3, r2) [ 316.856151] input: syz1 as /devices/virtual/input/input56 18:08:48 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000180)={0x6a, "874a7b022e36c16be7a44b026c7257b3b5177ce51a1cd2f85f616c26c1b2359ad33408c955718dc4226666bedf3dc4e9147a06f43026044727c718e6e3f96bf97c9590bab5864585df1987bcd797907537d9e5255562ce86a5fd1f285056d8b346ac5053cb89959ff926e6486ba0589a92e6886c55fb0fef7d332f272c0e781a"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3, 0x100) 18:08:48 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bf"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:48 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/dev_snmp6\x00') sendfile(r0, r4, 0x0, 0x800000bf) 18:08:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) write$vnet(r3, &(0x7f0000000240)={0x1, {&(0x7f00000000c0)=""/104, 0x68, &(0x7f0000000140)=""/204, 0xd432031ab3cdfb73, 0x2}}, 0x68) dup2(r2, r1) 18:08:48 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x90) 18:08:48 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 317.361565] input: syz1 as /devices/virtual/input/input58 18:08:48 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000000)={0x7fff, 0x1, 0x5, 0xffff}) sendfile(r0, r2, 0x0, 0x800000bf) 18:08:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:48 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$bt_hci(r6, 0x0, 0x95333e46993ffe39, &(0x7f0000000240)=""/168, &(0x7f0000000340)=0xa8) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x1014c0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000200)=0x10) write$input_event(0xffffffffffffffff, &(0x7f0000000080)={{r4, r5/1000+30000}, 0x3, 0x6d2, 0x2}, 0x18) 18:08:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a99"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:49 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000000)={'ip_vti0\x00'}) 18:08:49 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r3, r2) 18:08:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a99"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:49 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a99"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 318.306201] input: syz1 as /devices/virtual/input/input59 18:08:49 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r4, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:49 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:49 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x8) 18:08:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 319.083270] input: syz1 as /devices/virtual/input/input60 18:08:50 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:50 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93, {0x0, 0x0, 0x0, 0x2}}, 0x90) 18:08:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:50 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000100)={0x15c, 0x1e, &(0x7f0000000240)}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) write$dsp(r3, &(0x7f0000000000)="fd92b57f12f1d44b7261bb575e57098717d650f1d267943aa0ef1990e55f4baf83b7b2bf0725df27fc608c5fe2a8210eaf77125f33f5464b11986f6eaf60fd60e42ed1d178724c5aa2e2bdc5a8a034a8380d37507874c64422dfa7cc20a834e07f27555d97f6451561ccf3796bc507a52a4f9f4119d3cb5269039ec1064561a0cf4bbc20d8284d3c3238242422683ab600d28d296587c8f1b3bdbec5f4060f23a73aa0fc57cb30f67705776ad94ee23741c2536ff80a30e64058eb5cc3c407434957b775ca", 0xc5) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r1, r4, 0x0, 0x800000bf) 18:08:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000000c0)={0x3f, 0xb9, "ac0f27110e419aa926c8b878048cd0029f2ee196ba6bafcfd2bf3b74183283b0f99a3e3057d2088365a9a5675ea01f7700fe6a53cee0c0c6a6304e71ca0b435e08a55da6148513e41f917f53390e2ca461d5f69d9f7501f51e68ae3998ddbcded3c1c663c48345a4fd4942b80d9a4ed001910e0d16e3c2e955cf18e2475d33798a0336f67e187ad03538f38b5e99641d6e8717f1e022d4d4268de1bb5d73f35fca5a964494ca17e76c8670337dfac7eadc8d0a0ca0d3ee57ca"}) write(r1, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{0x1, 0x0, 0x6}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r4, r3) 18:08:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:50 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x43, 0x0, 0xffffff93}, 0x90) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) bind$unix(r4, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 18:08:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f42926"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:50 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, &(0x7f0000000140)}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, &(0x7f0000000140)}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f42926"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f42926"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:50 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @initdev}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) setfsuid(r3) 18:08:50 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, &(0x7f0000000140)}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb025"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb025"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0xb}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x3, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r3, r2) 18:08:51 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:51 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x3) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x440000, 0x0) socket$unix(0x1, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000040)={0x0, 0x8, 0x1, 0x0, 0x2, 0x8, 0x65, 0xff, 0x7ea, 0x3}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r3, 0x0, 0x800000bf) 18:08:51 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = dup3(r3, r0, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setscheduler(r6, 0x1, &(0x7f0000000240)=0x5) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r7, &(0x7f00000000c0)={0x90, 0xfffffffffffffff5, 0xffffff93, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x400000000000000}}}, 0x90) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0xbe}, 0x2) 18:08:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb025"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:51 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:51 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x17}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) 18:08:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:52 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:52 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r1, 0x0, 0x800000bf) 18:08:52 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x7, 0x80000000}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='i\x00\x14\x00\x00\x00\x00\x00\x17\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0xdaa3abfb0f522d66, 0x0) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000000240)=""/8) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000180)={{0x6, 0x0, @identifier="1fb0af197ed2d7ed59b7ab3b839f7453"}}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r6, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:52 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = dup3(r4, r6, 0x100000) ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f0000000040)={0x9, 0x8001}) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x40082, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) fcntl$lock(r4, 0x36, &(0x7f0000000180)={0x1, 0x4, 0x96d, 0x1, r9}) sendfile(r0, r8, 0x0, 0x800000bf) 18:08:52 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 321.124688] input: syz1 as /devices/virtual/input/input64 18:08:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:52 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x20800) pipe(&(0x7f0000000500)={0xffffffffffffffff}) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x101, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) dup2(r3, r2) 18:08:52 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000040)=0xb91, &(0x7f0000000080)=0x2) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r4, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:52 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:52 executing program 5: socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') 18:08:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 321.485437] input: syz1 as /devices/virtual/input/input66 18:08:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:52 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 322.282970] input: syz1 as /devices/virtual/input/input67 18:08:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) setuid(r2) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r4, r3) 18:08:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 18:08:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:53 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:53 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) r4 = socket(0xa, 0x1, 0x0) fstat(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/86, 0x56}, {&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000280)=""/56, 0x38}], 0x5, &(0x7f0000000440)=""/135, 0x87}, 0x10060) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000680)='/proc/capi/capi20\x00', 0x40000, 0x0) ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f00000006c0)) sendmsg$can_bcm(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r6}, 0x10, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="020000000200"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0400000001000000020000a02b00000089b54f4f3dad649148d1234fad113381d6a332cbfd7520632f19d12a060433c0d116b178d331b6767b253e2f859fa3a1899906d29f4504c9d21d5ebc7f1adfc052cf0e1eeb54956acbee17736bc450deb696bd64b0d74cc1321be9b299266b23e737d74fc281b6f13a226257451f3a521a9e0e9b4ac14347d45beb4a180324de18edd6a2948ee1ea8a2fbc3985b2056813c9520c74ed2889f61a29e8ef8ac0b60b7071fda6e03f2fab58db78de29c9a3c760543b6c9b63d5f61a08a47b0344f2aeace6a913c658eeda23d83d44f85a2be992ed7db3f3653f63378af8bc28"], 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x40005) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0xfffffffffffffff5, 0xffffff93, {0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x4}}}, 0x90) 18:08:53 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0xfffffffffffffc4e, &(0x7f0000000400)={0x5}) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x1080, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x8800}, 0x80) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') mkdir(&(0x7f0000000480)='./file1\x00', 0x5) sendfile(r0, r7, 0x0, 0x800000bf) 18:08:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 18:08:53 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:53 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xfffffffffffffe4e) setresuid(0x0, r5, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0xffffffffffffffda, 0xffffff93, {0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0xfffffffe, {0x2, 0x0, 0x0, 0x80000000, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, r5, 0x0, 0x3}}}, 0x90) [ 322.519871] input: syz1 as /devices/virtual/input/input68 18:08:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 18:08:53 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bf"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:53 executing program 3: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:53 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') write$P9_RLERROR(r2, &(0x7f0000000040)={0x16, 0x7, 0x2, {0xd, '/dev/net/tun\x00'}}, 0x16) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x400, 0x0) sendfile(r0, r3, 0x0, 0x800000bf) 18:08:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:53 executing program 3: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:53 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000240)=@ccm_128={{}, "ffdc0b4c7ac99d90", "aa5fdf74c837ee9d63132bde064763c5", "5c47a83c", "546f308bbb0508a3"}, 0x28) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r2 = accept$ax25(r0, 0x0, &(0x7f0000000040)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r6) write$FUSE_ENTRY(r5, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93, {0x0, 0x0, 0x88d, 0x80000, 0x0, 0xfffffffc, {0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0x90) 18:08:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:53 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = open(&(0x7f0000000000)='./file1\x00', 0x17d980, 0x8) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000080)={0x0, 0x2006, 0x9, &(0x7f0000000040)=0x6}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) splice(r5, &(0x7f00000000c0)=0x8, r6, &(0x7f0000000100)=0x401, 0x20, 0x2) sendfile(r0, r3, 0x0, 0x800000bf) 18:08:53 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) dup2(r3, r2) 18:08:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 323.157150] input: syz1 as /devices/virtual/input/input69 18:08:54 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:54 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x1, 0x10200) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r3, 0xae80, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1f37796b43558549) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xf8b, 0x49cb}) syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x1d003, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xa76) sendfile(r0, r5, 0x0, 0x800000bf) 18:08:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) dup2(r3, r2) 18:08:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 323.489036] input: syz1 as /devices/virtual/input/input70 18:08:54 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) setitimer(0x2, &(0x7f0000000040), &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:54 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:54 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) socketpair(0x8, 0x0, 0xfa, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000040)={r0, r2, 0x7, 0x1000, &(0x7f0000000180)="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", 0x3, 0x1, 0x6, 0x5fc6, 0x1, 0x1, 0x2a, 'syz1\x00'}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0xfffffff8) bind$unix(r3, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r4, 0x0, 0x800000bf) 18:08:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) dup2(r3, r2) 18:08:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 323.855481] input: syz1 as /devices/virtual/input/input71 18:08:54 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000280)={0x7, 0xfffffff8, 0x1, 0xf8, &(0x7f0000000180)=""/248, 0x7c, &(0x7f0000000040)=""/124, 0xd5, &(0x7f0000000340)=""/213}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$binfmt_elf64(r6, &(0x7f0000000700)=ANY=[@ANYBLOB="7f454c4640400008020000000000000001003622e00ec5b38f8ea03e00ff000000d70200c000000000400000000000000087010000000000000300000000f6e80d9b3e19252af600380001009f2aff0f0900030000000000000002000000000000000400000000000000000000000000000000000000000000000200000000000000ff0100000000000000000060c0ffffffad38000000000000ff0300000000000007000000000000006ea8000000000000010000000000000005000000000000003a27dff9e6a706f698ddf7"], 0xbb) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$CAN_RAW_FILTER(r11, 0x65, 0x1, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=0x38) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r14, 0x407, 0x0) write(r14, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000100001000000", @ANYRES32=r13, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x3}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000010be4c3782d0629938078822a07d753a000104000100000000000000000000409f7dadb41f76a2446ca0bc03a2eede3d407e84f8e386c5a878fb81b218", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r13], 0x28}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010002b040000000000000000000000003a58c20839191b0828420425ef4d4f5e026e29cba82f0cc48aedc8e5d53f888f4efd7be002c02a6b8e1c25f259d7dc71dd1abdeb06d6434a44da20054afa8e4364d06e1aa1d956c4bdff2b611e2012b72b07018f57ab4fab74d50ed036e12cb1aca5", @ANYRES32=r13, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800190008000000"], 0x3c}}, 0x0) r15 = getpid() sched_setattr(r15, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) rt_tgsigqueueinfo(0x0, r15, 0x35, &(0x7f0000000540)={0x19, 0xbd, 0x5e69}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000019c0)={0x0, @sco={0x1f, {0x7, 0x1, 0x6, 0x0, 0x8c}}, @tipc=@id={0x1e, 0x3, 0x0, {0x1004e21, 0x3}}, @hci={0x1f, r13, 0x3}, 0x2d1e, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001980)='batadv0\x00', 0xffffffffffffffff, 0x2, 0x4}) sendmsg$can_raw(r3, &(0x7f0000001b00)={&(0x7f0000001a40)={0x1d, r16}, 0x10, &(0x7f0000001ac0)={&(0x7f0000001a80)=@can={{0x0, 0x1, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "0d82cf7672253203"}, 0x10}, 0x1, 0x0, 0x0, 0x88}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r17 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r17, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:54 executing program 3: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:55 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, &(0x7f0000000140)}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, &(0x7f0000000140)}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x2}, 'syz1\x00', 0x1b}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x7f, 0xf8, 0x4, 0x3f, 0x20, 0x6, 0x62, 0x0, 0x1, 0x4}, 0xb) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000140)) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffe00, 0x101000) socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup2(r3, r2) [ 324.254407] selinux_nlmsg_perm: 5 callbacks suppressed [ 324.254420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48656 sclass=netlink_route_socket pig=10232 comm=syz-executor.4 [ 324.300747] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, &(0x7f0000000140)}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 324.443259] input: syz1 as /devices/virtual/input/input72 18:08:55 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) 18:08:55 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:55 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000180)={0x4, 0x0, [{}, {}, {}, {}]}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93, {0x0, 0xffffffffffffffff}}, 0x90) 18:08:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000040)=0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000080)=r2) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000000c0)=r2) r3 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r4, r3) 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:55 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x0, './file1\x00'}, 0x23) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r3, 0x0, 0x800000bf) 18:08:55 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:55 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0xa00000bf) [ 324.853717] input: syz1 as /devices/virtual/input/input73 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x2}, 'syz1\x00', 0x1b}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x7f, 0xf8, 0x4, 0x3f, 0x20, 0x6, 0x62, 0x0, 0x1, 0x4}, 0xb) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000140)) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffe00, 0x101000) socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup2(r3, r2) 18:08:56 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) write(r1, &(0x7f0000000040)="3294d944589d5431eddc905b", 0xc) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="000011000103a0997c0707000104ab01bebbe600355d0ecfa0f3b9c0bcfcc7e10048923b048746c98b9d2211b761c05b11e7f82c259c41d4c0ae990aca9f3643cd6d168181232b66dbb3d80b648a383d9edfb792ef39d1677f755a4e0e7a3c18ad5ccebf2d6c2535587b4160fe76a2c5d5aa307a0a10bc9c063d273be46534181e52190f73424e04084fe4131bf3d68609a1210bdeb5225df04144d0c74a7d381a894a71c3e01fc6459c32d7dc430dd8ba2953dd1d393d853413cae458647687c3ce3093998e361430863ce31e830af6ffd2316738658cd165419ee38c19e6e3efed34ce7290f3b23ea0271389b42c29857b853700"/269], 0x100) 18:08:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:56 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:56 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000180)={r0, 0x7, 0x7, "26ffcdb75cd3fa4cdad8652ea914dad9651cc4db3e0784040e63b47107b856f252b071f840039c17b3f8491fe2bf52166dccd5b0b6410d6fd5eb92b167ac00606a63cc462f580d9d152a703c30244d876772eed2327b34549d9d48a016a4ad6800d53fe0f535d592f030e0ade6f1990cd8a8b3cf73be8377b49add946d51399ea9449d78f26e97d4cd54"}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r4 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000000c0)=0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000240)={r6}, 0x14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r6}, 0x14) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r3, 0x6}, 0x8) r7 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$VFIO_IOMMU_GET_INFO(r8, 0x3b70, &(0x7f0000000100)={0x10}) bind$unix(r7, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r9, 0x0, 0x800000bf) 18:08:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 325.289130] Unknown ioctl 1074021064 [ 325.304804] input: syz1 as /devices/virtual/input/input74 [ 325.682519] input: syz1 as /devices/virtual/input/input75 18:08:56 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000a4f000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000680)=""/213) r4 = getgid() stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000200)={{0x3, 0x0, r4, r5, r7, 0x2, 0x3}, 0x7, 0x6, 0x2, 0xffff, r8, r9, 0x100}) 18:08:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 325.940210] input: syz1 as /devices/virtual/input/input76 18:08:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x2}, 'syz1\x00', 0x1b}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x7f, 0xf8, 0x4, 0x3f, 0x20, 0x6, 0x62, 0x0, 0x1, 0x4}, 0xb) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000140)) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffe00, 0x101000) socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup2(r3, r2) 18:08:57 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x602c0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r1, r3, 0x0, 0x800000bf) 18:08:57 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:57 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r3}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(r7, 0xc008ae91, &(0x7f0000000180)={0x2, 0x0, [{}, {}]}) 18:08:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 18:08:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) [ 326.214076] input: syz1 as /devices/virtual/input/input77 18:08:57 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 18:08:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x6, 0x80000000) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r3, r2) 18:08:57 executing program 1 (fault-call:3 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:57 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 326.811114] input: syz1 as /devices/virtual/input/input78 [ 326.834720] FAULT_INJECTION: forcing a failure. [ 326.834720] name failslab, interval 1, probability 0, space 0, times 0 [ 326.863924] CPU: 0 PID: 10363 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 326.871847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.881201] Call Trace: [ 326.883797] dump_stack+0x142/0x197 [ 326.887433] should_fail.cold+0x10f/0x159 [ 326.891585] should_failslab+0xdb/0x130 [ 326.895553] kmem_cache_alloc_node+0x287/0x780 [ 326.900136] ? __lock_acquire+0x5f7/0x4620 [ 326.904412] __alloc_skb+0x9c/0x500 [ 326.908032] ? skb_trim+0x180/0x180 [ 326.911759] alloc_skb_with_frags+0x86/0x4b0 [ 326.916162] ? avc_has_perm+0x273/0x4b0 [ 326.920141] sock_alloc_send_pskb+0x5db/0x740 [ 326.924647] ? sock_wmalloc+0xf0/0xf0 [ 326.928451] ? do_raw_spin_unlock+0x16b/0x260 [ 326.932934] ? _raw_spin_unlock+0x2d/0x50 [ 326.937154] unix_dgram_sendmsg+0x34c/0xf80 [ 326.941470] ? sock_has_perm+0x1ed/0x280 [ 326.945515] ? unix_dgram_connect+0x700/0x700 [ 326.949992] unix_seqpacket_sendmsg+0xf3/0x160 [ 326.954558] ? unix_dgram_sendmsg+0xf80/0xf80 [ 326.959042] sock_sendmsg+0xce/0x110 [ 326.962734] ___sys_sendmsg+0x349/0x840 [ 326.966687] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 326.971425] ? find_held_lock+0x35/0x130 [ 326.975467] ? __fget+0x210/0x370 [ 326.978903] ? lock_downgrade+0x740/0x740 [ 326.983036] ? __fget+0x237/0x370 [ 326.986471] ? __fdget+0x1b/0x20 [ 326.989868] ? sockfd_lookup_light+0xb4/0x160 [ 326.994344] __sys_sendmmsg+0x152/0x3a0 [ 326.998297] ? SyS_sendmsg+0x50/0x50 [ 327.002041] ? lock_downgrade+0x740/0x740 [ 327.006374] ? __mutex_unlock_slowpath+0x71/0x800 [ 327.011198] ? check_preemption_disabled+0x3c/0x250 [ 327.016193] ? wait_for_completion+0x420/0x420 [ 327.020759] ? __sb_end_write+0xc1/0x100 [ 327.024801] ? SyS_write+0x15e/0x230 [ 327.028494] SyS_sendmmsg+0x35/0x60 [ 327.032104] ? __sys_sendmmsg+0x3a0/0x3a0 [ 327.036232] do_syscall_64+0x1e8/0x640 [ 327.040109] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.044979] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 327.050184] RIP: 0033:0x45a6f9 [ 327.053351] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 18:08:58 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 327.061035] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 327.068282] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 327.075545] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 327.082794] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 327.090048] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 18:08:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x2}, 'syz1\x00', 0x1b}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x7f, 0xf8, 0x4, 0x3f, 0x20, 0x6, 0x62, 0x0, 0x1, 0x4}, 0xb) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000140)) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffe00, 0x101000) socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) dup2(r3, r2) 18:08:58 executing program 5: socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000000)={0x7f, 0x0, 0x7ff, 'queue1\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x1f) 18:08:58 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:08:58 executing program 1 (fault-call:3 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 327.224640] input: syz1 as /devices/virtual/input/input79 [ 327.271664] FAULT_INJECTION: forcing a failure. [ 327.271664] name failslab, interval 1, probability 0, space 0, times 0 [ 327.296857] CPU: 0 PID: 10383 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 327.304780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.314138] Call Trace: [ 327.316730] dump_stack+0x142/0x197 [ 327.316751] should_fail.cold+0x10f/0x159 [ 327.324512] should_failslab+0xdb/0x130 [ 327.324527] kmem_cache_alloc_node_trace+0x280/0x770 [ 327.333594] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 327.333611] __kmalloc_node_track_caller+0x3d/0x80 [ 327.333626] __kmalloc_reserve.isra.0+0x40/0xe0 [ 327.333637] __alloc_skb+0xcf/0x500 [ 327.333647] ? skb_trim+0x180/0x180 [ 327.333660] alloc_skb_with_frags+0x86/0x4b0 [ 327.333670] ? avc_has_perm+0x273/0x4b0 [ 327.333686] sock_alloc_send_pskb+0x5db/0x740 18:08:58 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 327.333701] ? sock_wmalloc+0xf0/0xf0 [ 327.333714] ? do_raw_spin_unlock+0x16b/0x260 [ 327.333728] ? _raw_spin_unlock+0x2d/0x50 [ 327.352352] unix_dgram_sendmsg+0x34c/0xf80 [ 327.352368] ? sock_has_perm+0x1ed/0x280 [ 327.352386] ? unix_dgram_connect+0x700/0x700 [ 327.352403] unix_seqpacket_sendmsg+0xf3/0x160 [ 327.352412] ? unix_dgram_sendmsg+0xf80/0xf80 [ 327.352423] sock_sendmsg+0xce/0x110 [ 327.352431] ___sys_sendmsg+0x349/0x840 [ 327.352441] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 327.352455] ? find_held_lock+0x35/0x130 [ 327.352467] ? __fget+0x210/0x370 [ 327.352482] ? lock_downgrade+0x740/0x740 [ 327.352495] ? __fget+0x237/0x370 [ 327.352510] ? __fdget+0x1b/0x20 [ 327.352522] ? sockfd_lookup_light+0xb4/0x160 [ 327.352533] __sys_sendmmsg+0x152/0x3a0 [ 327.352545] ? SyS_sendmsg+0x50/0x50 [ 327.365435] input: syz1 as /devices/virtual/input/input80 [ 327.369007] ? lock_downgrade+0x740/0x740 [ 327.369025] ? __mutex_unlock_slowpath+0x71/0x800 [ 327.369038] ? check_preemption_disabled+0x3c/0x250 [ 327.465938] ? wait_for_completion+0x420/0x420 [ 327.470514] ? __sb_end_write+0xc1/0x100 [ 327.474564] ? SyS_write+0x15e/0x230 [ 327.478268] SyS_sendmmsg+0x35/0x60 [ 327.481884] ? __sys_sendmmsg+0x3a0/0x3a0 [ 327.486030] do_syscall_64+0x1e8/0x640 [ 327.489905] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.494745] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 327.499916] RIP: 0033:0x45a6f9 [ 327.503098] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 327.510801] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 18:08:58 executing program 1 (fault-call:3 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 327.518060] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 327.525454] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 327.532709] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 327.539968] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 18:08:58 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000740)={0x4, {{0x2, 0x4e21, @broadcast}}}, 0x88) clock_gettime(0x2d5548f4bbc09a8c, &(0x7f0000000280)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/de\x89/net/tun\x00', 0x24400, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x6, &(0x7f00000001c0)=[{0x800, 0x5, 0xf8, 0x8f7}, {0x3f, 0x7, 0x40, 0x4}, {0x7f, 0x8, 0x6, 0x1}, {0x3f, 0xf1, 0x5, 0x942}, {0x1, 0x40, 0x1, 0xd5}, {0x400, 0x8, 0x1, 0x3}]}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000040)={0x99, 0x1b, &(0x7f0000000340)}) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000800)=0x7, 0x4) dup3(r1, r2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000180)={0x2, 0x2, 0x8, 0x2, 0x1ff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400204) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r5, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) set_tid_address(&(0x7f00000002c0)) 18:08:58 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000100)={0x0, 0x7fffffff, 0x83, &(0x7f00000000c0)=0x7}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x4, 0x128042) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r3, r2) [ 327.625520] FAULT_INJECTION: forcing a failure. [ 327.625520] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 327.637367] CPU: 1 PID: 10401 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 327.645251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.654604] Call Trace: [ 327.657202] dump_stack+0x142/0x197 [ 327.660848] should_fail.cold+0x10f/0x159 [ 327.665005] __alloc_pages_nodemask+0x1d6/0x7a0 [ 327.669674] ? fs_reclaim_acquire+0x20/0x20 [ 327.674005] ? __alloc_pages_slowpath+0x2930/0x2930 [ 327.679034] cache_grow_begin+0x80/0x400 [ 327.683148] kmem_cache_alloc_node_trace+0x697/0x770 [ 327.688264] __kmalloc_node_track_caller+0x3d/0x80 [ 327.693196] __kmalloc_reserve.isra.0+0x40/0xe0 [ 327.697865] __alloc_skb+0xcf/0x500 [ 327.701486] ? skb_trim+0x180/0x180 [ 327.705116] alloc_skb_with_frags+0x86/0x4b0 [ 327.709524] ? avc_has_perm+0x273/0x4b0 [ 327.713518] sock_alloc_send_pskb+0x5db/0x740 [ 327.718031] ? sock_wmalloc+0xf0/0xf0 [ 327.721839] ? do_raw_spin_unlock+0x16b/0x260 [ 327.726339] ? _raw_spin_unlock+0x2d/0x50 [ 327.730495] unix_dgram_sendmsg+0x34c/0xf80 [ 327.734892] ? sock_has_perm+0x1ed/0x280 [ 327.738944] ? unix_dgram_connect+0x700/0x700 [ 327.743442] unix_seqpacket_sendmsg+0xf3/0x160 [ 327.748037] ? unix_dgram_sendmsg+0xf80/0xf80 [ 327.752529] sock_sendmsg+0xce/0x110 [ 327.756237] ___sys_sendmsg+0x349/0x840 [ 327.760240] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 327.764986] ? find_held_lock+0x35/0x130 [ 327.769042] ? __fget+0x210/0x370 [ 327.772490] ? lock_downgrade+0x740/0x740 [ 327.776869] ? __fget+0x237/0x370 [ 327.780350] ? __fdget+0x1b/0x20 [ 327.783740] ? sockfd_lookup_light+0xb4/0x160 [ 327.788217] __sys_sendmmsg+0x152/0x3a0 [ 327.792180] ? SyS_sendmsg+0x50/0x50 [ 327.795887] ? lock_downgrade+0x740/0x740 [ 327.800035] ? __mutex_unlock_slowpath+0x71/0x800 [ 327.804868] ? check_preemption_disabled+0x3c/0x250 [ 327.809877] ? wait_for_completion+0x420/0x420 [ 327.814459] ? __sb_end_write+0xc1/0x100 [ 327.818509] ? SyS_write+0x15e/0x230 [ 327.822219] SyS_sendmmsg+0x35/0x60 [ 327.825830] ? __sys_sendmmsg+0x3a0/0x3a0 [ 327.829973] do_syscall_64+0x1e8/0x640 [ 327.833863] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.838789] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 327.843970] RIP: 0033:0x45a6f9 [ 327.847139] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 327.854844] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 327.862100] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 327.869369] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 18:08:58 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:58 executing program 1 (fault-call:3 fault-nth:3): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 327.876633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 327.883887] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 [ 327.919555] input: syz1 as /devices/virtual/input/input81 [ 327.939210] FAULT_INJECTION: forcing a failure. [ 327.939210] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 327.957881] CPU: 0 PID: 10412 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 327.965791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.975145] Call Trace: [ 327.977740] dump_stack+0x142/0x197 [ 327.981379] should_fail.cold+0x10f/0x159 [ 327.985541] __alloc_pages_nodemask+0x1d6/0x7a0 [ 327.990217] ? __alloc_pages_slowpath+0x2930/0x2930 [ 327.995239] ? __alloc_skb+0x3ee/0x500 [ 327.999129] alloc_pages_current+0xec/0x1e0 [ 328.003449] alloc_skb_with_frags+0x157/0x4b0 [ 328.007939] ? avc_has_perm+0x273/0x4b0 [ 328.011915] sock_alloc_send_pskb+0x5db/0x740 [ 328.016418] ? sock_wmalloc+0xf0/0xf0 [ 328.020219] ? do_raw_spin_unlock+0x16b/0x260 [ 328.024713] ? _raw_spin_unlock+0x2d/0x50 [ 328.028860] unix_dgram_sendmsg+0x34c/0xf80 [ 328.033180] ? sock_has_perm+0x1ed/0x280 [ 328.037246] ? unix_dgram_connect+0x700/0x700 [ 328.041746] unix_seqpacket_sendmsg+0xf3/0x160 [ 328.046324] ? unix_dgram_sendmsg+0xf80/0xf80 [ 328.050815] sock_sendmsg+0xce/0x110 [ 328.054527] ___sys_sendmsg+0x349/0x840 [ 328.058501] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 328.063255] ? find_held_lock+0x35/0x130 [ 328.067321] ? __fget+0x210/0x370 [ 328.070782] ? lock_downgrade+0x740/0x740 [ 328.074936] ? __fget+0x237/0x370 [ 328.078399] ? __fdget+0x1b/0x20 [ 328.081775] ? sockfd_lookup_light+0xb4/0x160 [ 328.086266] __sys_sendmmsg+0x152/0x3a0 [ 328.090230] ? SyS_sendmsg+0x50/0x50 [ 328.093938] ? lock_downgrade+0x740/0x740 [ 328.098080] ? __mutex_unlock_slowpath+0x71/0x800 [ 328.102968] ? check_preemption_disabled+0x3c/0x250 [ 328.107975] ? wait_for_completion+0x420/0x420 [ 328.112551] ? __sb_end_write+0xc1/0x100 [ 328.116644] ? SyS_write+0x15e/0x230 [ 328.120356] SyS_sendmmsg+0x35/0x60 [ 328.123971] ? __sys_sendmmsg+0x3a0/0x3a0 [ 328.128108] do_syscall_64+0x1e8/0x640 [ 328.131995] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 328.136871] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 328.142048] RIP: 0033:0x45a6f9 [ 328.146172] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 328.153883] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 328.161144] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 18:08:59 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x2}, 'syz1\x00', 0x1b}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x7f, 0xf8, 0x4, 0x3f, 0x20, 0x6, 0x62, 0x0, 0x1, 0x4}, 0xb) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000140)) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffe00, 0x101000) socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) dup2(r3, r2) [ 328.168404] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 328.175654] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 328.182905] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 18:08:59 executing program 1 (fault-call:3 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:59 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file1\x00'}, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r3, 0x0, 0x800000bf) [ 328.263906] input: syz1 as /devices/virtual/input/input82 [ 328.278532] FAULT_INJECTION: forcing a failure. [ 328.278532] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 328.314851] CPU: 0 PID: 10427 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 328.322769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.332126] Call Trace: [ 328.334717] dump_stack+0x142/0x197 [ 328.338359] should_fail.cold+0x10f/0x159 [ 328.342512] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 328.347974] __alloc_pages_nodemask+0x1d6/0x7a0 [ 328.352652] ? __alloc_pages_slowpath+0x2930/0x2930 [ 328.357672] ? __alloc_skb+0x3ee/0x500 [ 328.361660] alloc_pages_current+0xec/0x1e0 [ 328.367458] alloc_skb_with_frags+0x157/0x4b0 [ 328.371950] ? avc_has_perm+0x273/0x4b0 [ 328.375935] sock_alloc_send_pskb+0x5db/0x740 [ 328.380612] ? sock_wmalloc+0xf0/0xf0 [ 328.384412] ? do_raw_spin_unlock+0x16b/0x260 [ 328.388906] ? _raw_spin_unlock+0x2d/0x50 [ 328.393059] unix_dgram_sendmsg+0x34c/0xf80 [ 328.397380] ? sock_has_perm+0x1ed/0x280 [ 328.401446] ? unix_dgram_connect+0x700/0x700 [ 328.405953] unix_seqpacket_sendmsg+0xf3/0x160 [ 328.410539] ? unix_dgram_sendmsg+0xf80/0xf80 [ 328.415034] sock_sendmsg+0xce/0x110 [ 328.418747] ___sys_sendmsg+0x349/0x840 [ 328.422717] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 328.427470] ? find_held_lock+0x35/0x130 [ 328.431530] ? __fget+0x210/0x370 [ 328.434987] ? lock_downgrade+0x740/0x740 [ 328.435002] ? __fget+0x237/0x370 [ 328.442742] ? __fdget+0x1b/0x20 [ 328.446114] ? sockfd_lookup_light+0xb4/0x160 [ 328.446125] __sys_sendmmsg+0x152/0x3a0 [ 328.446140] ? SyS_sendmsg+0x50/0x50 [ 328.458310] ? lock_downgrade+0x740/0x740 [ 328.462449] input: syz1 as /devices/virtual/input/input83 [ 328.462459] ? __mutex_unlock_slowpath+0x71/0x800 [ 328.462472] ? check_preemption_disabled+0x3c/0x250 [ 328.477844] ? wait_for_completion+0x420/0x420 [ 328.482432] ? __sb_end_write+0xc1/0x100 [ 328.486514] ? SyS_write+0x15e/0x230 [ 328.486531] SyS_sendmmsg+0x35/0x60 [ 328.493837] ? __sys_sendmmsg+0x3a0/0x3a0 [ 328.493850] do_syscall_64+0x1e8/0x640 [ 328.493860] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 328.506694] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 328.511874] RIP: 0033:0x45a6f9 18:08:59 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:08:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r3 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) setsockopt$inet_mreqn(r5, 0x0, 0xf707afe57f2e2f28, &(0x7f00000001c0)={@multicast2, @multicast2, r8}, 0xc) write$FUSE_ENTRY(r4, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) [ 328.515159] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 328.522970] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 328.530233] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 328.537507] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 328.544893] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 328.552149] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 18:08:59 executing program 1 (fault-call:3 fault-nth:5): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:08:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x212202, 0x0) futimesat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {0x77359400}}) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000680)=""/213) shmctl$SHM_UNLOCK(0x0, 0xc) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r3, r1) [ 328.678208] FAULT_INJECTION: forcing a failure. [ 328.678208] name failslab, interval 1, probability 0, space 0, times 0 [ 328.694954] CPU: 1 PID: 10448 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 328.702858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.712209] Call Trace: [ 328.714800] dump_stack+0x142/0x197 [ 328.718438] should_fail.cold+0x10f/0x159 [ 328.722589] should_failslab+0xdb/0x130 18:08:59 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 328.726559] kmem_cache_alloc_node+0x287/0x780 [ 328.731160] ? __lock_acquire+0x5f7/0x4620 [ 328.735406] __alloc_skb+0x9c/0x500 [ 328.739034] ? skb_trim+0x180/0x180 [ 328.742671] alloc_skb_with_frags+0x86/0x4b0 [ 328.747083] ? avc_has_perm+0x273/0x4b0 [ 328.751068] sock_alloc_send_pskb+0x5db/0x740 [ 328.755593] ? sock_wmalloc+0xf0/0xf0 [ 328.759378] ? do_raw_spin_unlock+0x16b/0x260 [ 328.763857] ? _raw_spin_unlock+0x2d/0x50 [ 328.767994] unix_dgram_sendmsg+0x34c/0xf80 [ 328.772307] ? sock_has_perm+0x1ed/0x280 [ 328.776358] ? unix_dgram_connect+0x700/0x700 [ 328.780882] unix_seqpacket_sendmsg+0xf3/0x160 [ 328.785529] ? unix_dgram_sendmsg+0xf80/0xf80 [ 328.790006] sock_sendmsg+0xce/0x110 [ 328.793717] ___sys_sendmsg+0x349/0x840 [ 328.797696] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 328.802444] ? trace_hardirqs_on+0x10/0x10 [ 328.806722] ? save_trace+0x290/0x290 [ 328.810532] ? __might_fault+0x110/0x1d0 [ 328.814579] ? find_held_lock+0x35/0x130 [ 328.818624] ? __might_fault+0x110/0x1d0 [ 328.822676] __sys_sendmmsg+0x152/0x3a0 [ 328.826634] ? SyS_sendmsg+0x50/0x50 [ 328.830328] ? lock_downgrade+0x740/0x740 [ 328.834504] ? __mutex_unlock_slowpath+0x71/0x800 [ 328.839330] ? check_preemption_disabled+0x3c/0x250 [ 328.844327] ? wait_for_completion+0x420/0x420 [ 328.848893] ? __sb_end_write+0xc1/0x100 [ 328.852939] ? SyS_write+0x15e/0x230 [ 328.856647] SyS_sendmmsg+0x35/0x60 [ 328.860261] ? __sys_sendmmsg+0x3a0/0x3a0 [ 328.864391] do_syscall_64+0x1e8/0x640 [ 328.868368] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 328.873205] entry_SYSCALL_64_after_hwframe+0x42/0xb7 18:08:59 executing program 1 (fault-call:3 fault-nth:6): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 328.878385] RIP: 0033:0x45a6f9 [ 328.881565] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 328.889256] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 328.896515] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 328.903764] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 328.911034] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 328.918295] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 [ 328.961888] FAULT_INJECTION: forcing a failure. [ 328.961888] name failslab, interval 1, probability 0, space 0, times 0 [ 328.982999] CPU: 1 PID: 10456 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 328.990994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.000357] Call Trace: [ 329.002981] dump_stack+0x142/0x197 [ 329.006615] should_fail.cold+0x10f/0x159 [ 329.010775] should_failslab+0xdb/0x130 [ 329.014750] kmem_cache_alloc_node_trace+0x280/0x770 [ 329.019858] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 329.025312] __kmalloc_node_track_caller+0x3d/0x80 [ 329.030247] __kmalloc_reserve.isra.0+0x40/0xe0 [ 329.034941] __alloc_skb+0xcf/0x500 [ 329.038565] ? skb_trim+0x180/0x180 [ 329.042194] alloc_skb_with_frags+0x86/0x4b0 [ 329.046700] ? avc_has_perm+0x273/0x4b0 [ 329.050682] sock_alloc_send_pskb+0x5db/0x740 [ 329.055181] ? sock_wmalloc+0xf0/0xf0 18:09:00 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 329.058985] ? do_raw_spin_unlock+0x16b/0x260 [ 329.063478] ? _raw_spin_unlock+0x2d/0x50 [ 329.067641] unix_dgram_sendmsg+0x34c/0xf80 [ 329.071968] ? sock_has_perm+0x1ed/0x280 [ 329.076030] ? unix_dgram_connect+0x700/0x700 [ 329.080530] unix_seqpacket_sendmsg+0xf3/0x160 [ 329.085118] ? unix_dgram_sendmsg+0xf80/0xf80 [ 329.089621] sock_sendmsg+0xce/0x110 [ 329.093336] ___sys_sendmsg+0x349/0x840 [ 329.097400] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 329.102168] ? trace_hardirqs_on+0x10/0x10 [ 329.106405] ? save_trace+0x290/0x290 18:09:00 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0xfb440) socket$isdn(0x22, 0x3, 0x3) [ 329.110207] ? __might_fault+0x110/0x1d0 [ 329.110219] ? find_held_lock+0x35/0x130 [ 329.110228] ? __might_fault+0x110/0x1d0 [ 329.110252] __sys_sendmmsg+0x152/0x3a0 [ 329.118354] ? SyS_sendmsg+0x50/0x50 [ 329.118369] ? lock_downgrade+0x740/0x740 [ 329.118387] ? __mutex_unlock_slowpath+0x71/0x800 [ 329.118399] ? check_preemption_disabled+0x3c/0x250 [ 329.144101] ? wait_for_completion+0x420/0x420 [ 329.148806] ? __sb_end_write+0xc1/0x100 [ 329.152877] ? SyS_write+0x15e/0x230 [ 329.156594] SyS_sendmmsg+0x35/0x60 18:09:00 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file1\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r1, 0x0, 0x800000bf) [ 329.160214] ? __sys_sendmmsg+0x3a0/0x3a0 [ 329.164357] do_syscall_64+0x1e8/0x640 [ 329.168245] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.173101] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 329.178291] RIP: 0033:0x45a6f9 [ 329.181482] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 329.189191] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 329.196463] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 329.203733] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 329.210998] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 329.218256] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 18:09:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x2}, 'syz1\x00', 0x1b}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x7f, 0xf8, 0x4, 0x3f, 0x20, 0x6, 0x62, 0x0, 0x1, 0x4}, 0xb) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000140)) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffe00, 0x101000) socket$inet_smc(0x2b, 0x1, 0x0) dup2(r3, r2) 18:09:00 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x1, 'nr0\x00', {}, 0x2}) sendfile(r0, r2, 0x0, 0x800000bf) 18:09:00 executing program 1 (fault-call:3 fault-nth:7): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:09:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x101, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r3 = request_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='trustedtrustedsystem\x00', 0xffffffffffffffff) r4 = add_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r4, 0x0, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4068aea3, &(0x7f0000002540)={0x7b, 0x0, [0xfffffffffffffffb, 0x8, 0x1, 0xd0d]}) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000440)=[{&(0x7f00000001c0)="be15c483ffaa663dfef55c9e13ce92777ea8994f878efd7eb9758e6b702110a36536353e55385b8e01ed65ab18c22f70a9e0960a6934a10d160e5d01464639421ffa7310bbb9a89d7fab7bab6bf264e11c3bd029750d4d18acaf8e57a9d138056d269b15192d36ef3ece8ac87b448ff786138a2515628865a050b365e0999cfdb611b054091906c917067520d4244ce192ca6a885f6d015bb0c7fd2cab23d72fefc4bbd60aa2890e020e9131ea29a33e1669bc7d30c1", 0xb6}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000000280)="b2e262c8bcc94c229fcc64b72277139f21bdd29f97fc1b23de2dddfb03370e49aed1d287f180be00cf15bf972eeec1f84ca4a31b102bda37b1abc410722c6fa419d7e719d20022", 0x47}, {&(0x7f0000000300)}, {&(0x7f0000000340)="77bed85d2eceea87c542b88cecb3a4ce73d8f0ee338bf5ebac4080cef3f1af833dd1bbc09034b624c545fed86442026d3cfbf932e12f41c3068a977837011ac157116208ec0d18c91508029714e43b710a339c29a94eda56581b162088af3a3ba872e73d4e0303829148393e5ebe7842f673d569f5fbbbda35f1e16866b930510c52bde8188a0ddc8b98a73a32d0fa50aba7fc10b9", 0x95}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000000400)="7775ab2d36706b50f6527bf8dffa811e8525e1ff37c9a8", 0x17}], 0x7, r4) dup2(r2, r1) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/enforce\x00', 0x402, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000002b00)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002600)={0x4a8, 0x3, 0xa, 0x4, 0x70bd2a, 0x25dfdbfc, {0xc, 0x0, 0x7}, [@nested={0x2e0, 0x42, [@typed={0x8, 0x47, @fd=r8}, @typed={0xc, 0x8d, @u64=0x6}, @generic="c08a4b7c30c736e96604a37a242fa151773a39caba519d7d537cdb4a258041b93592dfa9adcb97deaa2c23b6f65bcfbda855b0f340024712dfdf8abe25c035a086f4a1bf986db71e04b4db5e288ea19b4ad8acf63110af57653e81fec9aefa64288c7c3ddb5c483e4fb3f620a41990709fb091b74d8b7225b0d157c6f2bb91213b2fcc144e6091e58aee94f7df94c0772ac23a5a906905d5f715c5c3", @generic="5dc9fe56f52fa3a11fc76e240137a1747ab043a065bddf6c4e01cd77b99ea5dc3b40", @generic="a902d0e428932a6097f06a98a7c9572c96fa55581688c1f144706efc90cd85ded57b94c1a5f3bf4b40593a276289288a9cbc9020b1ab2cf427f43eaf428dd11eb01162e03a11cd296a73cc2ff825e3dd7d5e41b06dfe28e6852d8cb138915607cee9091f94c34c0d29bf7d0d2730168a1ea20863ea83033f8143b0e09c877f375d1cb5015e42c3d416bc963018d73d087abbf24580adb48d8025e41c", @generic="67f23110bb8c1b4429022edb1c85abdf2062d34fb4a7d5d4278146d915dc229016407a168e5fafb76ac52fe5a2c902e07f5b45f420e0b905a0e7aeaf0e8ca135d4ae29ffa46d565a9a9e3db5be95193d4bf4184cd58be92482c8dbf61026fc4094d31dcb29015ab09312d4a5913021bd73316f1cddf2b2ddb1a920c6f070d8e5fbb97bfefdce843fc1b99a112923d5aed15604733c40d123d657e0a1bfbc70ec193365b97b91b2c7bdee35cb1dfc7d1ebcc52e1dffd8adc50cddcdbe0bb93bad385550795454e11a37a06baf7ebd1faf962de978ca5eeb4de65075a1e85acc26d0bba3b8a8e85b11c8a29d5459bc5b724f54039c237fc1b6b7", @generic="56bb64546ed0b0a558492427d8bd22775b5784f0b4b990ae6337676669a943e810af64558cebf9b1f9e0ca8ccb835004816b8c16d118888df66de96edc2bfbd06c976bc279ec1263f9d5bc172d2e8949f9e7399766e55d81", @typed={0x14, 0xe, @ipv6=@remote}, @typed={0x8, 0x61, @fd=r9}]}, @typed={0x100, 0x80, @binary="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"}, @generic="8f79ba72efcdbc2391ca72c2509052cf8761dc7757ac36ffe468b89734733018f000ec9f534304932dab280d6c76b1aeb5099d6269c980fb", @nested={0x7c, 0x88, [@generic="eef396e24c5a623fc84039958c78648bc3a51dcde2671adc674018a0b111b818efbe3745720c8536f667db4c4075ea183956477f086737c89120e7221c7d9d84663ffb1685dabdd839ef8094d840c89212167e5ab2ab37101ea525c451949b198c7272", @typed={0x4, 0x71}, @typed={0x8, 0x92, @fd=r10}, @typed={0x8, 0x1b, @ipv4=@dev={0xac, 0x14, 0x14, 0xff}}]}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) [ 329.333550] FAULT_INJECTION: forcing a failure. [ 329.333550] name failslab, interval 1, probability 0, space 0, times 0 [ 329.356346] CPU: 1 PID: 10480 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 329.364282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.373640] Call Trace: [ 329.376237] dump_stack+0x142/0x197 [ 329.379912] should_fail.cold+0x10f/0x159 [ 329.384071] should_failslab+0xdb/0x130 [ 329.388050] kmem_cache_alloc_node+0x287/0x780 [ 329.392643] ? __lock_acquire+0x5f7/0x4620 [ 329.396885] __alloc_skb+0x9c/0x500 [ 329.400526] ? skb_trim+0x180/0x180 [ 329.404167] alloc_skb_with_frags+0x86/0x4b0 [ 329.408576] ? avc_has_perm+0x273/0x4b0 [ 329.412735] sock_alloc_send_pskb+0x5db/0x740 [ 329.417428] ? sock_wmalloc+0xf0/0xf0 [ 329.421244] ? do_raw_spin_unlock+0x16b/0x260 [ 329.425757] ? _raw_spin_unlock+0x2d/0x50 [ 329.429916] unix_dgram_sendmsg+0x34c/0xf80 [ 329.434298] ? sock_has_perm+0x1ed/0x280 [ 329.434318] ? unix_dgram_connect+0x700/0x700 [ 329.434338] unix_seqpacket_sendmsg+0xf3/0x160 [ 329.434347] ? unix_dgram_sendmsg+0xf80/0xf80 [ 329.434360] sock_sendmsg+0xce/0x110 [ 329.442948] ___sys_sendmsg+0x349/0x840 [ 329.442960] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 329.442982] ? trace_hardirqs_on+0x10/0x10 [ 329.442994] ? save_trace+0x290/0x290 [ 329.443007] ? __might_fault+0x110/0x1d0 [ 329.443016] ? find_held_lock+0x35/0x130 [ 329.443024] ? __might_fault+0x110/0x1d0 [ 329.443046] __sys_sendmmsg+0x152/0x3a0 [ 329.452130] ? SyS_sendmsg+0x50/0x50 [ 329.452146] ? lock_downgrade+0x740/0x740 [ 329.452163] ? __mutex_unlock_slowpath+0x71/0x800 [ 329.452172] ? check_preemption_disabled+0x3c/0x250 [ 329.452182] ? wait_for_completion+0x420/0x420 [ 329.452193] ? __sb_end_write+0xc1/0x100 [ 329.452209] ? SyS_write+0x15e/0x230 [ 329.460337] SyS_sendmmsg+0x35/0x60 [ 329.460346] ? __sys_sendmmsg+0x3a0/0x3a0 [ 329.460361] do_syscall_64+0x1e8/0x640 18:09:00 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) finit_module(r0, &(0x7f0000000080)='\x00', 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000040)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:09:00 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 329.460370] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.460386] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 329.460395] RIP: 0033:0x45a6f9 [ 329.460399] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 329.460409] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 329.460418] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 329.465773] input: syz1 as /devices/virtual/input/input85 [ 329.469406] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 18:09:00 executing program 1 (fault-call:3 fault-nth:8): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 329.469412] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 329.469417] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 [ 329.607209] FAULT_INJECTION: forcing a failure. [ 329.607209] name failslab, interval 1, probability 0, space 0, times 0 18:09:00 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 329.627868] CPU: 0 PID: 10496 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 329.635911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.645277] Call Trace: [ 329.645295] dump_stack+0x142/0x197 [ 329.645313] should_fail.cold+0x10f/0x159 [ 329.645354] should_failslab+0xdb/0x130 [ 329.655694] kmem_cache_alloc_node+0x287/0x780 [ 329.655710] ? __lock_acquire+0x5f7/0x4620 [ 329.655731] __alloc_skb+0x9c/0x500 [ 329.672387] ? skb_trim+0x180/0x180 [ 329.676039] alloc_skb_with_frags+0x86/0x4b0 [ 329.680456] ? avc_has_perm+0x273/0x4b0 [ 329.684444] sock_alloc_send_pskb+0x5db/0x740 [ 329.688959] ? sock_wmalloc+0xf0/0xf0 [ 329.692847] ? do_raw_spin_unlock+0x16b/0x260 [ 329.692859] ? _raw_spin_unlock+0x2d/0x50 [ 329.692880] unix_dgram_sendmsg+0x34c/0xf80 [ 329.692893] ? sock_has_perm+0x1ed/0x280 [ 329.692910] ? unix_dgram_connect+0x700/0x700 [ 329.692929] unix_seqpacket_sendmsg+0xf3/0x160 [ 329.692940] ? unix_dgram_sendmsg+0xf80/0xf80 [ 329.701586] sock_sendmsg+0xce/0x110 [ 329.701597] ___sys_sendmsg+0x349/0x840 [ 329.701607] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 329.701623] ? trace_hardirqs_on+0x10/0x10 [ 329.701633] ? save_trace+0x290/0x290 [ 329.701645] ? __might_fault+0x110/0x1d0 [ 329.701655] ? find_held_lock+0x35/0x130 [ 329.701664] ? __might_fault+0x110/0x1d0 [ 329.701685] __sys_sendmmsg+0x152/0x3a0 [ 329.701695] ? SyS_sendmsg+0x50/0x50 [ 329.701707] ? lock_downgrade+0x740/0x740 [ 329.719118] ? __mutex_unlock_slowpath+0x71/0x800 [ 329.719127] ? check_preemption_disabled+0x3c/0x250 [ 329.719138] ? wait_for_completion+0x420/0x420 [ 329.727323] ? __sb_end_write+0xc1/0x100 [ 329.736026] ? SyS_write+0x15e/0x230 [ 329.736045] SyS_sendmmsg+0x35/0x60 [ 329.763848] ? __sys_sendmmsg+0x3a0/0x3a0 [ 329.763868] do_syscall_64+0x1e8/0x640 [ 329.763880] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.785739] input: syz1 as /devices/virtual/input/input86 [ 329.786754] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 329.806938] RIP: 0033:0x45a6f9 [ 329.806945] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 18:09:00 executing program 1 (fault-call:3 fault-nth:9): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:09:00 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'ip6tnl0\x00', {0x6}, 0x4}) r3 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$int_out(r4, 0x5464, &(0x7f00000000c0)) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000900), 0x400903, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)) r6 = geteuid() write$FUSE_ENTRY(r5, &(0x7f0000000940)={0x90, 0x0, 0xffffff93, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x2, 0x9}}}, 0x90) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x20) sendmsg$inet6(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)="f2cda33e383ae8fdc2444785bfe6eab122cc48da4fd9ec2ee87f222f0165865f409fcd7a987229597f5bfc945fc383a9cc8dc0b9d080107b564084d7a00837d5d6a8630fcc4f65276fd6d10d7bd230f84796bc8be18aa575bcf503e063ce510cddcf31b22e76836c65e08ad670bda9829d35da86b869d1335ab6bcb52d1b3cd567ccb5eb1fe6b54d397fcc8d6b7e078f1778549469202a51d1b5b0d376324e4cff206ca58a1a8f38566debc1cf814c7f881c728eb9a27c850065da7ac9bb9b225a3ec5be6f8169b0258cca602582f6e494a1053ab7da9e94b184b98bc1f7efe5355a26bbbc", 0xe5}, {&(0x7f0000000340)="23986733e5bac9521f01fce79ccf493ef7cb848972ba837c50c8adb9eba448d1cb3049ef962f0398e5b6e866b5b4fc635d8e048d6d4d1f059cd341f173cfcc49471d5caf701b6af093e7679f4f77e67982daff3c9b67e614205180ab8261847b528237858e322ecb69b614bdf9f9eb0c039c7146583deffcf22e7b938933e9ce11c0dfa11f4661031b4b5e35802411b3d9332abf805a3e71a90f0aa9b48615daba7f7a35a06e6d6942b1a700b78e85592cf60ae7f6ccac3a27bcd789e2199ce886436e9be5482049edd4fdadcc3395be9daaa74b6367cd0dd517c45a300df8584e014d", 0xe3}, {&(0x7f0000000440)="aa514fd94996342754ecdbc50126142a8b9b262e825e1467ce9608f01fa860a704c168c68b9aed811a03a422b8540ac2b90c603363589fa2dac067b5c46499c94fb28c363ce3c1a63e5ba2893315384d456713a7e823fe0c6b0648a88deba0c778ca78c19e45ac3d911543c98af5bdffa6715895a0a29063a21bb2de4d4dc95ce08cabf16f1f77e00634cad53fd45e851821980df44cf8e2f6ae514b22312c43ee11c93a08ca6c7561d24d34f0e007a6a6a1a3e9c5f7a8a97d910f", 0xbb}, {&(0x7f0000000500)="8304030afe6ac8da29c4026b1b3f571a3dd7434311a6c0744f1db5f52ffe0485ba26c4f4d0e447b914878f59de8a23d2693654fe181f872c234f9ffb9f288018090ce96b43b09d7dc30241530f0bb77ad6f491121d05c4687de9748e6ca8526ca41cb9a3147ac3eb7f3fb99f4cb8c396dbaff403e1d46b15b47dba717190e387d557414128d2c11cfb", 0x89}, {&(0x7f00000005c0)="26422f8d1f34eca9f052f5ac652b5663e76de958972e31da0818e2a0fe9ca11d8b01344fe290adad249f7d5afcd420b5aeaafc70af8751c572547c3c71daa199e63667bf084dd8315459aa5bc4bfb2d26413c5d603621dfdd78173a901f546543d55d9907e4b498be50a2b7c9a39bea8efaae360fc72963a890a88146e8e23006c0e1263f16919245c7f154b3bae4054ee53c4e64d6ca2adfa2563ba6e3b2ab991a0445dc2a923b6224c77d0ecfd56a019be2c4319ca3a7049775408503503792ec9e80172487d937a4d595204d9ddfcd3894057e9435dd4c3c505", 0xdb}, {&(0x7f0000000280)="42a1", 0x2}], 0x6, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr="1c273fe2bb53a9defbf8e1d8de823849", r9}}}, @flowinfo={{0x14, 0x29, 0xb, 0xe3b}}, @hopopts_2292={{0x80, 0x29, 0x36, {0xc, 0xc, [], [@calipso={0x7, 0x40, {0x10001, 0xe, 0x1, 0x80, [0x7, 0x0, 0x4, 0x9, 0x8001, 0x7f, 0x3]}}, @hao={0xc9, 0x10, @loopback}, @pad1, @ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0x19}, @pad1]}}}], 0xd8}, 0x4000000) [ 329.806956] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 329.806962] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 329.806968] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 329.806973] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 329.806978] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 [ 329.879509] FAULT_INJECTION: forcing a failure. [ 329.879509] name failslab, interval 1, probability 0, space 0, times 0 18:09:00 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 329.918856] CPU: 0 PID: 10508 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 329.926795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.936157] Call Trace: [ 329.938755] dump_stack+0x142/0x197 [ 329.942398] should_fail.cold+0x10f/0x159 [ 329.946564] should_failslab+0xdb/0x130 [ 329.946577] kmem_cache_alloc_node+0x287/0x780 [ 329.946593] ? __lock_acquire+0x5f7/0x4620 [ 329.955141] __alloc_skb+0x9c/0x500 [ 329.955151] ? skb_trim+0x180/0x180 [ 329.955165] alloc_skb_with_frags+0x86/0x4b0 [ 329.971011] ? avc_has_perm+0x273/0x4b0 [ 329.975000] sock_alloc_send_pskb+0x5db/0x740 [ 329.979515] ? sock_wmalloc+0xf0/0xf0 [ 329.983306] ? do_raw_spin_unlock+0x16b/0x260 [ 329.987789] ? _raw_spin_unlock+0x2d/0x50 [ 329.991935] unix_dgram_sendmsg+0x34c/0xf80 [ 329.996267] ? sock_has_perm+0x1ed/0x280 [ 330.000332] ? unix_dgram_connect+0x700/0x700 [ 330.004838] unix_seqpacket_sendmsg+0xf3/0x160 [ 330.009585] ? unix_dgram_sendmsg+0xf80/0xf80 [ 330.014095] sock_sendmsg+0xce/0x110 [ 330.017799] ___sys_sendmsg+0x349/0x840 [ 330.021785] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 330.026543] ? trace_hardirqs_on+0x10/0x10 [ 330.030862] ? save_trace+0x290/0x290 [ 330.034669] ? __might_fault+0x110/0x1d0 [ 330.038725] ? find_held_lock+0x35/0x130 [ 330.042771] ? __might_fault+0x110/0x1d0 [ 330.046835] __sys_sendmmsg+0x152/0x3a0 [ 330.050807] ? SyS_sendmsg+0x50/0x50 [ 330.054533] ? lock_downgrade+0x740/0x740 [ 330.058670] ? __mutex_unlock_slowpath+0x71/0x800 [ 330.063502] ? check_preemption_disabled+0x3c/0x250 [ 330.068512] ? wait_for_completion+0x420/0x420 [ 330.073102] ? __sb_end_write+0xc1/0x100 [ 330.077161] ? SyS_write+0x15e/0x230 [ 330.080877] SyS_sendmmsg+0x35/0x60 [ 330.084499] ? __sys_sendmmsg+0x3a0/0x3a0 [ 330.088649] do_syscall_64+0x1e8/0x640 [ 330.092529] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.097365] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 330.102559] RIP: 0033:0x45a6f9 [ 330.105737] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 18:09:01 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RLCREATE(r3, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0xa, 0x3, 0x4}, 0xff}}, 0x18) sendfile(r0, r2, 0x0, 0x800000bf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000040)) [ 330.113444] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 330.120827] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 330.128101] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 330.135449] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 330.142707] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 18:09:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x2}, 'syz1\x00', 0x1b}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x7f, 0xf8, 0x4, 0x3f, 0x20, 0x6, 0x62, 0x0, 0x1, 0x4}, 0xb) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000140)) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffe00, 0x101000) dup2(r3, r2) 18:09:01 executing program 1 (fault-call:3 fault-nth:10): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 330.228767] input: syz1 as /devices/virtual/input/input87 18:09:01 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 330.332878] FAULT_INJECTION: forcing a failure. [ 330.332878] name failslab, interval 1, probability 0, space 0, times 0 [ 330.366498] CPU: 1 PID: 10538 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 330.374435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.383919] Call Trace: [ 330.386496] dump_stack+0x142/0x197 [ 330.390112] should_fail.cold+0x10f/0x159 [ 330.394251] should_failslab+0xdb/0x130 [ 330.398224] kmem_cache_alloc_node+0x287/0x780 [ 330.402794] ? __lock_acquire+0x5f7/0x4620 [ 330.407017] __alloc_skb+0x9c/0x500 [ 330.410754] ? skb_trim+0x180/0x180 [ 330.414366] alloc_skb_with_frags+0x86/0x4b0 [ 330.418770] ? avc_has_perm+0x273/0x4b0 [ 330.422751] sock_alloc_send_pskb+0x5db/0x740 [ 330.427279] ? sock_wmalloc+0xf0/0xf0 [ 330.431091] ? do_raw_spin_unlock+0x16b/0x260 [ 330.435583] ? _raw_spin_unlock+0x2d/0x50 [ 330.439732] unix_dgram_sendmsg+0x34c/0xf80 [ 330.444055] ? sock_has_perm+0x1ed/0x280 [ 330.448109] ? unix_dgram_connect+0x700/0x700 [ 330.452597] unix_seqpacket_sendmsg+0xf3/0x160 [ 330.457165] ? unix_dgram_sendmsg+0xf80/0xf80 [ 330.461659] sock_sendmsg+0xce/0x110 [ 330.465355] ___sys_sendmsg+0x349/0x840 [ 330.469312] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 330.474059] ? trace_hardirqs_on+0x10/0x10 [ 330.478279] ? save_trace+0x290/0x290 [ 330.482062] ? __might_fault+0x110/0x1d0 [ 330.486103] ? find_held_lock+0x35/0x130 [ 330.490231] ? __might_fault+0x110/0x1d0 [ 330.494277] __sys_sendmmsg+0x152/0x3a0 [ 330.498244] ? SyS_sendmsg+0x50/0x50 [ 330.501938] ? lock_downgrade+0x740/0x740 [ 330.506071] ? __mutex_unlock_slowpath+0x71/0x800 [ 330.510901] ? check_preemption_disabled+0x3c/0x250 [ 330.515997] ? wait_for_completion+0x420/0x420 [ 330.520563] ? __sb_end_write+0xc1/0x100 [ 330.524608] ? SyS_write+0x15e/0x230 [ 330.528328] SyS_sendmmsg+0x35/0x60 [ 330.531935] ? __sys_sendmmsg+0x3a0/0x3a0 [ 330.536063] do_syscall_64+0x1e8/0x640 [ 330.539929] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.544758] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 330.549945] RIP: 0033:0x45a6f9 [ 330.553124] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 330.560812] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 330.568063] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 330.575313] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 18:09:01 executing program 1 (fault-call:3 fault-nth:11): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 330.582564] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 330.589814] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 [ 330.605094] input: syz1 as /devices/virtual/input/input88 18:09:01 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:09:01 executing program 0: ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000400)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0x66c2, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000280)='cgroup.type\x00', 0x2, 0x0) dup2(r3, r4) pipe(&(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) r8 = accept4$vsock_stream(r7, &(0x7f0000003740)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0x0) sendmmsg(r6, &(0x7f0000005340)=[{{&(0x7f0000000440)=@generic={0x1, "24c54a38cec07f7707770f084dce0deb46aa9e8b280427e9b6f9d47bf2880ed1139c04ca2d823b746b3464c39a29655f96149aae3a625fc0b3a473340862c7104af62642de068ee1dcfbd92a33de47edf01ad4f0d34f72584a4da3bfc2b378ac80b3cdf016ccd752e57456a8524ea8b222d2fdc75ded4dad9a61ebe164eb"}, 0x78, &(0x7f00000007c0)=[{&(0x7f0000000540)="f0abacd68d7e9e5abf11de2f719d50d198bcd088c2dfebe4e7a4dd31281324190f880a54120ad9e48cb49c97a19f3ff8ab7bd5d8b15c93be13fd4102cf5a4b135f8f8cefed109f63b7af932bbc5ee7d8bfa8a8e6b598f3d9b23d85ce90687707f4f0cbcb134f4aaaf30e828558f660963718b397d257a2a7a8a9a6d8a37a25676da237e8a9ad269840940df3de1e9c87a29277972baebbf64439586b9756bd815d0431d0ea4b788638e5f48fa5c875346a2f86c531f9bbc33ab603", 0xbb}, {&(0x7f0000000600)="8652e46f34fdbbfe7624a56360ced08af6d70d6f07cda121db16c8d9836738931b426d0e1a2c768e83c2127c1cad0d5248f9db991c48a8f9a5ee63f65406d0f6f2447331296e6b2ef7b43de203271b60aab59e4c1e1cac67c6d881c2b5a17774779121a57d36212530c1c445cf85cb94bb97ad2704266ae1c0cc2508fe96024178d60c42f7171952cb6661a4ca51a865def72d3ba4294646c80bcfc7bab351c4513db6572699e6caec83", 0xaa}, {&(0x7f0000002140)="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", 0xfe}, {&(0x7f00000004c0)="51a196e9fa86e0e978d1afd4282ff1261b32d2000eb31a2c1b2924b084bb7aeccd8aac57f0fec3413ff6f8", 0x2b}], 0x4, &(0x7f0000000800)=[{0x10, 0x105, 0x1}, {0x108, 0x1, 0x3, "785c2aa86db60b397be3412d8664119c0f717b35006caf2fd51dad10c3c61afb6228ef44bee215fd4e81e6eed2efbb1af9fa87b3df63a8b846435d043ce20a8f1d76c11d661a2d900f741ebb027ec56b648faa9c42204f5bf59be4a92a30b536dec142ad23068a6fa0981e8d76715e2338750fb2d34ce79834468f1d6e7a9d68e9955c9b737c21d4be09ca8fc74336add4b5777f9e8e650532db6da025cbcf4f783d44c9c2a750b1cd9b5f737b81a6aa18b2715d68fad4a92e7a90ce74e23de2d5c01ac1f6bf996fbc224bd24e6ea0c933b78f78bd010ea9937419f8b4bdbbd6c97f2812d9840ddbf64ab882527c2d4660"}], 0x118}}, {{&(0x7f0000000940)=@caif=@dgm={0x25, 0x8, 0x9}, 0x80, &(0x7f00000054c0)=[{&(0x7f00000009c0)="4273374cae92154dd18d7273254c2f2fb451425381f8bdcda33f34941d0121b836954650abd3fff400f73e0d7ac66f8c137e28211d7cb67167dd8dcd85625a7a11016c4a7efadc713a01a14582a7111dfdc190abbd5e94b72cf263278741f6cec403fc274b7afa83d952cdc5fba60d70e7536b7ead63abe8926ace6b02eb08b46ccaad65faeb612b8f9409610f719790634b19489452b922a1b2fe762668534027ad8481fdc804e676f78de6752661a09c195a7684ad1a5728bc271867374b978802468a0a76d6eb1a39e1e6f4c4cf6965f5c2ef67d960", 0xd7}, {&(0x7f0000000b40)="75e000e9329728a74e3f71d89917ecd774ba3c1d8276fa2769e563454415be69320a516b8694b2288dc857d0b928a6e75eedaf4da6e1b154a5df304f1a32fac8b9c314bc3629b6943bbb2530cde5fc946650c6ef01", 0x55}], 0x2, &(0x7f0000000bc0)=[{0x20, 0x107, 0x2, "97261d608bd7c0671716f7"}], 0x20}}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000c00)="2f69298717693554fc05b0305c639d37fb043cc6", 0x14}, {&(0x7f0000000c40)="e53942d6e4b35775c396b27203c56fab572197a7939c18e7c15ecefcb5a636807cfce592d6655a8a86fce690674c2e551e402ebe30cc7614f12de859aec96646d8a3c7d7dda431c3e18af8fedc69ced4dcf364e890a027431d54e7a44dbf1fe4e6244639e49e2e863c9fac5b4a5b4e2e223fbc660888b47e4fde592c04d871e4c425e32b584b98ac8dd59fa917c635b344a3b306b812a2440ab55bc6", 0x9c}, {&(0x7f0000000d00)="b99630e1a4883aead9b56a1df7f11b236172864a49f71bc99bcf850dc1a3a7133e4eed7265054936598c4773c6a273964a64b8a4e6ddb15122268f6f294245d5cf3d6f1a3c0602f71151f7e0b748a1b45372757017ee8aded05e5206ac9cbe6317c86949d63da2cf88ea662ab88d08bdf894a206e51619477476e44fe9084a151b7e5715989fd1aa92ae31eae27addc753fd336e4c6f6433dfede076f891d396ac50fbb269c0d212f9bb034be51b3e7523a56d5af3c941cbb805d858bc01d8911a4ed7773d3b5d6623ea2ac4cff8", 0xce}, {&(0x7f0000000e00)="48920cd8a3b309317245531925f8c14919846a4cfa12eac4f0e76ebd771e2106367d4785dd56c1be14e116c6579b47337c488929fe45f9186a6c55f7df9a335267b0870961b05352100101a6fa38a52ed748716483d901be609fee73b665977a18afb6f5bb7b293742bfdf9c6df0b20722fed091be526c8d40a8066a51ab2a38158184d9a5390d487dd88b92e0d56a0b242c9e16fe4c778e1e0534b700429e9467e39c449ef665e4452190e04dc8c3e329618703797c690d647814bb3acaac8eec01dbc51284dd41b9cc9176b9", 0x15f}, {&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000001f00)="4825f691b35f2ad6e34722b41f944eeb322d71377c7c3db3e3dfda8d0643094ebf1c39f5c88f014ec309fd813bb58e75773e549b3f2dec139605a6fbae62e793603564ea8a8dab18b68df767e0b7ca", 0x4f}], 0x6, 0x0, 0xe}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000002000)="b6f973fdff547ac5a2a1d24354ec1acc227640b244fbe9a6788def204930d412537489dca6526d082822b41495dfcc7869c1ecfef77f4b53e88c89cb9b5393022989c0631824567ec675014ccd2fcb940c7a92c71130bcc5bc603e4ba0ff5deb9957f95d44dfc254502067fb9dde961bb40cb43abc1dfd4e078b55b0485095734769aa9e78230492333de830d0d857f4f6894b5e4905b80034fd4fd9dbd25a49cb1d44a017139cb1ecda4c8a0447dcca30e06d043ef8bd12b6044cc4793d96cca232726d0d7c151366a66e", 0xcb}], 0x1, &(0x7f0000005a80)=ANY=[@ANYBLOB="500000000000000011010000040000003d9b1925c41663a869169898887fab129dcbfc1b8bf7ae2067df80fdbe1729c3e56d730d6d3a0babb05cee62c2e4b9a9970050d5f352169b5d083fb3000000008800000000000000230200000000c05cf5cc3f86f53f6547245d1f6511381a1dbc5fb8f96f6a3990e8a65d6f64538f149d0369aa33980c1f366c331a623c4df88e25630372c9d4cfbc1dfadbe1bca02495e065e9ab5e5079b96ea28d2c146674bc853798f7392cdbb3322b8e90dee15443a2b5bb5f162fb4818a3637e93c34ace400000000000000c0000000000000008800000006000000f24dab96bd5e90802f136094966b805cd072ce6ca715e60105901b2aacf8d01d89ac75976ad8eaaf0910b532f29acdf5a347c842d559d07526c2355eacb66eea5cea3277ff8157a5f7222bb1fa4ee10134db6bb50efe7f263db8132d92699f2199368294b3ca2dc10c6fcf544e40e7194059cc5b836859eab2b1938ccc40413a6c02010553e83421dac5222b79de295feb137320ae7df2c4a383fc16524600000000000000000000000000000000000000128614500d6b41653a000000000000b800000000000000150100000800000027fbfe4e0693346b879428deefcad279501e3feb4b0f6e61f5c487342d14b52a95bdbdb1c4039615f5fb343c8829d01b176470a3edc7b12aaadae3c76dde0f3e094f613fb875e4a25a8d6803a9ad305383c098a03a0884d675f763b7a4e83deeabf4a9f7e87a8cb6ae2ffb660769012dfac1c7adfcd2c4689294b9df7505ba5906c766e2379f42bfec46678d0e5d57920db5a0acf835ba33f1d579cae924e7856c88ea000000000010010000000000002900000008000000773cfe96bdcc65bbd9b94cf63d39f3bc5ff20ca735ee3c69f501b18c2df4e0ae0246cee7c8be554884fbcf5cc89609f69d8e1e1a155afda264d9c9b917159ed14f04bf1988e68a0bfadce81b44d7598e218b5ffeae2fac7240a938837ef8b31e85b8d6f53d965b57454687f4dacad21bb987bb7ddb9cbc2487fa36ad6ca2f92afa543c20d52305d52122fb262d1652f9e8e2c98a829e008b9424208efd69f8657047ba71a15b817524a9fe0596db6092cf1134c64c95675d57025fb83197884c854d2799094422b1561d1ae3c29570238ca1992533eda2602ffd53f971760d2318ba75b81cf61b63c2d579a9287a147194b04c96a1751569bd79f5d1000000005000000000000000ff000000010400004584beaada58e88c9367ab8fadeaef684e51b7cf27e9fdcd1525ff4103e3dfb0bd4386e6fe69067137a47a9e37a8b133701947f2b46b17a03700000000000000c0000000000000001701000000000000394050cb9ee5c14d6452401af85b0f58fcea87218b2a8198e5b2401651c119fc868d7d4b47c546c592e59c3f5f87e1c1354d3b75bc396c116768fd65c16639ae72f5e25e1b2e0243009ce3ff433c0f9a4ec4cfecad854d8699f0470132e970a91b9edb48146eb56ff06115aa9030932e75cb2a644961520538e077ccb9f8243f65c59d02b0e2e556ba0925476c121618ff1e99f3a8b9fe95d6db6a125aa72ddc38e3eb3256c4c41a5baf904864300711c000000000000000ff000000020000001dee94efed35a3be0bfb257b71ecc101e43af0f4b3ba11e1c2e9ba8d28723daabcb4d1e1e670ae9deeb7261ced65243a832270a98aee730dc65e0345591b4b30dd6c6762efc0bd9e8ffe26a344a94c86038cb97923c69336b88cca34a28db31f2bfa67ef98484cb94a792d32606fd44ea741c7deee0ddc358fc31a2f8d041ada69980ebb4f77cb2cebc994d64fc60e0accd62f7b7e4e4c4345e61d34b7e8ce0c97bfe74081e6f4ffff5b4cac347d3300a6714cce30cadaa5207567e234905f0672c7b03db55bfec05db41aef70e9a97ca36d2deb98d5a0e64c3754b2987551a6cb"], 0x530}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002680)="695c3924941e0aac4bcb48a75c31840b5e009184b21fc63deec25c6871026664c7398fbff13ed0b7085b902a484293402c6af9077cbd323b9c95626f8f33e8a596d59e5432ecc765209cd1d33a466ac7e371bef3d3d6ae80a2969f07204d4c2184bef0445822be", 0x67}, {&(0x7f0000002700)="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", 0x1000}], 0x2}}, {{&(0x7f0000003780)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x1, 0x1, 0x1, 0x3, {0xa, 0x4e22, 0x1, @loopback, 0x9}}}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003800)="fa28bfee21705c67d1001fb81914df84dfef0c6c55292fabe60d0ccec7a959bc882ee9e592ed51264fb8591e8f74edc10d67624ea5ca69b16e520a52499a2df59e976715c4f6a943df899e15e20f451def9357c097194ec922986ad95f9b96fb432852439e7ef3f0547e957ccffaeaf2bd08680bab497c220bed8a42a66455da4695fbd55836f6326bdaa7703a6249775610047a727c7920f0c694820da9cdea529938dd9da3bf996744040eece1969ef5294fabfa21ee187de5e88991eeb8371338b001e6fc30b8d7469551b225b446570c8dee5e", 0x45a}, {&(0x7f0000003900)="a2e70f7f50ae7dabe21aa17bd13a531c3d192b2484fb477677485154f1b918e6a2eef11c464c93840797d7f46284000d671c9f64f1569d3bec81a1ed4d9ca95fee2348f2d823fba0f67af7995698a34b70c10d3ac9b59a95b34d25f3cca8599623a9f67323d1ddb527cf4dfef4b5b1a95398eeafba3b54ca5fd434b2c9b8ab6d39689d4c2cf34464bde8b21ec8", 0x8d}, {&(0x7f00000039c0)="1eb6af221a3bd39f19fdd3562f1f774beca6ce12b8711cd52230f5db656dc52a23943c09693a62a2beae52dccd4716bf66b82b87367e9f3020e61eaa10010ee8b0defe3bc2f390060c934eebeee2266411e8b5adf6e95cf747df791b54569f733a59b8886925d55f5caa861806ee6c9f5fa1bc449f1e4ccde1fe3d4e65ba5c83c15bab2f5b91ae993ad775cd533e508f48ef3ffde015799288a77a2a09b23d5d61a933414646ca07c72b282379ba26acf25a4ae02f48d72662dd263633c862ad427032f40b0bb1cf23f7e7", 0xcb}, {&(0x7f0000003ac0)="9ac9d5473b75e6a2ab04cbcd986ce7ee4e6c87e37c83f71943d7a9120a26ece73f4c991fcee88224114ef21fc35623251f7c6d5920b6600c782354c9550747f72f57d92a8576cc73f75ccd02e365448046c70345c45d86a5322a3c857f9aa5ce1e347c2de685a4972f003a26c416d2768bf64805cd0d967b9c8fc377a7b6c35eca31801ab85ed658eed32e5fd6ec69e2d27be2a76585a8e1db19ffafea2464d179aa60c59c5fecbeff1bf45780de4ffd21d8790612f6a6e995a3dee578afcadfdb4d4a55deb9d9297c013372b4127112d7b8d34dfe2cde77b36ebcd753", 0xdd}, {&(0x7f0000003bc0)="cabb424932c530ff7ede40772d0e1fa972fef287abfc05e38f2e32f0cb84e2d455059551ef83a288b794eac473b829d2f9d8e3006cc0702e19234d1d22892500d4f15a79ffc2cf8a9e4a6e81076daaecf5a7683883c03e1f60fdd0930c11f2cd840ea0b64bf9da5cac6f9e4b63aba0ea439f18e7654e2b6708aaaaf3f5af0e9d176970f9b8e82e645a5af98a837450567872cd6adca1c1f8628fd46ed88dce7ee4c45ee652fa01dae0597875966f393429e8e72f3dd299aaf808d002b6060ce02dbf21b1b91ef7c4b6fe4af58b50922afb9c3f9cce06994e61beca46334d2666bd8890a58e48754619b689fc9089b0d9c78c2b4890a1ac", 0xf7}, {&(0x7f0000003cc0)="94815da2f59776e8a089faf5153b6efb4e36f3a7cceb6a0415fbd29cea055edb88c79034fd8c49d29faecc4b1b52b1702d6f3f313f3f58176040814b145122f16b5f92c6f7796142c822fe4dd5eac1a1cbc8482c3b635d369a8eba45099a92657697a58027d198e801b219b3091645c3daf6ca40d9557ac77ed3aa57048c2ccf67863ae2893ab418", 0x88}, {&(0x7f0000003d80)="4cf1d76cd4784260dd9d5d0a9f4dec7daf02713b046d03b06f5b90a312919b525ec5d24754ae98c4fcb3eefb521d7f9db2067afe3423cd7ddd67688c03136ca60a469006c60ab367fa8753a73004e60e3fc429eef283ca8f301eb15e78c92522729ec94f9be48e5d06c4b15c058e5db324c411d6dc2e30b254e77b0b47a7e4a667fa9b3d5ee86b6ec685c8125990060fa2d6f1556eab395b58794595cbc9b25bbf5be920533209a6df321f64c3d8b1a57334b0f58f56a61f09101a8da26d3ff95a7490525564207203d9ce31348fc64fddc489597d791e3d9423061fa07fcd54ea448878d3dda4a6c42a9acf8b70adaf1e96984478b3a67aad142f5a0f196d564ddfbc201693da3f63b4821398195314cd7a0afab9f29acb86dd724e64184daf4d3aa0bcaa8674705b5c51370c4a155c917d25cf17e8bba9b7c938fc9b086978770fb2e99d7f86781dc8aa08a5ea79bbd1724e3bb0b9006376989ebc182abdcf3da41f84e77c063ee08797232ce3a5c7e36b0058240abd1b2c84a876baebe058b4ffa46b4e52c4a0ec891164f277e5b63f12f2a30e609e717aa7b287340a492406668defa0633689ed8275e2d56898b8f40ebca7eb996656cc45efa7f46866f91ab94d677e8ce62fcfe3d7a6b9ebfee0a6c4a419e7d6c1c3679b4fb7d2be89bc65193385a7b46cc6097f8e0b349c52693ef0a363019a6dd9a351736c6f3a3cf8ca71470971e8f3d7baed6c47bb509ab86b9f01ad8c7626a136dd15c4dbba18a1eab73bacc6823ac607e93ba8e9f3d393b8e8cd0632412bf5982df43939be64c965a7c3e9aa0db3fb830c44ff7a6fb3c17d043b825023ba6801587dc3effa47c5ada9de23b3f219de00d4a23d0a05a86dd1aedf23f1eb2d7699702ba9b5c835048cb6b25507bcceb9ce1a7ffb943a88935e2ffdd88e1ccfa207551514775f1eeffcd019b8aec1c899f8cd4ee38b1b1989e930557f736af367a89ee1edabfa8a0b57bd5d588c79f76c1b7ea1f535521b8bbe2c8f2995af3f3a164bee1f4e9d9165da41010202524488482fada947d9cd2b93566ea130e00fc43f4f155ad4e6f711c42811f6950a404d0bc3b5364520dfaf2c7b66d75f1807fde7d47b0fb4fa49f52dfbf15711ace8297a050f4a54a20af5657310b925e4c0ceea0e09db28b647bed84160a0e3d7e7f01f33fd80aae66e825ffdec3c9c50886110b2665418e8c500a1392451152b621d1c846b15dc420f143fb8a498154ebea0bc7222075657b4f5a7716a8aa9665b89d2eba837f4cb24c781b285c93ec365868307171b03feb300a211199b581494ed6bb25dbbfef11bf0624b0cc972ae253f31978a660d48ea562d08b43cfc7aa8d4ef3fc20dd051c26e7657168162499523f0c4f45ce116abd08a6297de7c5a502bc327afe1973353d178cce50f63a1c4bf2ffab6e2b491fed49220460e05676afc47b531eac26d9feb2081d0fc90fb610d92fb6baa9fac1afa6979e3e5634647d7e0bf7b34fab2daf0b9d115d82ed36f50c4c9bce109dd5e6f0f98f8b86d92aaca4d79193d777a2086ae7ba4623a51b08b4193a06cbae6df39f4a7075d249028424e7dfa22a4b2a130a0a3e7b1c73ccc99fb324946d0f4e4f9cc7b646a1a4f14c68af71a0cfb29ea6dde74779dcbd45bf4b6c725e1f65894896e459b30d7f2bfe893c706928ab7bf3004de936abe137d9645e9754db645b7c999406ec0bc8b8d2513d4d4946bb6b5bb050d2ba6282af042451ae878d506554e2429ad1d3e3103643d70bf889669a90aff883b26fa4bfc5781d93c2641b52350a2918493d12c3abc8d7ddd42fdcd1be704e8a0b978f9cf129b28a2dde54d78f7a97dda5d7687687c8c34f0a1fdbb38d826f9a37895a2815e22cedec9d28c18b431bbd4172b725bb77f727304bbd609f2c57d3a29997c56ea1962d3ee246f8ce5aebf72396c7b9ebc4ef7cae68c99960bb55a7e67762c8d0f17ca8cae1ceea7ce2c91faf95eb065469e0a7c9de8dbea496ddd34894fda1dffd493d343c342e7c2ae3e155b74b3c57b28b347cfc864dbf4875a8138806053cf9bf91b1e7a50b8606a292fa9952130991bb0ff5190c55af6813ed9830e7b2c499836db2aeb20ac5d2d7098d50c84b3c32ded52dc43f9cdd700aaf3ebe1a3b8866b558bc287496a4b1b1923943b8f386709df953a185ca5859bae5bf642f66b6c5318e4eb8ae72349efb9249d3320cdbe525d35732ea7bcee4ec0ff3da60cab58418090d1b7a98bc33abed71fd2e5ce4585d1b075fd265d908116ca37b8ef328ab236552796b9ab9c120c8c3f9104799d9f4b4d965bc45aac667fbb0235ce8930b7baa26992a793ff859840e2adbd046dce93fe8760f6de619f416a28ccce002a105bec857b474af9e26695a21bf9a46a78eed04bbde3c8953d52a04fac243e060ec81f02b6a79ecf9b8eb8a6c8a8a3a24d951cc0d11b80580352dbf7e561ba2bcc65f7d04674be2672e5a8f4d22241b641b342d654d68d8ad2a40d63aa6878698b53cf4835d8833c1c9cdacadea08c4b4e71e7167a467a6f29ae83e2a7b8267e507f2c4b7fcf253fc6096e1882cf1c7e4028ac50a140a329571b5f4dc7246312d93bd50b7a84f5e018fcde3d6eaa70e9c90009273b60b38b4b76e4d26bcf3d501fc1f8f12a2076ff2105aa9c63f2acbf088f7852f4b1a0b084b3c60439601714c6422832e3d3bb042a40dc328a9d4b1565a85ba025ca7fbaf82911d5852f1b263cad5dd01379aa101c7358969b2886809c835fa75c843910771d8f2f1e72e4becd4cdcf5ba4ac87755af8c0dcb4be08dfed9afac9b4cb354291af52ed255b8ba6cd94438ae79e9ade9fd4b39a84ba859364803dfab31bd2b03a66ef7cef021164914f605193b983bc9e70082176fe3a11cd22297ad10cc0b979ed45b2b317028456a90616632a6e49859581803d752422e50d1bc11dac6a77da08d7c93ae19b4b41c5398704e9ed099eff06cd17be890002b181904475bf68b0be8bfe12631dc3e54c39071a6accea46f0a1f61a437472fb5fc114ed0a612ad7dfcec93ce5e00d7ed7a033a18fb9069a950f925061f6972fcb557d9a0c20ac42a7d833e35f68c96f67a1349b08eba78d049e4bb5475a1f8ec225af670092c27e6ab1185cdb338b6f2abf56108204b1c035d2033981083091be237ba15f62ff611b2c2db547c9848a04241532f4b38ec69fda3ecd7c2874e6b60a52e8dda89ee54261808a875b8b422ce7e26f52ba09199488af1735b9a041a5fb4e8e1d1d68e6a37ada75676f26a3cd4d83e4bdf689a4f459d03ced3bdbe612a617de78aaa3774513d7abe031ea725201730cf00388c2694609fd5655a68f7f2a86efed87175a6539bd44ae473e3cf744df28884789366d6c65f6d71804e256b3dd7eb15d67d2751b1d7882288c65b017ce0740f6c1c1c957fbbaf4d9f28843d1c44de4152abc9f6181e8919f9a448072fdbcf80da06a367ec2daf1fbf8da01db574fc3cda305ca2b5b4f8a49463f1dd4d7b6d702b31d1830f04318dbcc82f44a0a702b8a4fee20896814aadd6c6324dc60b751a216fd3433d60266ae140a341670cd3e94462fe3f82d307fdfe34ab3c741ed99df6fd47eac1408e29123c13ca2b035f05a2bd21c967fdd63128e6e00f1afeb15926861b7702f888e374cb19e97025f19f0983907e18f2bc8940970299d8db679474a782adfa8823183a67ab05cb49eefb04dffb1e6350c1ecae6f5efc0ce3073aa25875296a0ab8eb01460667215dbe931b1767c101f8d096b6eade87d16f7ed0ad30d540558929ca51d897181256a71b8c0ca998282ed46402bb7c1dae6ae2aedb429c36c793061a1a24bc620b7737c60ce5ef6249135f8b5d1450318e5b20cbe0493a7c0459eb3fd34a5f032b1e217f1da82ebe16de633165a942327fb9a392224d4fdc2e9da0b41fd27c892766ce80df4ced56817356b200d7bab68a189b8d6214abe3fad648a8f6eb570533e42805c4dda958708ff3c6df04e7092b3423ab21a61a42fc000d593b44c818ca2ff5e0503739dd535774202b150e5b3ca0712a8c7380336aefb543d7abf7a7c765b5f182c8ce9ab6a3fedbcc5d35292cc0748f8d9e288610d6ab5bf0c8cf13e5eeb5ddc80c9023d0c081aa553e1bdfa56c3c272d6b5c04c5d0cb8d5418144004b8fa2807218213bb148c477277f8af48e257dfa7b3a00938fe932fccf9ae248cac4354248195370a117879fee9990a5494fcb05972bcb5c2b785dfd9837f8e087a70f748089beb538c7c73052f4bdce39f2d8d9c393dae79c62b025ae9e75f775efaf63dec4367fab7b6995868d9ac65f7e7a98782b4da843192163fa0f5702a875475bdbeb66097f27bdd0ce8c8a580a05453379660b85da11cb08e0f4987b12decc8aa03afb1c347ade4206d918f2440491750237b763d79c15661cf5676680f8ab58c8bb2030672edb47783e86cc6a103abeecab38fdb44cc1018e027612c8cc5174cae679083e608d441d1d8e9119647dc64e384931b58a4f5756f278b04970c45aabdea74f781590c2456b1ed1b6c4c6ed08acf7c9cde2dc7af1d7dc3f837dd5bbfa2d10459f9ea429e2bf6ba0893e6e5ac9aab0042c2fc79c00450ba67122717c7c134bdad924d3ccab70a51fe864b1e271e49f1757d57cd4b9d475d328bbaba9a45d266dc4e2b2ebdd60795ca5a0cd538d9220bfa01d1d0be15cae5239dbdf48f76e4fdeee3bcef2a90d183cb4b5235bef83bbbba82324e276cebf3c3a22072fc66547796c0d38259d141c94055c00e15f9e0de4e63fbcdb69cf7b9f5f2c028633e79fde9942cc12d1b86e08e039decca386eadda4f1be39fcf881b50eea6c8899723231ecf0bab1500ea53955038e7be67f06490903f44180aeaa318067797149dc1d7ea9079d00a83ca632c76c199b82bf15463acc431b81cfe7953d15dcf369e24851f9abaf924e546a9846dc66af9e729e1da0454da0b6d3edba8bd71aff13dbd7bc0c36d52b7dbe4f627a43a558224c6f98d791fa154def80f09f8af5240a931040602c5c945444c903f896a626d3b4f0a64707ef7276bfb93420dae3157cd112d1c727bcfba57201e791f4d17674b2ca6b473c39573aa1fd9fe3c429b3e5ae48f4736f5377e7248cf93f12fbcac3914ce3dc1c22d6b4131b9273b4bfdfb5961da9505fd543590485db0dc9c47aa1718fd2e7baa6c62228bb168e3785aab8198059f552c27cc677409bba542de5fe94f80c43b7f9aba5e889c808218e2eb6e18b3ab3d7460b2aa990ee3621ec7ba8f13ff51ace6da9f61f93373b62c4e246b2ef8c750613cb4a088c51a567d4b99e92effcaebaad2d94b467336498513196177acc7e3d996ace4565072f09ad69375d0d9d465b9e2c2df66e98d33eae5126d99bd7be78644f805cb147b55667fdc1026cde233c974e7c20745c71de52a053e3fa8034eb31c231e26032729f35bcb03cd53f019ec3bd40b128731a13715d89b08da3801b08d4d7dfb1d60495b6aba874b590c9e0441d4c6d07b5a4dabca027e9ff11d68ef7f0473d7fb13331183d71d655cdc67d6bc6aff756cfa6ed02bbe8f1407e1ea6bd5fd33a657fcbb193753e63c5388d1a45393b85b38abdc173e44b361e54098bdd86cfc27c9f141912edccb4c6717a70a2bfca9638e01a38b8105348cfd937e6d14f52542883710a2f68692180847e234000c3dbbd9b4c11e06e3bd0c4dced597bfd2c49edcc36e31447a09c5073d0728f1a096876f57e988ae73554dba694d35c4668d43925f4fcca310", 0x1000}, {&(0x7f0000004d80)="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", 0xfc}, {&(0x7f0000004e80)="9e665027d4255fc0b6498b9df10e3ffc884dcb7dcedee8bc99756224bf864c016031126f0639a0a1a2d538a1a14089dae7fe87efd6a2e1b36cbf5b6e6c5a686253f3d0402e837da18f6d16500927d25c107ed99c", 0x54}], 0x9, &(0x7f0000004fc0)=[{0x80, 0x88, 0x1, "8524474f0c8d661e2eeaefb45845fa8d5315b8843511032d43fc1d306c1e3c3b9bbc920b9c26124e91c35c5ed37fc46eca2b32cd5c7b3a6eeeefaa10dfdd9182228ec0dee89758e23cd4a69b42184aa0079782cb9cf199c98216bf16a9ed9a824942d2663f31b101833cc8a9c5ad"}, {0xe8, 0x10a, 0x3, "6585e7bf34b472218a01c89db9c3b9f3549535e33151197e6a4627db4f45235160f00a2de7fefad51950dd6484ffc9a70d5df6b677ca85e71cd4651dfa67e7f7c7eb8223842747446b82cc890c9ac1705a9468087c939ad035c8d241cad87d6511077c1bab069118ef2678906c29510a56480ae2c1a723cba12895a6bbc71001de3ab9610ee9cfc6519818fc9289573fe18019ae7a417f210ab212a17d781919acb6ca01e37860a8e57cd342e72fe0c5c61ce1b5b9ebac53980860a8c49e5f3eba877e96fd691518c76d2f9e13e9804f7e8a8b"}, {0x305, 0x4, 0x54d5, "67ae6ecba30ba28be78010fef46f69d980d3e6f15d213d4809743f94fb769fb825c3920510836e13bcdd79f7a938fb9f93248f7a40b2e2ceed59ad3d"}, {0xa8, 0x113, 0x2, "288d9f7c926c8edf67eb159099a98b133544f9948fd4a985fe2507a49c9fd11253a73239fb421cdfa5b87583340953114067f912583bb965231ea51bf19c2af7db4162232eaf6978d6ca560114ca1293237f078b486a16468a1cc8fdbb057c7d598d7b2bc8a00a721c92ce66f7e54f22cca2063fa0fb7ba2b0337ab84b411e1bef514d580a8abe605e2fd55375249a9ca0213489"}, {0x38, 0x101, 0x3, "662ecc540b91a668597a94f263083ad66ef3dccb0e0337f8b5d9b4129bdae4d3655dd64897"}, {0xe0, 0x112, 0x40, "d04e9fa917ed2e3a2f0a256b8c6f0c03abb201a56748be596a40caebf31f0e3f7e715dbdcdbc56882b5b8a60710d26d222eeb774889bc58754f75704fb0d3212cf163f4db52680061029a9bd7cd0ca5a8c96710da2593cf9bd2be338efa77a79a578d88ff16dafb43e6aa780123cf8c34666d59cdd44aa5438cf6a45816a36c07c58cb4b900b2caa3f9127a7ba851393b9a18176bd0213effd625f81e6f723ed7444440f9faff0e84edd9f5e577291a7bf7c610a0ebb33954bd77906bc8323be832cf6cd6903111bd64f85a765c0"}], 0x378}}], 0x6, 0x80) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f00000000c0)) lsetxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) uselib(&(0x7f00000002c0)='./file1\x00') pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r12, 0x407, 0x0) write(r12, &(0x7f0000000340), 0x41395527) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0xc93920c4ede6823e}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r12, &(0x7f0000000380)={0x7, 0x8, 0xfa00, {r13, 0xfff}}, 0x10) dup2(r10, r9) [ 330.677578] FAULT_INJECTION: forcing a failure. [ 330.677578] name failslab, interval 1, probability 0, space 0, times 0 [ 330.697717] CPU: 1 PID: 10547 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 330.705642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.715030] Call Trace: [ 330.717632] dump_stack+0x142/0x197 [ 330.721276] should_fail.cold+0x10f/0x159 [ 330.726394] should_failslab+0xdb/0x130 [ 330.730382] kmem_cache_alloc_node+0x287/0x780 [ 330.734973] ? __lock_acquire+0x5f7/0x4620 [ 330.739208] __alloc_skb+0x9c/0x500 [ 330.742833] ? skb_trim+0x180/0x180 [ 330.746575] alloc_skb_with_frags+0x86/0x4b0 [ 330.750964] ? avc_has_perm+0x273/0x4b0 [ 330.754931] sock_alloc_send_pskb+0x5db/0x740 [ 330.759414] ? sock_wmalloc+0xf0/0xf0 [ 330.763216] ? do_raw_spin_unlock+0x16b/0x260 [ 330.767719] ? _raw_spin_unlock+0x2d/0x50 [ 330.771864] unix_dgram_sendmsg+0x34c/0xf80 [ 330.771876] ? sock_has_perm+0x1ed/0x280 [ 330.771892] ? unix_dgram_connect+0x700/0x700 [ 330.771914] unix_seqpacket_sendmsg+0xf3/0x160 [ 330.789316] ? unix_dgram_sendmsg+0xf80/0xf80 [ 330.793801] sock_sendmsg+0xce/0x110 [ 330.797506] ___sys_sendmsg+0x349/0x840 [ 330.801467] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 330.806208] ? trace_hardirqs_on+0x10/0x10 [ 330.810428] ? save_trace+0x290/0x290 [ 330.814217] ? __might_fault+0x110/0x1d0 [ 330.818276] ? find_held_lock+0x35/0x130 [ 330.822320] ? __might_fault+0x110/0x1d0 [ 330.826375] __sys_sendmmsg+0x152/0x3a0 [ 330.830335] ? SyS_sendmsg+0x50/0x50 [ 330.834033] ? lock_downgrade+0x740/0x740 [ 330.838176] ? __mutex_unlock_slowpath+0x71/0x800 [ 330.843108] ? check_preemption_disabled+0x3c/0x250 [ 330.848109] ? wait_for_completion+0x420/0x420 [ 330.852677] ? __sb_end_write+0xc1/0x100 [ 330.856722] ? SyS_write+0x15e/0x230 [ 330.860419] SyS_sendmmsg+0x35/0x60 [ 330.864028] ? __sys_sendmmsg+0x3a0/0x3a0 [ 330.868159] do_syscall_64+0x1e8/0x640 [ 330.872032] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.876882] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 330.882068] RIP: 0033:0x45a6f9 [ 330.885255] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 330.892955] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 330.900216] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 330.907476] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 330.914731] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 18:09:01 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x4c2026fb036dc06e) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r7, 0x100, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8e1aecc0fc6282f7) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r8, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) [ 330.921987] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 18:09:01 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 18:09:01 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) ioctl$FICLONE(r1, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:09:01 executing program 1 (fault-call:3 fault-nth:12): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:09:01 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) setsockopt$inet_tcp_buf(r0, 0x6, 0x3, &(0x7f0000000000)="8024a10d0203e3990d9430dcf26432c57a5d", 0x12) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') [ 331.047980] FAULT_INJECTION: forcing a failure. [ 331.047980] name failslab, interval 1, probability 0, space 0, times 0 [ 331.096615] CPU: 1 PID: 10569 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 331.104548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.113913] Call Trace: [ 331.116506] dump_stack+0x142/0x197 [ 331.120139] should_fail.cold+0x10f/0x159 [ 331.124302] should_failslab+0xdb/0x130 [ 331.128277] kmem_cache_alloc_node_trace+0x280/0x770 [ 331.133382] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 331.138836] __kmalloc_node_track_caller+0x3d/0x80 [ 331.143876] __kmalloc_reserve.isra.0+0x40/0xe0 [ 331.148550] __alloc_skb+0xcf/0x500 [ 331.152172] ? skb_trim+0x180/0x180 [ 331.155801] alloc_skb_with_frags+0x86/0x4b0 [ 331.160206] ? avc_has_perm+0x273/0x4b0 [ 331.164179] sock_alloc_send_pskb+0x5db/0x740 [ 331.168676] ? sock_wmalloc+0xf0/0xf0 [ 331.172477] ? do_raw_spin_unlock+0x16b/0x260 [ 331.176978] ? _raw_spin_unlock+0x2d/0x50 [ 331.181136] unix_dgram_sendmsg+0x34c/0xf80 [ 331.185459] ? sock_has_perm+0x1ed/0x280 [ 331.189519] ? unix_dgram_connect+0x700/0x700 [ 331.194010] unix_seqpacket_sendmsg+0xf3/0x160 [ 331.198575] ? unix_dgram_sendmsg+0xf80/0xf80 [ 331.203052] sock_sendmsg+0xce/0x110 [ 331.206744] ___sys_sendmsg+0x349/0x840 [ 331.210770] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 331.215513] ? trace_hardirqs_on+0x10/0x10 [ 331.219733] ? save_trace+0x290/0x290 [ 331.223525] ? __might_fault+0x110/0x1d0 [ 331.227732] ? find_held_lock+0x35/0x130 [ 331.231776] ? __might_fault+0x110/0x1d0 [ 331.235829] __sys_sendmmsg+0x152/0x3a0 [ 331.239785] ? SyS_sendmsg+0x50/0x50 [ 331.243485] ? lock_downgrade+0x740/0x740 [ 331.247621] ? __mutex_unlock_slowpath+0x71/0x800 [ 331.252493] ? check_preemption_disabled+0x3c/0x250 [ 331.259229] ? wait_for_completion+0x420/0x420 [ 331.263792] ? __sb_end_write+0xc1/0x100 [ 331.267852] ? SyS_write+0x15e/0x230 [ 331.271554] SyS_sendmmsg+0x35/0x60 [ 331.275162] ? __sys_sendmmsg+0x3a0/0x3a0 [ 331.279301] do_syscall_64+0x1e8/0x640 [ 331.283175] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.288004] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 331.293176] RIP: 0033:0x45a6f9 18:09:02 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) ioctl$FICLONE(r1, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 331.296367] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 331.304207] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 331.311460] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 331.318724] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 331.325982] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 331.333276] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 18:09:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x2}, 'syz1\x00', 0x1b}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x7f, 0xf8, 0x4, 0x3f, 0x20, 0x6, 0x62, 0x0, 0x1, 0x4}, 0xb) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000140)) dup2(r3, r2) 18:09:02 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000180)="9c0e710edf1dd376036d319c7651cbed020b433dea6af6726f63010dfdf4fb9b49fbd4920faee9d67a4e0d45863c63682ecc33b75a06cc60be195a1b51749da1df61ffe788a724bd24f86d2833b4fe2b087e79a80f1847de2cd6f8dc3889fb2a1502b4b6a8c123bc97b0b95b8d341afcc21ae3543883d985d3ea5f04406bb4084b79f8c9a7b1b420652747a33a37bdf46720f86e8996433428b477628388323a206977ce2c07082a4c40cb79a4969a43e27df3814c3537a6206a34ad1873dedb824536057b91bfea125c65dc5733682d2dd5d25621935e8c221d5c", &(0x7f0000000340)=""/135}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$FUSE_ENTRY(r4, &(0x7f00000000c0)={0x90, 0x0, 0xffffff93}, 0x90) 18:09:02 executing program 1 (fault-call:3 fault-nth:13): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 331.403944] input: syz1 as /devices/virtual/input/input89 [ 331.445969] FAULT_INJECTION: forcing a failure. [ 331.445969] name failslab, interval 1, probability 0, space 0, times 0 [ 331.458418] CPU: 1 PID: 10591 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 331.466314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.475670] Call Trace: [ 331.478262] dump_stack+0x142/0x197 [ 331.481900] should_fail.cold+0x10f/0x159 [ 331.486061] should_failslab+0xdb/0x130 [ 331.490048] kmem_cache_alloc_node+0x287/0x780 [ 331.494644] ? __lock_acquire+0x5f7/0x4620 [ 331.498899] __alloc_skb+0x9c/0x500 [ 331.502526] ? skb_trim+0x180/0x180 [ 331.506156] alloc_skb_with_frags+0x86/0x4b0 [ 331.510556] ? avc_has_perm+0x273/0x4b0 [ 331.514536] sock_alloc_send_pskb+0x5db/0x740 [ 331.519037] ? sock_wmalloc+0xf0/0xf0 [ 331.522842] ? do_raw_spin_unlock+0x16b/0x260 [ 331.527340] ? _raw_spin_unlock+0x2d/0x50 [ 331.531516] unix_dgram_sendmsg+0x34c/0xf80 [ 331.531529] ? sock_has_perm+0x1ed/0x280 [ 331.531546] ? unix_dgram_connect+0x700/0x700 [ 331.531563] unix_seqpacket_sendmsg+0xf3/0x160 [ 331.531576] ? unix_dgram_sendmsg+0xf80/0xf80 [ 331.539964] sock_sendmsg+0xce/0x110 [ 331.549006] ___sys_sendmsg+0x349/0x840 [ 331.549017] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 331.549034] ? trace_hardirqs_on+0x10/0x10 [ 331.557208] ? save_trace+0x290/0x290 [ 331.557257] ? __might_fault+0x110/0x1d0 [ 331.561225] input: syz1 as /devices/virtual/input/input90 [ 331.565917] ? find_held_lock+0x35/0x130 [ 331.565926] ? __might_fault+0x110/0x1d0 [ 331.565950] __sys_sendmmsg+0x152/0x3a0 [ 331.573959] ? SyS_sendmsg+0x50/0x50 [ 331.573970] ? lock_downgrade+0x740/0x740 [ 331.573985] ? __mutex_unlock_slowpath+0x71/0x800 [ 331.583557] ? check_preemption_disabled+0x3c/0x250 [ 331.583572] ? wait_for_completion+0x420/0x420 [ 331.583582] ? __sb_end_write+0xc1/0x100 [ 331.583596] ? SyS_write+0x15e/0x230 [ 331.591685] SyS_sendmmsg+0x35/0x60 [ 331.591694] ? __sys_sendmmsg+0x3a0/0x3a0 [ 331.591705] do_syscall_64+0x1e8/0x640 [ 331.591716] ? trace_hardirqs_off_thunk+0x1a/0x1c 18:09:02 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r3, r3) ioctl$FICLONE(r1, 0x40049409, r3) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:09:02 executing program 1 (fault-call:3 fault-nth:14): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 331.642198] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 331.647372] RIP: 0033:0x45a6f9 [ 331.650543] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 331.658232] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 331.665569] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 331.672821] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 331.680071] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 331.687324] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 [ 331.737117] FAULT_INJECTION: forcing a failure. [ 331.737117] name failslab, interval 1, probability 0, space 0, times 0 [ 331.752991] CPU: 0 PID: 10599 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 331.760898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.770254] Call Trace: [ 331.772846] dump_stack+0x142/0x197 [ 331.776476] should_fail.cold+0x10f/0x159 [ 331.780627] should_failslab+0xdb/0x130 [ 331.784607] kmem_cache_alloc_node_trace+0x280/0x770 [ 331.789711] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 331.795163] __kmalloc_node_track_caller+0x3d/0x80 [ 331.800092] __kmalloc_reserve.isra.0+0x40/0xe0 [ 331.804759] __alloc_skb+0xcf/0x500 [ 331.808384] ? skb_trim+0x180/0x180 [ 331.812009] alloc_skb_with_frags+0x86/0x4b0 [ 331.816446] ? avc_has_perm+0x273/0x4b0 [ 331.820421] sock_alloc_send_pskb+0x5db/0x740 [ 331.824918] ? sock_wmalloc+0xf0/0xf0 [ 331.828719] ? do_raw_spin_unlock+0x16b/0x260 [ 331.833220] ? _raw_spin_unlock+0x2d/0x50 [ 331.837371] unix_dgram_sendmsg+0x34c/0xf80 [ 331.841691] ? sock_has_perm+0x1ed/0x280 [ 331.845750] ? unix_dgram_connect+0x700/0x700 [ 331.850233] unix_seqpacket_sendmsg+0xf3/0x160 [ 331.854798] ? unix_dgram_sendmsg+0xf80/0xf80 [ 331.859288] sock_sendmsg+0xce/0x110 [ 331.862988] ___sys_sendmsg+0x349/0x840 [ 331.866943] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 331.871684] ? trace_hardirqs_on+0x10/0x10 [ 331.875903] ? save_trace+0x290/0x290 [ 331.879692] ? __might_fault+0x110/0x1d0 [ 331.883735] ? find_held_lock+0x35/0x130 [ 331.887819] ? __might_fault+0x110/0x1d0 [ 331.891885] __sys_sendmmsg+0x152/0x3a0 [ 331.895851] ? SyS_sendmsg+0x50/0x50 [ 331.899557] ? lock_downgrade+0x740/0x740 [ 331.903699] ? __mutex_unlock_slowpath+0x71/0x800 [ 331.903708] ? check_preemption_disabled+0x3c/0x250 [ 331.903720] ? wait_for_completion+0x420/0x420 [ 331.903731] ? __sb_end_write+0xc1/0x100 [ 331.903743] ? SyS_write+0x15e/0x230 [ 331.903758] SyS_sendmmsg+0x35/0x60 [ 331.903767] ? __sys_sendmmsg+0x3a0/0x3a0 [ 331.933657] do_syscall_64+0x1e8/0x640 [ 331.937540] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.942459] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 331.947645] RIP: 0033:0x45a6f9 [ 331.950820] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 331.958510] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 331.965784] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 331.973034] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 331.980328] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 331.987578] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 18:09:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) pipe(&(0x7f0000000500)={0xffffffffffffffff}) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'system.', 'vboxnet0eth0\x00'}, &(0x7f0000000140)=""/172, 0xac) dup2(r2, r1) 18:09:03 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:09:03 executing program 1 (fault-call:3 fault-nth:15): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:09:03 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r1, 0x0, 0x0) keyctl$link(0x8, r0, r1) r2 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), 0xffffffffffffffff, 0x3fbc228b35c18a72}}, 0x18) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) accept4$netrom(r5, 0x0, &(0x7f0000000000), 0x80000) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r2, r6, 0x0, 0x800000bf) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r8, r6) [ 332.104116] input: syz1 as /devices/virtual/input/input91 [ 332.105131] FAULT_INJECTION: forcing a failure. [ 332.105131] name failslab, interval 1, probability 0, space 0, times 0 [ 332.143974] CPU: 0 PID: 10615 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 332.151913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.161287] Call Trace: [ 332.163880] dump_stack+0x142/0x197 [ 332.167512] should_fail.cold+0x10f/0x159 [ 332.171662] should_failslab+0xdb/0x130 [ 332.175635] kmem_cache_alloc_node+0x287/0x780 [ 332.180219] ? __lock_acquire+0x5f7/0x4620 [ 332.184456] __alloc_skb+0x9c/0x500 [ 332.188083] ? skb_trim+0x180/0x180 [ 332.191709] alloc_skb_with_frags+0x86/0x4b0 [ 332.196123] ? avc_has_perm+0x273/0x4b0 [ 332.200107] sock_alloc_send_pskb+0x5db/0x740 18:09:03 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 332.204612] ? sock_wmalloc+0xf0/0xf0 [ 332.208418] ? do_raw_spin_unlock+0x16b/0x260 [ 332.212917] ? _raw_spin_unlock+0x2d/0x50 [ 332.217097] unix_dgram_sendmsg+0x34c/0xf80 [ 332.221409] ? sock_has_perm+0x1ed/0x280 [ 332.221431] ? unix_dgram_connect+0x700/0x700 [ 332.221450] unix_seqpacket_sendmsg+0xf3/0x160 [ 332.221460] ? unix_dgram_sendmsg+0xf80/0xf80 [ 332.221469] sock_sendmsg+0xce/0x110 [ 332.221478] ___sys_sendmsg+0x349/0x840 [ 332.221490] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 332.221510] ? trace_hardirqs_on+0x10/0x10 [ 332.230037] ? save_trace+0x290/0x290 [ 332.230051] ? __might_fault+0x110/0x1d0 [ 332.230062] ? find_held_lock+0x35/0x130 [ 332.230071] ? __might_fault+0x110/0x1d0 [ 332.230170] ? rxrpc_rotate_tx_window.isra.0+0x70/0x7c0 [ 332.230190] __sys_sendmmsg+0x152/0x3a0 [ 332.239234] ? SyS_sendmsg+0x50/0x50 [ 332.239250] ? lock_downgrade+0x740/0x740 [ 332.239265] ? __mutex_unlock_slowpath+0x71/0x800 [ 332.246919] ? check_preemption_disabled+0x3c/0x250 [ 332.246933] ? wait_for_completion+0x420/0x420 [ 332.246945] ? __sb_end_write+0xc1/0x100 [ 332.246960] ? SyS_write+0x15e/0x230 [ 332.267911] SyS_sendmmsg+0x35/0x60 [ 332.284968] ? __sys_sendmmsg+0x3a0/0x3a0 [ 332.284983] do_syscall_64+0x1e8/0x640 [ 332.284995] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.327952] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 332.333144] RIP: 0033:0x45a6f9 [ 332.336338] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 332.344048] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 18:09:03 executing program 1 (fault-call:3 fault-nth:16): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 332.351318] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 332.358589] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 332.365870] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 332.373138] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 18:09:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x2}, 'syz1\x00', 0x1b}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x7f, 0xf8, 0x4, 0x3f, 0x20, 0x6, 0x62, 0x0, 0x1, 0x4}, 0xb) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) dup2(r3, r2) [ 332.464742] FAULT_INJECTION: forcing a failure. [ 332.464742] name failslab, interval 1, probability 0, space 0, times 0 [ 332.482110] input: syz1 as /devices/virtual/input/input92 [ 332.506115] CPU: 1 PID: 10629 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 332.514043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.514048] Call Trace: [ 332.514067] dump_stack+0x142/0x197 [ 332.514085] should_fail.cold+0x10f/0x159 [ 332.514102] should_failslab+0xdb/0x130 [ 332.537855] kmem_cache_alloc_node_trace+0x280/0x770 [ 332.542976] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 332.548445] __kmalloc_node_track_caller+0x3d/0x80 [ 332.553389] __kmalloc_reserve.isra.0+0x40/0xe0 [ 332.558068] __alloc_skb+0xcf/0x500 [ 332.561694] ? skb_trim+0x180/0x180 [ 332.565324] alloc_skb_with_frags+0x86/0x4b0 [ 332.569727] ? avc_has_perm+0x273/0x4b0 [ 332.573716] sock_alloc_send_pskb+0x5db/0x740 [ 332.578221] ? sock_wmalloc+0xf0/0xf0 [ 332.582144] ? do_raw_spin_unlock+0x16b/0x260 [ 332.586642] ? _raw_spin_unlock+0x2d/0x50 [ 332.590790] unix_dgram_sendmsg+0x34c/0xf80 [ 332.595113] ? sock_has_perm+0x1ed/0x280 [ 332.599189] ? unix_dgram_connect+0x700/0x700 18:09:03 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 332.603696] unix_seqpacket_sendmsg+0xf3/0x160 [ 332.608279] ? unix_dgram_sendmsg+0xf80/0xf80 [ 332.612768] sock_sendmsg+0xce/0x110 [ 332.612779] ___sys_sendmsg+0x349/0x840 [ 332.612791] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 332.612810] ? trace_hardirqs_on+0x10/0x10 [ 332.612821] ? save_trace+0x290/0x290 [ 332.612834] ? __might_fault+0x110/0x1d0 [ 332.629465] ? find_held_lock+0x35/0x130 [ 332.629478] ? __might_fault+0x110/0x1d0 [ 332.629505] __sys_sendmmsg+0x152/0x3a0 [ 332.629516] ? SyS_sendmsg+0x50/0x50 [ 332.641410] ? lock_downgrade+0x740/0x740 [ 332.641429] ? __mutex_unlock_slowpath+0x71/0x800 [ 332.641439] ? check_preemption_disabled+0x3c/0x250 [ 332.641449] ? wait_for_completion+0x420/0x420 [ 332.641461] ? __sb_end_write+0xc1/0x100 [ 332.641474] ? SyS_write+0x15e/0x230 [ 332.649485] SyS_sendmmsg+0x35/0x60 [ 332.649494] ? __sys_sendmmsg+0x3a0/0x3a0 [ 332.649508] do_syscall_64+0x1e8/0x640 [ 332.649517] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.649532] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 332.701181] RIP: 0033:0x45a6f9 18:09:03 executing program 1 (fault-call:3 fault-nth:17): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 332.704368] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 332.712077] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 332.719346] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 332.726620] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 332.733887] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 332.741158] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 [ 332.776895] FAULT_INJECTION: forcing a failure. [ 332.776895] name failslab, interval 1, probability 0, space 0, times 0 [ 332.797439] CPU: 1 PID: 10641 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 332.805347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.814699] Call Trace: [ 332.817291] dump_stack+0x142/0x197 [ 332.820927] should_fail.cold+0x10f/0x159 18:09:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000240)={r5}, 0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r5, 0x1, 0x10}, &(0x7f0000000100)=0xc) [ 332.825086] should_failslab+0xdb/0x130 [ 332.829074] kmem_cache_alloc_node+0x287/0x780 [ 332.833672] ? __lock_acquire+0x5f7/0x4620 [ 332.837917] __alloc_skb+0x9c/0x500 [ 332.841543] ? skb_trim+0x180/0x180 [ 332.845177] alloc_skb_with_frags+0x86/0x4b0 [ 332.849583] ? avc_has_perm+0x273/0x4b0 [ 332.853567] sock_alloc_send_pskb+0x5db/0x740 [ 332.858073] ? sock_wmalloc+0xf0/0xf0 [ 332.861881] ? do_raw_spin_unlock+0x16b/0x260 [ 332.866380] ? _raw_spin_unlock+0x2d/0x50 [ 332.870534] unix_dgram_sendmsg+0x34c/0xf80 [ 332.874861] ? sock_has_perm+0x1ed/0x280 [ 332.878935] ? unix_dgram_connect+0x700/0x700 [ 332.883441] unix_seqpacket_sendmsg+0xf3/0x160 [ 332.888023] ? unix_dgram_sendmsg+0xf80/0xf80 [ 332.892517] sock_sendmsg+0xce/0x110 [ 332.892529] ___sys_sendmsg+0x349/0x840 [ 332.892542] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 332.892560] ? trace_hardirqs_on+0x10/0x10 [ 332.892571] ? save_trace+0x290/0x290 [ 332.892582] ? __might_fault+0x110/0x1d0 [ 332.892593] ? find_held_lock+0x35/0x130 [ 332.900431] ? __might_fault+0x110/0x1d0 [ 332.900458] __sys_sendmmsg+0x152/0x3a0 [ 332.900469] ? SyS_sendmsg+0x50/0x50 [ 332.900482] ? lock_downgrade+0x740/0x740 [ 332.900498] ? __mutex_unlock_slowpath+0x71/0x800 [ 332.900507] ? check_preemption_disabled+0x3c/0x250 [ 332.900517] ? wait_for_completion+0x420/0x420 [ 332.951600] ? __sb_end_write+0xc1/0x100 [ 332.955677] ? SyS_write+0x15e/0x230 [ 332.959398] SyS_sendmmsg+0x35/0x60 [ 332.963024] ? __sys_sendmmsg+0x3a0/0x3a0 [ 332.967176] do_syscall_64+0x1e8/0x640 [ 332.971066] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.975919] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 332.981112] RIP: 0033:0x45a6f9 [ 332.984302] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 332.992008] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 332.999277] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 333.006547] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 333.013824] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 18:09:04 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000040)={0x5d, "cfab9d90bc207a4bca292e1c20eba438a3a40f3a993948d99c0377aeea48dc28", 0x1, 0x1}) sendfile(r0, r2, 0x0, 0x800000bf) [ 333.021101] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 18:09:04 executing program 1 (fault-call:3 fault-nth:18): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:09:04 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 333.093265] input: syz1 as /devices/virtual/input/input94 [ 333.133582] FAULT_INJECTION: forcing a failure. [ 333.133582] name failslab, interval 1, probability 0, space 0, times 0 [ 333.218490] CPU: 1 PID: 10656 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 333.226416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.235769] Call Trace: [ 333.238375] dump_stack+0x142/0x197 [ 333.242010] should_fail.cold+0x10f/0x159 [ 333.246169] should_failslab+0xdb/0x130 [ 333.250146] kmem_cache_alloc_node+0x287/0x780 [ 333.254734] ? __lock_acquire+0x5f7/0x4620 [ 333.258972] __alloc_skb+0x9c/0x500 [ 333.262597] ? skb_trim+0x180/0x180 [ 333.266226] alloc_skb_with_frags+0x86/0x4b0 [ 333.270630] ? avc_has_perm+0x273/0x4b0 [ 333.274608] sock_alloc_send_pskb+0x5db/0x740 [ 333.279109] ? sock_wmalloc+0xf0/0xf0 [ 333.282911] ? do_raw_spin_unlock+0x16b/0x260 [ 333.287406] ? _raw_spin_unlock+0x2d/0x50 [ 333.291557] unix_dgram_sendmsg+0x34c/0xf80 [ 333.295881] ? sock_has_perm+0x1ed/0x280 [ 333.299946] ? unix_dgram_connect+0x700/0x700 [ 333.304447] unix_seqpacket_sendmsg+0xf3/0x160 [ 333.309031] ? unix_dgram_sendmsg+0xf80/0xf80 [ 333.313532] sock_sendmsg+0xce/0x110 [ 333.317244] ___sys_sendmsg+0x349/0x840 [ 333.321216] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 333.325977] ? trace_hardirqs_on+0x10/0x10 [ 333.330215] ? save_trace+0x290/0x290 [ 333.334015] ? __might_fault+0x110/0x1d0 [ 333.338078] ? find_held_lock+0x35/0x130 [ 333.342134] ? __might_fault+0x110/0x1d0 [ 333.346208] __sys_sendmmsg+0x152/0x3a0 [ 333.350183] ? SyS_sendmsg+0x50/0x50 [ 333.353894] ? lock_downgrade+0x740/0x740 [ 333.358045] ? __mutex_unlock_slowpath+0x71/0x800 [ 333.362889] ? check_preemption_disabled+0x3c/0x250 [ 333.367903] ? wait_for_completion+0x420/0x420 [ 333.372485] ? __sb_end_write+0xc1/0x100 [ 333.376551] ? SyS_write+0x15e/0x230 [ 333.380273] SyS_sendmmsg+0x35/0x60 [ 333.383897] ? __sys_sendmmsg+0x3a0/0x3a0 [ 333.388044] do_syscall_64+0x1e8/0x640 [ 333.391931] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 333.396776] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 333.401961] RIP: 0033:0x45a6f9 [ 333.405152] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 333.412864] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 333.420129] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 333.427398] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 333.434664] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 333.442070] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 18:09:04 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x3, './file0\x00'}, 0x6e) r2 = socket$tipc(0x1e, 0x5, 0x0) getsockname$tipc(r2, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) open_by_handle_at(r3, &(0x7f0000000000)={0x82, 0x7ff, "91d2772f3f5f9cc827948274f56ac26ef971109cdd1d18788066e2430c86af5b3b704bd94ebc0c2c1e6d34bef0b6082828abe169092b2e58491128f5da27e5822fbb3359ac1ca055f109d21963e4a65eaebbc47844888dddb2f743888b2190430ae0b1d7a5c6bcb83e99351b5a00d3419f90fa02d0227cadabf5"}, 0x88400) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r4, 0x0, 0x800000bf) 18:09:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x2}, 'syz1\x00', 0x1b}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x7f, 0xf8, 0x4, 0x3f, 0x20, 0x6, 0x62, 0x0, 0x1, 0x4}, 0xb) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) dup2(r3, r2) 18:09:04 executing program 1 (fault-call:3 fault-nth:19): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:09:04 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:09:04 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x0, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) sendfile(r0, r2, 0x0, 0x800000bf) [ 333.644190] FAULT_INJECTION: forcing a failure. [ 333.644190] name failslab, interval 1, probability 0, space 0, times 0 [ 333.678874] input: syz1 as /devices/virtual/input/input95 [ 333.699171] CPU: 0 PID: 10675 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 333.707085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.716438] Call Trace: [ 333.719033] dump_stack+0x142/0x197 [ 333.722675] should_fail.cold+0x10f/0x159 [ 333.726835] should_failslab+0xdb/0x130 [ 333.730821] kmem_cache_alloc_node_trace+0x280/0x770 [ 333.735922] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 333.735935] __kmalloc_node_track_caller+0x3d/0x80 [ 333.735949] __kmalloc_reserve.isra.0+0x40/0xe0 [ 333.750955] __alloc_skb+0xcf/0x500 [ 333.754581] ? skb_trim+0x180/0x180 [ 333.758210] alloc_skb_with_frags+0x86/0x4b0 [ 333.762613] ? avc_has_perm+0x273/0x4b0 [ 333.766598] sock_alloc_send_pskb+0x5db/0x740 [ 333.771095] ? sock_wmalloc+0xf0/0xf0 [ 333.774898] ? do_raw_spin_unlock+0x16b/0x260 [ 333.779390] ? _raw_spin_unlock+0x2d/0x50 [ 333.783540] unix_dgram_sendmsg+0x34c/0xf80 [ 333.787860] ? sock_has_perm+0x1ed/0x280 [ 333.791928] ? unix_dgram_connect+0x700/0x700 [ 333.796430] unix_seqpacket_sendmsg+0xf3/0x160 [ 333.801006] ? unix_dgram_sendmsg+0xf80/0xf80 [ 333.805493] sock_sendmsg+0xce/0x110 [ 333.805504] ___sys_sendmsg+0x349/0x840 [ 333.805514] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 333.817929] ? trace_hardirqs_on+0x10/0x10 [ 333.822167] ? save_trace+0x290/0x290 [ 333.825974] ? __might_fault+0x110/0x1d0 [ 333.830040] ? find_held_lock+0x35/0x130 [ 333.834096] ? __might_fault+0x110/0x1d0 [ 333.838227] ? ia32_setup_sigcontext+0x2f0/0x440 [ 333.842999] __sys_sendmmsg+0x152/0x3a0 [ 333.847068] ? SyS_sendmsg+0x50/0x50 [ 333.850789] ? lock_downgrade+0x740/0x740 [ 333.854945] ? __mutex_unlock_slowpath+0x71/0x800 [ 333.859785] ? check_preemption_disabled+0x3c/0x250 [ 333.864805] ? wait_for_completion+0x420/0x420 [ 333.869391] ? __sb_end_write+0xc1/0x100 [ 333.873456] ? SyS_write+0x15e/0x230 [ 333.877300] SyS_sendmmsg+0x35/0x60 [ 333.880925] ? __sys_sendmmsg+0x3a0/0x3a0 [ 333.885072] do_syscall_64+0x1e8/0x640 [ 333.888955] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 333.893806] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 333.898990] RIP: 0033:0x45a6f9 [ 333.902173] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 333.909875] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 333.917142] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 333.924409] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 333.931675] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 333.938940] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 18:09:04 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:09:04 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0xc92826dcd9780390, 0x0, 0x4e21}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r1, 0x0, 0x800000bf) 18:09:04 executing program 1 (fault-call:3 fault-nth:20): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 333.996689] input: syz1 as /devices/virtual/input/input96 18:09:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x61}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r2, r1) [ 334.087546] FAULT_INJECTION: forcing a failure. [ 334.087546] name failslab, interval 1, probability 0, space 0, times 0 18:09:05 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0xffffffff, 0x200, 0x6, 0x6, 0x6, 0x6}) sendfile(r0, r2, 0x0, 0x800000bf) [ 334.142371] CPU: 0 PID: 10694 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 334.150295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.159647] Call Trace: [ 334.162513] dump_stack+0x142/0x197 [ 334.166143] should_fail.cold+0x10f/0x159 [ 334.170305] should_failslab+0xdb/0x130 [ 334.174285] kmem_cache_alloc_node_trace+0x280/0x770 [ 334.179392] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 334.184845] __kmalloc_node_track_caller+0x3d/0x80 [ 334.189776] __kmalloc_reserve.isra.0+0x40/0xe0 [ 334.194447] __alloc_skb+0xcf/0x500 [ 334.198073] ? skb_trim+0x180/0x180 [ 334.201705] alloc_skb_with_frags+0x86/0x4b0 [ 334.206105] ? avc_has_perm+0x273/0x4b0 [ 334.210087] sock_alloc_send_pskb+0x5db/0x740 [ 334.214588] ? sock_wmalloc+0xf0/0xf0 [ 334.218390] ? do_raw_spin_unlock+0x16b/0x260 [ 334.222887] ? _raw_spin_unlock+0x2d/0x50 [ 334.227039] unix_dgram_sendmsg+0x34c/0xf80 [ 334.231362] ? sock_has_perm+0x1ed/0x280 [ 334.235434] ? unix_dgram_connect+0x700/0x700 [ 334.239940] unix_seqpacket_sendmsg+0xf3/0x160 [ 334.244522] ? unix_dgram_sendmsg+0xf80/0xf80 [ 334.249018] sock_sendmsg+0xce/0x110 [ 334.252730] ___sys_sendmsg+0x349/0x840 [ 334.256705] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 334.261470] ? trace_hardirqs_on+0x10/0x10 [ 334.265711] ? save_trace+0x290/0x290 [ 334.269519] ? __might_fault+0x110/0x1d0 [ 334.273585] ? find_held_lock+0x35/0x130 [ 334.277652] ? __might_fault+0x110/0x1d0 [ 334.281727] __sys_sendmmsg+0x152/0x3a0 [ 334.285699] ? SyS_sendmsg+0x50/0x50 [ 334.289420] ? lock_downgrade+0x740/0x740 [ 334.293569] ? __mutex_unlock_slowpath+0x71/0x800 [ 334.298410] ? check_preemption_disabled+0x3c/0x250 [ 334.303427] ? wait_for_completion+0x420/0x420 [ 334.308013] ? __sb_end_write+0xc1/0x100 [ 334.312079] ? SyS_write+0x15e/0x230 [ 334.315804] SyS_sendmmsg+0x35/0x60 [ 334.319425] ? __sys_sendmmsg+0x3a0/0x3a0 [ 334.323576] do_syscall_64+0x1e8/0x640 [ 334.327464] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.332314] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 334.337501] RIP: 0033:0x45a6f9 [ 334.340686] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 334.348395] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 334.355665] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 334.362927] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 334.370192] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 334.377457] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 18:09:05 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 334.394932] input: syz1 as /devices/virtual/input/input97 18:09:05 executing program 1 (fault-call:3 fault-nth:21): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 334.507502] FAULT_INJECTION: forcing a failure. [ 334.507502] name failslab, interval 1, probability 0, space 0, times 0 18:09:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x2}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x1e}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @dev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r4, r6, r7) dup2(r2, r1) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x400000, 0x0) 18:09:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x2}, 'syz1\x00', 0x1b}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x7f, 0xf8, 0x4, 0x3f, 0x20, 0x6, 0x62, 0x0, 0x1, 0x4}, 0xb) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)) dup2(0xffffffffffffffff, r2) 18:09:05 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = socket$inet6(0xa, 0xa, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000480)={{{@in, @in=@multicast2}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000600)=0x1b2) pipe(&(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x9, 0x101800) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x202000, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x10201, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r9, 0xae80, 0x0) vmsplice(r1, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000280)="e3fa361333d9d5e949e4c08c1017631eb3fe38e9e2d921c304bc30fd104aeb0ad6131788c41a645fd1e094924f1b99175408179bf432e924ce2379c16abc997c012739f8eeb6bec65376fa2ea96d02c9d491346490", 0x55) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000000)) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x8000, 0x0) ioctl$KDADDIO(r10, 0x4b34, 0xfff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r11, 0x407, 0x0) write(r11, &(0x7f0000000c00)="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", 0xffffffffffffff15) getsockname$llc(r11, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000240)=0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, &(0x7f0000000580)={0xf673, 0x2, 0xf24b, 0x0, &(0x7f0000000300)}) r12 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r12, 0x0, 0x800000bf) [ 334.601090] CPU: 0 PID: 10712 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 334.609010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.618363] Call Trace: [ 334.620960] dump_stack+0x142/0x197 [ 334.624605] should_fail.cold+0x10f/0x159 [ 334.628764] should_failslab+0xdb/0x130 [ 334.632747] kmem_cache_alloc_node_trace+0x280/0x770 [ 334.637856] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 334.643313] __kmalloc_node_track_caller+0x3d/0x80 [ 334.648251] __kmalloc_reserve.isra.0+0x40/0xe0 [ 334.652925] __alloc_skb+0xcf/0x500 [ 334.656570] ? skb_trim+0x180/0x180 [ 334.660205] alloc_skb_with_frags+0x86/0x4b0 [ 334.664613] ? avc_has_perm+0x273/0x4b0 [ 334.668593] sock_alloc_send_pskb+0x5db/0x740 [ 334.673098] ? sock_wmalloc+0xf0/0xf0 [ 334.676996] ? do_raw_spin_unlock+0x16b/0x260 [ 334.681496] ? _raw_spin_unlock+0x2d/0x50 [ 334.685652] unix_dgram_sendmsg+0x34c/0xf80 [ 334.689975] ? sock_has_perm+0x1ed/0x280 [ 334.689996] ? unix_dgram_connect+0x700/0x700 [ 334.690014] unix_seqpacket_sendmsg+0xf3/0x160 [ 334.703150] ? unix_dgram_sendmsg+0xf80/0xf80 [ 334.707642] sock_sendmsg+0xce/0x110 [ 334.711349] ___sys_sendmsg+0x349/0x840 [ 334.715325] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 334.715344] ? trace_hardirqs_on+0x10/0x10 [ 334.715357] ? save_trace+0x290/0x290 [ 334.728114] ? __might_fault+0x110/0x1d0 [ 334.732176] ? find_held_lock+0x35/0x130 [ 334.736243] ? __might_fault+0x110/0x1d0 [ 334.740323] __sys_sendmmsg+0x152/0x3a0 [ 334.744296] ? SyS_sendmsg+0x50/0x50 [ 334.748005] ? lock_downgrade+0x740/0x740 [ 334.748023] ? __mutex_unlock_slowpath+0x71/0x800 [ 334.748031] ? check_preemption_disabled+0x3c/0x250 [ 334.748042] ? wait_for_completion+0x420/0x420 [ 334.766582] ? __sb_end_write+0xc1/0x100 [ 334.770651] ? SyS_write+0x15e/0x230 [ 334.771862] input: syz1 as /devices/virtual/input/input99 [ 334.774368] SyS_sendmmsg+0x35/0x60 [ 334.774377] ? __sys_sendmmsg+0x3a0/0x3a0 [ 334.774389] do_syscall_64+0x1e8/0x640 [ 334.774400] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.791553] entry_SYSCALL_64_after_hwframe+0x42/0xb7 18:09:05 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:09:05 executing program 1 (fault-call:3 fault-nth:22): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f0000000000000000000000000000000000005867923d9bd4f5c159af4f9331b9fa8bf43e74b4383b55fa07bfd02c11b1d03ad916482c4d4be9682de435c78daa0e38bcf56e449541e7489a32b8bad1d39fe03df08a9e366efdb1cbd589bce5f036c91eee4ba25c2dd06ef68c04000048e2f94028acaeb2496b0b264fdac309258a9917e71cb890d9209306d5af74a0a482d5f7d41b7dde0dd04b56ae65eb98dfe209cf707f94faba63a2dbfc7db5d42b8740839dc56d51463678dfb443eac8e019a8ad650b48a14e0f2597ef0be54c79cc0000e2d5e5b3b1c6c8db3819ceb10c45f429262ee5d99f095626e062953cd2f96cb02579bb18c22848df8543a67609fa64bfc3"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 334.791561] RIP: 0033:0x45a6f9 [ 334.791567] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 334.791578] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 334.791584] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 334.791589] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 334.791594] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 334.791599] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 [ 334.888144] FAULT_INJECTION: forcing a failure. [ 334.888144] name failslab, interval 1, probability 0, space 0, times 0 [ 334.939886] CPU: 0 PID: 10735 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 334.947802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.957159] Call Trace: [ 334.959755] dump_stack+0x142/0x197 [ 334.963390] should_fail.cold+0x10f/0x159 [ 334.967544] should_failslab+0xdb/0x130 [ 334.971518] kmem_cache_alloc_node+0x287/0x780 [ 334.976097] ? __lock_acquire+0x5f7/0x4620 [ 334.980331] __alloc_skb+0x9c/0x500 [ 334.983949] ? skb_trim+0x180/0x180 [ 334.987569] alloc_skb_with_frags+0x86/0x4b0 [ 334.991964] ? avc_has_perm+0x273/0x4b0 [ 334.991980] sock_alloc_send_pskb+0x5db/0x740 [ 334.991997] ? sock_wmalloc+0xf0/0xf0 [ 334.992009] ? do_raw_spin_unlock+0x16b/0x260 [ 334.992021] ? _raw_spin_unlock+0x2d/0x50 [ 334.992036] unix_dgram_sendmsg+0x34c/0xf80 [ 335.017187] ? sock_has_perm+0x1ed/0x280 [ 335.021250] ? unix_dgram_connect+0x700/0x700 [ 335.025754] unix_seqpacket_sendmsg+0xf3/0x160 [ 335.030333] ? unix_dgram_sendmsg+0xf80/0xf80 [ 335.034822] sock_sendmsg+0xce/0x110 [ 335.038538] ___sys_sendmsg+0x349/0x840 [ 335.042516] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 335.047278] ? trace_hardirqs_on+0x10/0x10 [ 335.051258] input: syz1 as /devices/virtual/input/input100 [ 335.051508] ? save_trace+0x290/0x290 [ 335.060895] ? __might_fault+0x110/0x1d0 [ 335.060905] ? find_held_lock+0x35/0x130 [ 335.060913] ? __might_fault+0x110/0x1d0 [ 335.060938] __sys_sendmmsg+0x152/0x3a0 [ 335.060949] ? SyS_sendmsg+0x50/0x50 [ 335.080751] ? lock_downgrade+0x740/0x740 [ 335.084903] ? __mutex_unlock_slowpath+0x71/0x800 [ 335.089747] ? check_preemption_disabled+0x3c/0x250 [ 335.094767] ? wait_for_completion+0x420/0x420 [ 335.099353] ? __sb_end_write+0xc1/0x100 [ 335.103426] ? SyS_write+0x15e/0x230 [ 335.107143] SyS_sendmmsg+0x35/0x60 [ 335.110763] ? __sys_sendmmsg+0x3a0/0x3a0 [ 335.114903] do_syscall_64+0x1e8/0x640 [ 335.118789] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.123649] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 335.128844] RIP: 0033:0x45a6f9 [ 335.132031] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 18:09:06 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:09:06 executing program 1 (fault-call:3 fault-nth:23): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 335.139742] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 335.147146] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 335.154418] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 335.161691] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 335.168957] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 [ 335.281468] FAULT_INJECTION: forcing a failure. [ 335.281468] name failslab, interval 1, probability 0, space 0, times 0 [ 335.361515] CPU: 1 PID: 10747 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 335.369434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.378794] Call Trace: [ 335.381393] dump_stack+0x142/0x197 [ 335.385038] should_fail.cold+0x10f/0x159 [ 335.389199] should_failslab+0xdb/0x130 [ 335.393183] kmem_cache_alloc_node_trace+0x280/0x770 [ 335.398291] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 335.403748] __kmalloc_node_track_caller+0x3d/0x80 [ 335.408683] __kmalloc_reserve.isra.0+0x40/0xe0 [ 335.413360] __alloc_skb+0xcf/0x500 [ 335.416994] ? skb_trim+0x180/0x180 [ 335.420627] alloc_skb_with_frags+0x86/0x4b0 [ 335.425036] ? avc_has_perm+0x273/0x4b0 [ 335.429019] sock_alloc_send_pskb+0x5db/0x740 [ 335.433525] ? sock_wmalloc+0xf0/0xf0 [ 335.437335] ? do_raw_spin_unlock+0x16b/0x260 [ 335.441840] ? _raw_spin_unlock+0x2d/0x50 [ 335.445996] unix_dgram_sendmsg+0x34c/0xf80 [ 335.450331] ? sock_has_perm+0x1ed/0x280 [ 335.454402] ? unix_dgram_connect+0x700/0x700 [ 335.458916] unix_seqpacket_sendmsg+0xf3/0x160 [ 335.463501] ? unix_dgram_sendmsg+0xf80/0xf80 [ 335.468005] sock_sendmsg+0xce/0x110 [ 335.471726] ___sys_sendmsg+0x349/0x840 [ 335.475703] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 335.480468] ? trace_hardirqs_on+0x10/0x10 [ 335.484708] ? save_trace+0x290/0x290 [ 335.488523] ? __might_fault+0x110/0x1d0 [ 335.492584] ? find_held_lock+0x35/0x130 [ 335.496647] ? __might_fault+0x110/0x1d0 [ 335.500762] __sys_sendmmsg+0x152/0x3a0 [ 335.504742] ? SyS_sendmsg+0x50/0x50 [ 335.508464] ? lock_downgrade+0x740/0x740 [ 335.512619] ? __mutex_unlock_slowpath+0x71/0x800 [ 335.517467] ? check_preemption_disabled+0x3c/0x250 [ 335.522489] ? wait_for_completion+0x420/0x420 [ 335.527078] ? __sb_end_write+0xc1/0x100 [ 335.531144] ? SyS_write+0x15e/0x230 [ 335.535212] SyS_sendmmsg+0x35/0x60 [ 335.538836] ? __sys_sendmmsg+0x3a0/0x3a0 [ 335.542988] do_syscall_64+0x1e8/0x640 [ 335.546874] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.551725] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 335.556913] RIP: 0033:0x45a6f9 18:09:06 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f34ed599fa841512649bc9b62b4cadbe0588f86b3668a70f7042f5163eb07cfd56c34e57444fa211ad4e01785ce2b8a1c332c6b74fe1b97573314b7b5a9a70e709ba611f2f2f158e6bc6ea40d45c231acec9659203bca16606494ae9e59db5dec73f3dd0122b9ca536e2eba5adee2f7842c87989c9c15bcdbbed760d1b1dc1c726e285ffe18bed8b867178835a2e2888af6b531c9ba42d18751c42fa23d344b249c8fc8519227ed5bef03c13f17244cef49054a34b56db7eb7855f2fd6ce3636b77a3cae99d231ac83108225b8a93559ee66bcd828ecbb41c6fdbf471a600e65c19a73f5148f367cd32e6780f3eb17f8b68c7f07c9d941613f9739eacec5b0891659e30ac5991c6686317639d000002"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 18:09:06 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x24000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RTC_WIE_ON(r3, 0x700f) [ 335.560103] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 335.567811] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 335.575082] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 335.582349] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 335.589621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 335.596891] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 18:09:06 executing program 1 (fault-call:3 fault-nth:24): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0x365, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 18:09:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x2}, 'syz1\x00', 0x1b}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x7f, 0xf8, 0x4, 0x3f, 0x20, 0x6, 0x62, 0x0, 0x1, 0x4}, 0xb) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)) dup2(0xffffffffffffffff, r2) [ 335.718677] input: syz1 as /devices/virtual/input/input101 [ 335.745113] FAULT_INJECTION: forcing a failure. [ 335.745113] name failslab, interval 1, probability 0, space 0, times 0 [ 335.776715] CPU: 0 PID: 10759 Comm: syz-executor.1 Not tainted 4.14.158-syzkaller #0 [ 335.784625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.793974] Call Trace: [ 335.796566] dump_stack+0x142/0x197 [ 335.800203] should_fail.cold+0x10f/0x159 [ 335.804362] should_failslab+0xdb/0x130 [ 335.808355] kmem_cache_alloc_node+0x287/0x780 [ 335.812947] ? __lock_acquire+0x5f7/0x4620 [ 335.817189] __alloc_skb+0x9c/0x500 [ 335.820832] ? skb_trim+0x180/0x180 [ 335.824465] alloc_skb_with_frags+0x86/0x4b0 [ 335.828875] ? avc_has_perm+0x273/0x4b0 [ 335.832859] sock_alloc_send_pskb+0x5db/0x740 [ 335.837367] ? sock_wmalloc+0xf0/0xf0 [ 335.841166] ? do_raw_spin_unlock+0x16b/0x260 [ 335.845655] ? _raw_spin_unlock+0x2d/0x50 [ 335.849801] unix_dgram_sendmsg+0x34c/0xf80 [ 335.854125] ? sock_has_perm+0x1ed/0x280 [ 335.858197] ? unix_dgram_connect+0x700/0x700 [ 335.862720] unix_seqpacket_sendmsg+0xf3/0x160 [ 335.862732] ? unix_dgram_sendmsg+0xf80/0xf80 [ 335.862745] sock_sendmsg+0xce/0x110 18:09:06 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 335.871799] ___sys_sendmsg+0x349/0x840 [ 335.871811] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 335.871829] ? trace_hardirqs_on+0x10/0x10 [ 335.871840] ? save_trace+0x290/0x290 [ 335.871852] ? __might_fault+0x110/0x1d0 [ 335.871861] ? find_held_lock+0x35/0x130 [ 335.871869] ? __might_fault+0x110/0x1d0 [ 335.871891] __sys_sendmmsg+0x152/0x3a0 [ 335.871905] ? SyS_sendmsg+0x50/0x50 [ 335.879572] ? lock_downgrade+0x740/0x740 [ 335.879590] ? __mutex_unlock_slowpath+0x71/0x800 [ 335.879598] ? check_preemption_disabled+0x3c/0x250 [ 335.879609] ? wait_for_completion+0x420/0x420 [ 335.892360] ? __sb_end_write+0xc1/0x100 [ 335.892377] ? SyS_write+0x15e/0x230 [ 335.892393] SyS_sendmmsg+0x35/0x60 [ 335.896497] input: syz1 as /devices/virtual/input/input102 [ 335.900477] ? __sys_sendmmsg+0x3a0/0x3a0 [ 335.900490] do_syscall_64+0x1e8/0x640 [ 335.900500] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.900515] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 335.900523] RIP: 0033:0x45a6f9 [ 335.900528] RSP: 002b:00007f3edbfe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 335.900537] RAX: ffffffffffffffda RBX: 00007f3edbfe0c90 RCX: 000000000045a6f9 [ 335.900542] RDX: 0324fad809d5a9cf RSI: 0000000020000040 RDI: 0000000000000003 [ 335.900547] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 335.900552] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3edbfe16d4 [ 335.900557] R13: 00000000004c9063 R14: 00000000004e0c68 R15: 0000000000000005 [ 336.021233] ================================================================== [ 336.028847] BUG: KASAN: use-after-free in cdev_put.part.0+0x4c/0x50 [ 336.028862] Read of size 8 at addr ffff888095eb9028 by task syz-executor.3/10764 [ 336.042766] [ 336.042780] CPU: 0 PID: 10764 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0 [ 336.042788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.042792] Call Trace: [ 336.042807] dump_stack+0x142/0x197 [ 336.042824] ? cdev_put.part.0+0x4c/0x50 [ 336.042841] print_address_description.cold+0x7c/0x1dc [ 336.042853] ? cdev_put.part.0+0x4c/0x50 [ 336.042866] kasan_report.cold+0xa9/0x2af [ 336.052406] ? evdev_ioctl+0x30/0x30 [ 336.052419] __asan_report_load8_noabort+0x14/0x20 [ 336.064321] cdev_put.part.0+0x4c/0x50 [ 336.064331] chrdev_open+0x266/0x590 [ 336.064342] ? cdev_put.part.0+0x50/0x50 [ 336.064357] ? security_file_open+0x89/0x190 [ 336.072010] do_dentry_open+0x73b/0xeb0 [ 336.072023] ? cdev_put.part.0+0x50/0x50 [ 336.072038] vfs_open+0x105/0x220 [ 336.072049] path_openat+0x8bd/0x3f70 [ 336.072063] ? trace_hardirqs_on+0x10/0x10 [ 336.072095] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 336.072103] ? find_held_lock+0x35/0x130 [ 336.072118] ? __alloc_fd+0x1d4/0x4a0 [ 336.081415] do_filp_open+0x18e/0x250 [ 336.081427] ? may_open_dev+0xe0/0xe0 [ 336.081443] ? do_raw_spin_unlock+0x16b/0x260 [ 336.081454] ? _raw_spin_unlock+0x2d/0x50 [ 336.081464] ? __alloc_fd+0x1d4/0x4a0 [ 336.089296] do_sys_open+0x2c5/0x430 [ 336.089318] ? filp_open+0x70/0x70 [ 336.118306] ? SyS_clock_gettime+0xf8/0x180 [ 336.129716] SyS_open+0x2d/0x40 [ 336.129727] ? do_sys_open+0x430/0x430 [ 336.129741] do_syscall_64+0x1e8/0x640 [ 336.129750] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 336.129765] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 336.129774] RIP: 0033:0x414491 [ 336.198030] RSP: 002b:00007f0bc15d27a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 336.205781] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000414491 [ 336.213061] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f0bc15d2850 [ 336.220343] RBP: 000000000075c070 R08: 000000000000000f R09: 0000000000000000 [ 336.227616] R10: 00007f0bc15d39d0 R11: 0000000000000293 R12: 00007f0bc15d36d4 [ 336.234889] R13: 00000000004cad79 R14: 00000000004e42c8 R15: 00000000ffffffff [ 336.242165] [ 336.243846] Allocated by task 10720: [ 336.247567] save_stack_trace+0x16/0x20 [ 336.251557] save_stack+0x45/0xd0 [ 336.255013] kasan_kmalloc+0xce/0xf0 [ 336.258728] kmem_cache_alloc_trace+0x152/0x790 [ 336.263396] evdev_connect+0x76/0x4a0 [ 336.267265] input_attach_handler+0x154/0x1a0 [ 336.271759] input_register_device.cold+0xbf/0x202 [ 336.276689] uinput_ioctl_handler.isra.0+0xdc8/0x18a0 [ 336.281887] uinput_ioctl+0x4a/0x60 [ 336.285518] do_vfs_ioctl+0x7ae/0x1060 [ 336.289407] SyS_ioctl+0x8f/0xc0 [ 336.292769] do_syscall_64+0x1e8/0x640 [ 336.296651] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 336.301840] [ 336.303467] Freed by task 10722: [ 336.306848] save_stack_trace+0x16/0x20 [ 336.310815] save_stack+0x45/0xd0 [ 336.314279] kasan_slab_free+0x75/0xc0 [ 336.318163] kfree+0xcc/0x270 [ 336.321260] evdev_free+0x5e/0x70 [ 336.324812] device_release+0x7b/0x1a0 [ 336.328733] kobject_put.cold+0x269/0x2f9 [ 336.332879] cdev_default_release+0x41/0x50 [ 336.337548] kobject_put.cold+0x269/0x2f9 [ 336.341864] cdev_put.part.0+0x39/0x50 [ 336.345840] cdev_put+0x20/0x30 [ 336.349119] __fput+0x648/0x7a0 [ 336.352399] ____fput+0x16/0x20 [ 336.355739] task_work_run+0x114/0x190 [ 336.360238] exit_to_usermode_loop+0x1da/0x220 [ 336.364820] do_syscall_64+0x4bc/0x640 [ 336.368711] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 336.373895] [ 336.375531] The buggy address belongs to the object at ffff888095eb8a40 [ 336.375531] which belongs to the cache kmalloc-2048 of size 2048 [ 336.388456] The buggy address is located 1512 bytes inside of [ 336.388456] 2048-byte region [ffff888095eb8a40, ffff888095eb9240) [ 336.400501] The buggy address belongs to the page: [ 336.405438] page:ffffea000257ae00 count:1 mapcount:0 mapping:ffff888095eb81c0 index:0x0 compound_mapcount: 0 [ 336.415593] flags: 0xfffe0000008100(slab|head) [ 336.420183] raw: 00fffe0000008100 ffff888095eb81c0 0000000000000000 0000000100000003 [ 336.428512] raw: ffffea0002a45520 ffffea0002817520 ffff8880aa800c40 0000000000000000 [ 336.436408] page dumped because: kasan: bad access detected [ 336.442120] [ 336.443753] Memory state around the buggy address: [ 336.448682] ffff888095eb8f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.456043] ffff888095eb8f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.463401] >ffff888095eb9000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.470755] ^ 18:09:07 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0xf) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x1, 0x8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x02', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x8, 0x200) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000500)={0xffffffffffffffff}) dup2(r3, r2) 18:09:07 executing program 5: socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000040)={0x6879, 0x10000, 0x140, 'queue1\x00', 0x8000}) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x250001, 0x0) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x170, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20400}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x99d}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xee0}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfa}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8}, 0x40000) 18:09:07 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 336.475419] ffff888095eb9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.482769] ffff888095eb9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.482773] ================================================================== [ 336.482776] Disabling lock debugging due to kernel taint 18:09:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x1b}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) write$FUSE_INTERRUPT(r2, &(0x7f0000000100)={0x10, 0x7fffffffffffffff, 0x4}, 0x10) dup2(r2, r1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)) 18:09:07 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000), 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @sack_perm, @sack_perm], 0x4) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0xfffffffffffffe15) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="160e90cb39b8a59f8c4064ac6d7b242060a07bc4309e3eb79d8745797b3000fcffffef35ad9d8a17240f28f55f57c55f3875db81d255cea4e7e1c11c95fc01964aeb9ed6ef4e80bc67cba7e7fe961fe5d121442b0a06e1248121fbe68bae9598b037b135f8a73b68ff904b436f256f50ae7cb980e69e7580b9f1a432b54668ab1c6ede4211f23240559b8c427000d7ce7862507ab5a50e494b2a54e346d74c8f08ccef06813e235b446788ac0f1df3ce5bc1fbd58a55e3a7c88f46384b815b515393364a2efdb24a69f1f9da8cce"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) ioctl$FICLONE(r2, 0x40049409, r4) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 336.662636] input: syz1 as /devices/virtual/input/input103 [ 336.726297] Kernel panic - not syncing: panic_on_warn set ... [ 336.726297] [ 336.733718] CPU: 0 PID: 10764 Comm: syz-executor.3 Tainted: G B 4.14.158-syzkaller #0 [ 336.742814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.752165] Call Trace: [ 336.755021] dump_stack+0x142/0x197 [ 336.758650] ? cdev_put.part.0+0x4c/0x50 [ 336.762773] panic+0x1f9/0x42d [ 336.765962] ? add_taint.cold+0x16/0x16 [ 336.769972] ? ___preempt_schedule+0x16/0x18 [ 336.774394] kasan_end_report+0x47/0x4f [ 336.778370] kasan_report.cold+0x130/0x2af [ 336.782608] ? evdev_ioctl+0x30/0x30 [ 336.786449] __asan_report_load8_noabort+0x14/0x20 [ 336.791402] cdev_put.part.0+0x4c/0x50 [ 336.795289] chrdev_open+0x266/0x590 [ 336.799007] ? cdev_put.part.0+0x50/0x50 [ 336.803068] ? security_file_open+0x89/0x190 [ 336.807481] do_dentry_open+0x73b/0xeb0 [ 336.811458] ? cdev_put.part.0+0x50/0x50 [ 336.815520] vfs_open+0x105/0x220 [ 336.818977] path_openat+0x8bd/0x3f70 [ 336.822778] ? trace_hardirqs_on+0x10/0x10 [ 336.827020] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 336.831692] ? find_held_lock+0x35/0x130 [ 336.835759] ? __alloc_fd+0x1d4/0x4a0 [ 336.839563] do_filp_open+0x18e/0x250 [ 336.843363] ? may_open_dev+0xe0/0xe0 [ 336.847166] ? do_raw_spin_unlock+0x16b/0x260 [ 336.851662] ? _raw_spin_unlock+0x2d/0x50 [ 336.855809] ? __alloc_fd+0x1d4/0x4a0 [ 336.859613] do_sys_open+0x2c5/0x430 [ 336.863327] ? filp_open+0x70/0x70 [ 336.866864] ? SyS_clock_gettime+0xf8/0x180 [ 336.871189] SyS_open+0x2d/0x40 [ 336.874461] ? do_sys_open+0x430/0x430 [ 336.878351] do_syscall_64+0x1e8/0x640 [ 336.882231] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 336.887109] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 336.892328] RIP: 0033:0x414491 [ 336.895513] RSP: 002b:00007f0bc15d27a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 336.907562] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000414491 [ 336.914827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f0bc15d2850 [ 336.922352] RBP: 000000000075c070 R08: 000000000000000f R09: 0000000000000000 [ 336.929626] R10: 00007f0bc15d39d0 R11: 0000000000000293 R12: 00007f0bc15d36d4 [ 336.936895] R13: 00000000004cad79 R14: 00000000004e42c8 R15: 00000000ffffffff [ 336.945618] Kernel Offset: disabled [ 336.949242] Rebooting in 86400 seconds..