cal, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) getresuid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) r10 = getegid() statx(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4000, 0x40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x3, r4}, {0x2, 0x4, r5}, {0x2, 0x2, r7}], {0x4, 0x4}, [{0x8, 0x2, r9}, {0x8, 0x0, r10}, {0x8, 0x4, r11}, {0x8, 0x0, r12}, {0x8, 0x4, r13}, {0x8, 0x1}, {0x8, 0x5, r14}], {0x10, 0x2}, {0x20, 0x2}}, 0x7c, 0x1) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r16 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r17 = dup(r16) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r17, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x0, 0x3, [0x1000, 0x100, 0xfffc]}, &(0x7f00000000c0)=0xe) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) fcntl$dupfd(r0, 0x0, r15) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) 00:35:42 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000b4c072804bc6d2489cc4c4f726c130c52fb216b46e6b733011face315fa3a43dc7d952c5e9a97905f47530220418f506034bcf8da33a902b0687e912438ab1a9acc222f30fc0fbd9c1c2dff65e1ba8737a41c99f708efd90442ad488ae", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0xb}, 0x7dfc0000}}, 0x20, 0x1, 0x101, 0x1, 0x9, 0x81, 0x2}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={r6, @in={{0x2, 0x4e23, @broadcast}}, 0x101, 0xdc7c}, 0x90) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x43ea00, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r7, 0x3b70, &(0x7f0000000380)={0x18}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r9, 0xc040564b, &(0x7f0000000000)={0x8, 0x0, 0x1005, 0x4, 0x2, {0x3, 0xffffff80}, 0x1}) 00:35:42 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f00000004c0)={0xb4, 0x3, 0x4, 0x1000, 0xf6e, {r8, r9/1000+10000}, {0x3, 0x0, 0x7, 0x5, 0x5, 0x6, "baa76cfd"}, 0x8001, 0x1, @fd, 0x80000000, 0x0, 0xffffffffffffffff}) setsockopt$rose(r10, 0x104, 0x5, &(0x7f0000000540)=0x20, 0x4) r11 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r11, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000100)=""/51) ptrace$setopts(0x4206, r0, 0x0, 0x0) r5 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r5, 0x3c) tkill(r5, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f2cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ee5a9af91be93caf246c08898d7d7461ae3aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:35:42 executing program 1: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, 0x3, @perf_config_ext={0x10000, 0x1}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:35:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4, 0x88000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f00000000c0)={0x5, 0x8000002, 0x1}) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:35:42 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000000)={0xfffb, 0x5, [0x80, 0x1, 0xffff, 0xb13, 0x80], 0x1000}) msgget(0x0, 0x4) 00:35:42 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r4, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x0, 0x1ff, 0x8, 0x7}, @ipx={0xffff, 0x3b, 0xf7, 0x0, {@current, @random="3a3dd73f4906", 0x5}, {@current, @broadcast}, "4ac7d001c691a9c8f917582d8f0afc31e71e2d1e3d5b496eeca8a695a8"}}, 0x45) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) dup2(r7, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0x7, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:35:42 executing program 1: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x107, 0x2, 0x35, "2f263f83b03e9e1d20e61678e37a4d3e", "5769dfeb09468be823c87afadfa74ad92534439ec320efbfae51546cf20af235631b86c389f5a7236a80a48e429a5cdff59fc1d6b3a3be05ee155b9c475db2f1865b5007aa004d49b652fd22b708825ae4aac3fa76470485efaa73b20d16f5bd73324ba2063d1b0fc3e9ed4415497c2952b868de2071d667f53a736aa8a6e82fa468d725a60c58cd502b709a92ef19eb389543df6a4a78fd416a7e017087b2f2099bca48f0c06cd4f3b51152f454b57121b115df6a0e5c4c14d038745bb7eb1a46063db3349fa03693d3ccf6b06b6acefc080facb138b978424b439ea5ce43c272be9d843481488eee8674a45cfca7bce51e"}, 0x107, 0x2) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:35:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x40000000000) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:35:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000100)={0x0, 0x80000, r3}) 00:35:42 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x2000}) msgget(0x0, 0x4) 00:35:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x800, @loopback, 0x100}, {0xa, 0x4e23, 0x2, @loopback, 0xfc}, 0x8001, [0xc4df, 0x8, 0x202c, 0xde, 0x5, 0x7, 0x1, 0xffffffff]}, 0x5c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:35:43 executing program 1: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:35:43 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x78a41f33e50961a3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000005c0)) r2 = socket(0x10, 0x803, 0x20) dup(r2) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) syz_extract_tcp_res(&(0x7f0000000380), 0x0, 0x4) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r7}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) io_setup(0x10000, &(0x7f00000003c0)=0x0) io_destroy(r9) eventfd2(0x6, 0x1001) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r11 = dup2(r5, r10) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000240)={0x4, 0x2, 0x76, 0xc6f9}) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x145080, 0x0) ioctl$PPPIOCSPASS(r13, 0x40107447, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[{0x4, 0x37, 0x0, 0x1}, {0x4, 0x80, 0x7f, 0xcb51}, {0x9, 0x3, 0x7}]}) 00:35:43 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x3, 0x460) 00:35:43 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x20008008, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}, 0xfffffffa}, 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000100)={@broadcast, @remote, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000180)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7, r4}) 00:35:43 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$UI_BEGIN_FF_ERASE(r7, 0xc00c55ca, &(0x7f0000000240)={0xb, 0x3, 0x7}) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x4000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$packet(r2, 0x0, &(0x7f0000000040), 0x0) socket$packet(0x11, 0x3, 0x300) 00:35:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000000)=[0xb30, 0xffffffff, 0x8ff9, 0x81, 0xfff, 0x8000, 0x1f], &(0x7f00000000c0)=[0x0], 0x7, 0x839, 0xdededede}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000180)=""/199, &(0x7f0000000280)=0xc7) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f0000000140)={0x0, 0x0, 0x101, 0x1, {0x2, 0x5, 0x3, 0x40}}) ioctl$USBDEVFS_RESET(r1, 0x5514) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) 00:35:43 executing program 1: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) creat(&(0x7f0000001400)='./file0\x00', 0x80) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="1300000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e37b4599c9b7cbbeeea8be34a"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x23, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="e5ffffff0000000008001c00ef000000"], 0x28}}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 1350.691990] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1350.733090] IPv6: ADDRCONF(NETDEV_UP): veth62: link is not ready [ 1350.795543] device veth62 entered promiscuous mode [ 1350.819571] IPv6: ADDRCONF(NETDEV_UP): veth62: link is not ready 00:35:45 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0xfffffffffffff801, 0x8) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:var_log_t:s0\x00', 0x1f, 0x2) 00:35:45 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0) 00:35:45 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r4, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x0, 0x1ff, 0x8, 0x7}, @ipx={0xffff, 0x3b, 0xf7, 0x0, {@current, @random="3a3dd73f4906", 0x5}, {@current, @broadcast}, "4ac7d001c691a9c8f917582d8f0afc31e71e2d1e3d5b496eeca8a695a8"}}, 0x45) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) dup2(r7, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x0, 0x8, 0xb}) 00:35:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r2, 0x0, 0x0) 00:35:45 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup2(r2, r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0xff27) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x4, 0x0, [0x7ff, 0xfc, 0x7, 0x563a, 0x3, 0x6, 0x4, 0x8, 0x93, 0xf7d, 0x101, 0xff, 0x0, 0x7, 0x1, 0xff]}, {0x2, 0x0, [0xffffffff, 0x1ff, 0x401, 0x0, 0x3, 0x400, 0x8, 0xfffffff7, 0xffff0000, 0x4, 0x1fc000, 0x20, 0x712, 0xc47f, 0x100, 0xca89]}, {0x2a, 0x0, [0x7ffc, 0xde8, 0x2, 0x80000001, 0x6, 0x80000000, 0x0, 0x1ff, 0x4, 0x4, 0x80000000, 0x6, 0x5, 0xb1, 0x0, 0x81]}], r3, 0x1, 0x1, 0xd8}}, 0x20) msgget(0x0, 0xa5) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000023c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@iv={0x18}], 0x18}], 0x1, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$netrom_NETROM_T4(r6, 0x103, 0x6, &(0x7f00000000c0)=0x3, 0x4) 00:35:45 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 00:35:45 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r4, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x0, 0x1ff, 0x8, 0x7}, @ipx={0xffff, 0x3b, 0xf7, 0x0, {@current, @random="3a3dd73f4906", 0x5}, {@current, @broadcast}, "4ac7d001c691a9c8f917582d8f0afc31e71e2d1e3d5b496eeca8a695a8"}}, 0x45) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) dup2(r7, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:45 executing program 2: r0 = socket$inet6(0xa, 0x4, 0x0) clock_gettime(0x0, &(0x7f0000002200)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002140), 0x0, 0x21, &(0x7f0000002240)={r1, r2+30000000}) r3 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:35:45 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xd07}, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f00000001c0)) 00:35:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 00:35:45 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r4, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x0, 0x1ff, 0x8, 0x7}, @ipx={0xffff, 0x3b, 0xf7, 0x0, {@current, @random="3a3dd73f4906", 0x5}, {@current, @broadcast}, "4ac7d001c691a9c8f917582d8f0afc31e71e2d1e3d5b496eeca8a695a8"}}, 0x45) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) dup2(r7, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:35:46 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x200000, 0x0) 00:35:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x111000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:35:46 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r4, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x0, 0x1ff, 0x8, 0x7}, @ipx={0xffff, 0x3b, 0xf7, 0x0, {@current, @random="3a3dd73f4906", 0x5}, {@current, @broadcast}, "4ac7d001c691a9c8f917582d8f0afc31e71e2d1e3d5b496eeca8a695a8"}}, 0x45) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) getpriority(0x0, r1) tkill(r0, 0x3c) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x20240, 0x0) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)="40520908907879f1e2dcb012b894bf793200cac59b4916c06dd2db5a7a43b5301cb56f3a54c5991c03c9a4715fff6f56ce4c9b0a7609a9c9d4028339244ea437f84dc4111603050f3f83900d7a206553cfb605c18e34cd90c373afdca01451f5dc19140db7b5647c3b950dcb09c71a83c9d897b66bab42e66127be36eb6d9b0db7b1873684d8b75910d33d683ac81166f7dad758ef094e1d33afd3dcd4917d313e2bea1217816e1ceb8c3b48748184e5b16c4b6df8d5bbf047c6ceb137d772c3d4236f3fe1f0d140207cfd9fe2ee805902fd93b56afd38d3399f6cda702e9157", 0xe0}, {&(0x7f00000001c0)="9f23f9be7af96c8845206ffaf0e8a0678698c2effbe22e3206985dd75f2dc861851473f3d74ac5006b162bef346a3a2746c7547874d00f0f30ea9eeb1d102b58fcd1c42d7a9a9c77e1c449246b22196730c3ad7782ff6c6418780ca656c01e37bc810fe155b562cdc0053bf83c2c7be3d7e82381a54ac4f4fbf81a974a10dcd579ccf2a4166ca3eb4cffb6e2a17dbe7c1ecf8ce4f4642527e92897c59bd43b12133acb0014d2ef8a5f96d3ad32bf3f4a02e591f512bbb59b466c07b8453f9e04b4579dd39d1d289224bc51b9327be792871dcce0de65a9663c5b9cf140bffffbab0267bc82db3c21d3a42c551f7aa35502d96c5fbc982c1882f8", 0xfa}], 0x2, 0x8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:35:48 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140)) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x100, 0x4, 0x4, 0x3, 0x6, "3352466e97ca96ede6c1e2810bb3e4912beba9", 0x6f, 0x7ff}) 00:35:48 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) getsockname$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @bcast}, [@bcast, @null, @netrom, @bcast, @remote, @netrom, @null, @default]}, &(0x7f0000000240)=0x48) msgget(0x0, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000002c0), &(0x7f0000000180)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xaf, "3a04f61d80da8eb13f1a735722a154c7488e2f7b0c69750f54811ae044d40f4ecb577fadc3c215e8dc4bc7591b286efa0531037dd7a9d5b32ad29d35fb91ec5f5e7d7b6c28785bdd31ef12acf8c10ba6b1f99802cfd469b7fc35279c65a532ea563ffe89dc7e14d2b6213be538fafa980a206dd39132c4f4c43e91486964fdf158d1590aad736aeeae74b22846a1745d9e07c73e675a1546908242cbb3b7a9429225c95e6004e263d76dd5ea7d45f9"}, &(0x7f0000000000)=0xb7) 00:35:48 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x1c) dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSCTTY(r10, 0x540e, 0x40) ioctl$EVIOCGKEYCODE(r9, 0x80084504, &(0x7f0000000240)=""/227) 00:35:48 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r4, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x0, 0x1ff, 0x8, 0x7}, @ipx={0xffff, 0x3b, 0xf7, 0x0, {@current, @random="3a3dd73f4906", 0x5}, {@current, @broadcast}, "4ac7d001c691a9c8f917582d8f0afc31e71e2d1e3d5b496eeca8a695a8"}}, 0x45) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = gettid() wait4(r1, 0x0, 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:35:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x4, {{0xffffffffffffff81, 0xfffffffffffff351, 0x0, r1}}}, 0x28) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x18, r0, 0x83, 0x8) ptrace$cont(0x7, r0, 0x0, 0x0) 00:35:48 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r4, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x0, 0x1ff, 0x8, 0x7}, @ipx={0xffff, 0x3b, 0xf7, 0x0, {@current, @random="3a3dd73f4906", 0x5}, {@current, @broadcast}, "4ac7d001c691a9c8f917582d8f0afc31e71e2d1e3d5b496eeca8a695a8"}}, 0x45) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:49 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f00000001c0)={0x9, 0x8, 0x9}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r7}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:49 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r4, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x0, 0x1ff, 0x8, 0x7}, @ipx={0xffff, 0x3b, 0xf7, 0x0, {@current, @random="3a3dd73f4906", 0x5}, {@current, @broadcast}, "4ac7d001c691a9c8f917582d8f0afc31e71e2d1e3d5b496eeca8a695a8"}}, 0x45) dup2(r7, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:49 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="0500200000bed8b1703b17ada84037e257ebe8454f781e0000000035628b5453783f26cc32718d6473832f7549665e671cacb5a8c25b87e61ae81f5ecff7dc68", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e21, 0x5, @mcast1, 0x401}}, 0x3ff, 0x7, 0x1ff, 0x4, 0x4}, &(0x7f0000000000)=0x98) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:35:49 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r7, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:49 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) dup2(0xffffffffffffffff, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:49 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f00000002c0)) r6 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r7}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r12, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x66, &(0x7f0000000040)={r13}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r11, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r13, 0x1000}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000280)={r14, 0x1ff}, 0x8) r15 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r15, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:49 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) dup2(0xffffffffffffffff, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:49 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r2, 0x80000}) 00:35:49 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getresuid(&(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000140)) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 00:35:49 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) dup2(0xffffffffffffffff, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x4a231400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008}) ftruncate(r1, 0x1c08) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000040)={0x30}, 0x30) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:35:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) accept$netrom(r1, &(0x7f0000000080)={{0x3, @null}, [@default, @netrom, @null, @bcast]}, &(0x7f0000000100)=0x48) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept$netrom(r3, &(0x7f0000000140)={{0x3, @netrom}, [@bcast, @netrom, @netrom, @null, @rose, @remote, @bcast]}, &(0x7f00000001c0)=0x48) 00:35:51 executing program 4: msgget(0x0, 0x4) 00:35:51 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r6, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:51 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)) r2 = semget(0x1, 0x0, 0x34a) semctl$GETVAL(r2, 0x2, 0xc, &(0x7f0000000140)=""/204) r3 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:35:51 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000207010300000000000000000000000014000780080001400000000008000240bd3b0000"], 0x28}}, 0x0) r6 = dup2(r4, r5) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f0000000240)={{0x4, 0x4}, {0x1f, 0x8}, 0x1, 0x6, 0x7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r7}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:52 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r6, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x80000001}, 0x1c) 00:35:52 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000000c0)={0x0, @bt={0xed49, 0x7, 0x1, 0x3, 0x4, 0x401, 0x9, 0xef43, 0x4, 0xdfe, 0x7fffffff, 0x6, 0x6, 0xca, 0x1b, 0xd, {0xb396}, 0xb1, 0x3}}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) prlimit64(0xffffffffffffffff, 0xfb3aa1201a5c49b9, &(0x7f0000000180)={0x0, 0x200}, &(0x7f00000001c0)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r1, 0x0, 0x0) 00:35:52 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0xa, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) r8 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x20500, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x4000, 0xfff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r7, &(0x7f0000000640)='./file0\x00', 0x0, 0x800, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r8, &(0x7f00000006c0)=ANY=[@ANYBLOB="8d00000008010000006e000400008000000102000000b1ae77fb00a0b8beed003000050000000000000000030073797a20005e6d643573756d766d6e657431252773656c696e75785e76626f786e6574312f0a012f6465762f7a65726f000e006e65742f6d6366696c74657236000a006e49742f726f75746500575ac0c8cdc2c032f812c3513b42963ce6671839d5c0a1000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32], 0x8d) r11 = getegid() r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000020701031f00000000000000000000001400078008000140000000000800024000000000"], 0x28}}, 0x0) fstat(r12, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r14, 0x407, 0x0) write(r14, &(0x7f0000000340), 0x41395527) r15 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x20500, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x4000, 0xfff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r14, &(0x7f0000000640)='./file0\x00', 0x0, 0x800, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r15, &(0x7f00000006c0)=ANY=[@ANYBLOB="8d00000008010000006e000400008000000102000000b1ae77fb00a0b8beed003000050000000000000000030073797a20005e6d643573756d766d6e657431252773656c696e75785e76626f786e6574312f0a012f6465762f7a65726f000e006e65742f6d6366696c74657236000a006e49742f726f75746500575ac0c8cdc2c032f812c3513b42963ce6671839d5c0a1000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32], 0x8d) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r19, 0x407, 0x0) write(r19, &(0x7f0000000340), 0x41395527) r20 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x20500, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x4000, 0xfff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r19, &(0x7f0000000640)='./file0\x00', 0x0, 0x800, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r20, &(0x7f00000006c0)=ANY=[@ANYBLOB="8d00000008010000006e000400008000000102000000b1ae77fb00a0b8beed003000050000000000000000030073797a20005e6d643573756d766d6e657431252773656c696e75785e76626f786e6574312f0a012f6465762f7a65726f000e006e65742f6d6366696c74657236000a006e49742f726f75746500575ac0c8cdc2c032f812c3513b42963ce6671839d5c0a1000000", @ANYRES32=r21, @ANYRES32=r22, @ANYRES32], 0x8d) fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x8}, [{0x2, 0x3, r4}, {0x2, 0x2, r5}], {0x4, 0x2}, [{0x8, 0x1, r6}, {0x8, 0x5, r10}, {0x8, 0x6, r11}, {0x8, 0x4, r13}, {0x8, 0x1}, {0x8, 0x8, r17}, {0x8, 0x4, r18}, {0x8, 0x2, r22}], {}, {0x20, 0x6}}, 0x74, 0x1) r23 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x800, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r23, 0xc05c5340, &(0x7f0000000240)={0x7, 0x7, 0xf3a, {0xff, 0x8001}, 0x9, 0x46}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:depmod_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20040801) msgget(0x0, 0x4) 00:35:52 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r6, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:52 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) 00:35:52 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r6, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:52 executing program 2: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x85, 0x6e, &(0x7f00000003c0)="13a8828ca6c7919920e481d430bd1d06384f5672047083ebea2fdb2f8498af1cced6e63d4abf9dd01c85a21c91be92745c0d351d2e3da2c9f7e842b7b5a66f32013883aeb0b4b871819beba439ccd6a5274ba7d517fac0d60fc7b29d076444e6749528a9870e8cfd978d481a263b95d0272e8d6c0bd116494b7708a9b78d879776ca85d89b", &(0x7f0000000200)=""/110, 0x61ab, 0x0, 0x75, 0xd5, &(0x7f0000000480)="23f072e1297d48c3b8c4376965aebc9fd635f7cdeb3752ae64ee0a679e564e9db880c0fafbdb4d012ceb85377155b2fdd98952f05f2e504af1bd2bbb87bbbc76251948549511cb84eebee816bdfd4090fae76847f523205c9e0f95faffd158a7c63f39b3d8de0b0b92181a88abe7b54b2bdd55bfb1", &(0x7f0000000500)="aa9e124b47fc6445de94806e322ed521d02345d359d1f36d691866c91cd6abe3fc0cb34792820dbbca17ed8541d86da24d5cf4b2fddf9738024719607dcaac75f0e2254667bf750135ebce4e48d4c0651cc655e430517efa1d44737eb99b6a17707e4532c2fab02bb5413b8752e5dd447a8c69d0e71c5592c40ca0d727857154b699e7231be674e0cdb0cce89c26bbe1f1ed4c4fa384099e96ee1c418fe5d52fa2776eba974adda22f08d6deb995be32d7a31673e4cce63d7563ca5316e684a1efd6436dbbdfc31a45ee4c74357f264efebc6d9e71"}, 0x40) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xf2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x58, "79ddf7366491b65fe01e3fe3d51233aef826818fc6dd5c381bf7936bd097ef43308fe57c78a8bc1e460c1571dd99acc2fabd494537ced2219c81f2b2b8995aa6ee86c6d009d67648b6f41f5b574d9c22582884c93ad4c7eb"}, &(0x7f00000000c0)=0x60) r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4002) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101200, 0x0) 00:35:52 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r6, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:52 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x4040815, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @remote, 0xffffff80}, 0xfffffffffffffe9a) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x800) socket$caif_stream(0x25, 0x1, 0x2) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000100)={0x101, {{0xa, 0x4e20, 0x2, @remote, 0x4}}, {{0xa, 0x4e22, 0x7, @mcast2, 0x5e35}}}, 0x108) 00:35:52 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:52 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) fcntl$setpipe(r1, 0x407, 0x1a) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:35:52 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:52 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0xb1) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:35:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:35:55 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:55 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nl=@proc, &(0x7f00000000c0)=0x80, 0x800) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="705eafbf0d7e282c55522c9b523db470eeb1cc2d29663588c47ede4760960fba8a01bba75a3f7cd1dd6d030c2f84014ee604885f5149a8daed29deda527180a109afeb612908e9cd24e83d8c363631f3aa98c617af1a60792e19c18d8f000000000000000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x7ff, 0x200, 0x3, 0xbc6, r4}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={r5, 0xffffffff}, 0x8) 00:35:55 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x401, 0x218042) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000002c0)={@empty, 0x0, 0x2, 0x1, 0x1, 0xed5, 0x5}, &(0x7f0000000300)=0x20) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000201}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="300f2bbd7000fbdbdf250510000006000e000900000400000600c62de0380e20e7ffff07ffffff00bb00ebff05000d000000008800"/66], 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) msgget(0x0, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$rds(r2, &(0x7f0000000240)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RVERSION(r5, &(0x7f0000000200)={0x13, 0x65, 0xffff, 0x8, 0x6, '9P2000'}, 0x13) 00:35:55 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:55 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) 00:35:55 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:55 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VT_ACTIVATE(r1, 0x5606, 0x6) 00:35:55 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') setsockopt$inet6_int(r1, 0x29, 0xcb, &(0x7f00000001c0)=0xfffffff8, 0x4) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0640164", @ANYRES16=r3, @ANYBLOB="130700000000000000001f000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xfff}]}, 0x24}}, 0x4000) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:35:55 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:55 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x8, 0x50400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000140)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x8, 0x9}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f00000000c0)=0x5, 0x4) msgget(0x0, 0x13) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000002c0), &(0x7f0000000340)=0x68) 00:35:55 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:55 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008011}, 0x14004050) 00:35:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28dfffff010701030000000000000000000000001400078008000140000000000800024000000000"], 0x28}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) write$P9_RSETATTR(r2, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000000)) 00:35:56 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:56 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000020701030000000000000000000000001400077208400140000000000800024000000000"], 0x28}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000002900)='/dev/vsock\x00', 0x10000, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x7fff) r3 = gettid() getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000002880), &(0x7f00000028c0)=0x4) accept(0xffffffffffffffff, &(0x7f00000027c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, &(0x7f0000002840)=0x80) ptrace$getenv(0x4201, r3, 0xb5c0, &(0x7f0000002780)) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$tipc(r2, &(0x7f0000002740)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x2}}, 0x10, &(0x7f00000025c0)=[{&(0x7f00000000c0)="40de4e8655e5", 0x6}, {&(0x7f0000000140)="6c43e312be6967093d36ac930aa02b1873357ba3343133c9c7f816bcf4d313d93c87a8153f07c7fad3000255004773e7669807ff80d42950987e321670a2bbe6202325e5795fc102e24d541032993a8b8d12ac7c49811a89885c549534229499dd02793eb8fcfd976b5f45817eb5122c9d54d51b1dd09c948dc04265e914f8f9dbc78f39ab76d10706abb7ce8100d199273e4b497f7aade7f9a3d84e370b5ed10e8fe6a9ea0ff44f60e8ab9a52292f1190b6890afd117427f71285", 0xbb}, {&(0x7f0000000200)="592ab5ef4287718fa3757a671436e78e068f023ed5a6e1fa35130c44456d788eeed37d44561968b47c03c111cffd1298284f08b6460d7130673c0307fa7da6b74c2392447b1b3acdd5fe5b2a18910394045aa5293e3eff4420dffe3f4714233e18cacc3a619cec83b431bed78f9ecc21162b8d395885cfe6d56dc91d0413f86242004dd1dcdb586485", 0x89}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="adfa19d0043639e8751f4de2b6cc2c23b04261547aa18b7ba3999e7998de0b991da1d2f04c055afb1a6d5b5fb1f3d37a0f5c812129e835e54c9b3681308d1e2b945433f5d728cc75fc0b7133ea62cda3068cfe14920cfdf2dfab4e1169ded8851ae76892ad3a8691c845c90f7589ba7a970fb1b7bb9ca3d4861ce62cc6a125815c4e454f4d683f342c32eeeefd0a469db8364a18bbf74486c91c907df57514c5cea8b21ae943c3759a1c27a8b2a8c8af3223b4acd5f61c606d17502c1fa6c76ab9", 0xc1}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="77d35a583335bd433c01ebf3ed732c88aaf5531cb05b9a9695b902698f871817e13a0709cf65b08e3b9d319b095f00f70181cade8db4fe0a4246e0882b8a75b8b75051d3a693ce11ac5c7f74dbf859f2bb2eeb934342f7a50a22d71da7777cef82dab97e5b5c7cdcce4f4eca5a8836529d2f553bb484b56952fd3e573dd4257db7fee7ffedc0daa66411965f942ecb417a254d9d43a81900322d55377f476f1b3250a17b6d6405b618f32cc9b48999b1708f43313d496a361202e136fa", 0xbd}, {&(0x7f0000002540)="aba8b4eff73eeca763359d78aff6de35c7899138fc6ccef0e8c417fe21658f17d2a9aeaebdea9a725c0ca0a859ea4d1f0192776af3681382a21351be3d2537a645314e2d13d039464ec28cfb07f6f0e9f1a6588c49d6e5f2c40cdeee41c7ff1b7c0129870f7eb17429e5c8a5e134eead45ba0604cd4cb5e863bffaa2ee", 0x7d}], 0x8, &(0x7f0000002640)="27a22b64088bb51dd1471f01af36d3a00541d4222be2b18ff8885631c883a10e0ca67a415ae172216bd54bd32eb4a67c022be2c74d72ebd8d23f5e54ec2a3b615c2bd3f5f88e2e520e2c88e2a2565370ee61cfc39497c05e9e83308525b9be61ed9b4fff2351524457c9d337ddaeaa43ce01509e463a3e0cc25f66478d70254124475c72e05c273e5670de48abf9f11d2a958262f0bddb112eef6741e370857f3aa6580cbc6fae78d31e30aa3af915fa859fee3bef66c451134b0a2f618c592dc452de862df7ff1b8e8a4a3d47c9b28e3858c44bfc37b3a313", 0xd9, 0x10}, 0x20000010) 00:35:56 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:56 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x10}, 0x1c) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x420001, 0x0) 00:35:56 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:56 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000080)) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002abd70dffbdbdf250f001000000008000500070000001400038008000300030000000500087dda000000080005bb9a000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80da, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="584653420000100000000000000010000000dd60000000984f0b5042b64b06bc87cba3e6cc3f8002000000000000000000ffff000000800000f9fffffffb80030000000006020000000001c034a40200010000100700000000000000ff0f00000c0400000048cb", 0x67}], 0xc000, 0x0) ioctl$TIOCEXCL(r2, 0x540c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000840)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:35:58 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:35:58 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) [ 1365.956394] XFS (loop0): bad version 00:35:58 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:58 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:58 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:58 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:59 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r4, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x0, 0x1ff, 0x8, 0x7}, @ipx={0xffff, 0x3b, 0xf7, 0x0, {@current, @random="3a3dd73f4906", 0x5}, {@current, @broadcast}, "4ac7d001c691a9c8f917582d8f0afc31e71e2d1e3d5b496eeca8a695a8"}}, 0x45) dup2(r7, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:59 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, 0xffffffffffffffff) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:59 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, 0xffffffffffffffff) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:35:59 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r4, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x0, 0x1ff, 0x8, 0x7}, @ipx={0xffff, 0x3b, 0xf7, 0x0, {@current, @random="3a3dd73f4906", 0x5}, {@current, @broadcast}, "4ac7d001c691a9c8f917582d8f0afc31e71e2d1e3d5b496eeca8a695a8"}}, 0x45) dup2(r7, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setregs(0xd, r0, 0x9, &(0x7f0000000080)="94d841ba21df83fdbf323370c5aacd71836f0bba6a30a45dbf303f095346a70a2c435b5f6397491e4b1b48b949dad8db3457658082a17b00a9f6a546cdbf47ce01260ab99f930b7b684ca1c9edce26e328ed7741337091c29143f913251c64088ee7e822dacede8c4045a3ede40a3afe0e559c2d1df7") ptrace$setopts(0x4200, 0x0, 0x7866, 0x15) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_pid(r2, &(0x7f0000000100)=r0, 0x12) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") getpgid(r0) getpid() ptrace$cont(0x9, 0x0, 0x20, 0xfffffffffffffffe) 00:36:01 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, 0xffffffffffffffff) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:01 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r4, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x0, 0x1ff, 0x8, 0x7}, @ipx={0xffff, 0x3b, 0xf7, 0x0, {@current, @random="3a3dd73f4906", 0x5}, {@current, @broadcast}, "4ac7d001c691a9c8f917582d8f0afc31e71e2d1e3d5b496eeca8a695a8"}}, 0x45) dup2(r7, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:01 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x40, &(0x7f0000000280)='NLBL_UNLBL\x00') msgget(0x0, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r5, 0x5, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x50) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r5, 0x200, 0x70bd27, 0x25dfdbf8}, 0x14}}, 0x50) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44e6924ee13c4adc}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c094}, 0x0) 00:36:01 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r4, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x0, 0x1ff, 0x8, 0x7}, @ipx={0xffff, 0x3b, 0xf7, 0x0, {@current, @random="3a3dd73f4906", 0x5}, {@current, @broadcast}, "4ac7d001c691a9c8f917582d8f0afc31e71e2d1e3d5b496eeca8a695a8"}}, 0x45) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:01 executing program 1: socket(0x10, 0x803, 0x20) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1368.954788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25309 comm=syz-executor.4 [ 1368.987262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25309 comm=syz-executor.4 [ 1369.037321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25313 comm=syz-executor.4 00:36:01 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r4, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x0, 0x1ff, 0x8, 0x7}, @ipx={0xffff, 0x3b, 0xf7, 0x0, {@current, @random="3a3dd73f4906", 0x5}, {@current, @broadcast}, "4ac7d001c691a9c8f917582d8f0afc31e71e2d1e3d5b496eeca8a695a8"}}, 0x45) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1369.088156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25309 comm=syz-executor.4 00:36:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000000)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) 00:36:02 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r4, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x0, 0x1ff, 0x8, 0x7}, @ipx={0xffff, 0x3b, 0xf7, 0x0, {@current, @random="3a3dd73f4906", 0x5}, {@current, @broadcast}, "4ac7d001c691a9c8f917582d8f0afc31e71e2d1e3d5b496eeca8a695a8"}}, 0x45) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:02 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:02 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x519800, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f00000000c0)}) 00:36:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = semget(0x3, 0x3, 0x7c) semctl$IPC_RMID(r1, 0x0, 0x0) semtimedop(r1, &(0x7f0000000080)=[{0x0, 0x3500, 0x1000}, {0x2, 0xbb8, 0x2000}, {0x4, 0x1f, 0x1000}, {0x0, 0xff80, 0x1000}, {0x3, 0x6, 0x2000}, {0x0, 0xfff7, 0x1000}], 0x6, &(0x7f00000000c0)) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:04 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:04 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r7, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:04 executing program 4: fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0xc8ca, 0x868}]}, 0xc, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) 00:36:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:04 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:04 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) dup2(0xffffffffffffffff, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:04 executing program 4: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x80000000}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) capset(&(0x7f00000000c0)={0x19980330, r1}, &(0x7f0000000100)={0x800, 0x5, 0x28, 0x3ff, 0x3800}) msgget(0x0, 0x4) 00:36:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xf1) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0xa}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x34}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x1) ptrace$cont(0x7, r0, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x300, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x850}, 0x8040) 00:36:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:04 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) dup2(0xffffffffffffffff, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:05 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x2, 0x2001) 00:36:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:05 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) dup2(0xffffffffffffffff, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:05 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}) 00:36:05 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r6, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:05 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r6, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:05 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000000)={0x0, 0x2}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r10, 0x84, 0x21, &(0x7f00000002c0)=0x4, 0x4) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="1300000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e37b4599c9b7cbbeeea8be34a"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x23, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r8, @ANYBLOB="e5ffffff0000000008001c00ef000000"], 0x28}}, 0x0) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x500, 0x0) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r13}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xc0c7, 0xffffffffffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c090}, 0x4c084) 00:36:07 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) setrlimit(0x8, &(0x7f000000a000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x1, @bcast, @bpq0='bpq0\x00', 0x2, 'syz0\x00', @bcast, 0x49dbc65a, 0x5, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup(r3) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000100)={0x10000, 0x111000}) mlockall(0x2) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4c, "0a60a8e6137d3db6e22b1a1d0b4b47245c4aff47701ce89df749644dcfd606f29353a360ec93cdc309ca6ef839893cd0d3e7e6a9de523823292b3e53dbb739bdde461684f5c18e8ee9a49cd5"}, &(0x7f0000000200)=0x70) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000140)={0x3f}) ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:08 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r6, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:08 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000180)={r4, 0x2}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000200)={r4, 0x4, &(0x7f0000000100)=[0x2f0, 0x51, 0x7fff, 0x1000], &(0x7f0000000140)=[0x100, 0x6, 0x7fff, 0x80000001, 0x4, 0x3, 0xfffff3ec], 0x16, 0x1, 0x81, &(0x7f0000000180)=[0x2], &(0x7f00000001c0)=[0xffffffff, 0x7, 0x8, 0x263, 0x8, 0xffffffff, 0x400, 0x8001, 0x4972]}) msgget(0x0, 0x4) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x101000, 0x0) 00:36:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:08 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r6, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:08 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r6, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:08 executing program 4: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000440)={0xffff8001, 0x5, 0x4, 0x104, 0x2, {0x0, 0x2710}, {0x1, 0x1, 0xe1, 0x1, 0x1f, 0x0, ')\a$L'}, 0x0, 0x2, @planes=&(0x7f0000000400)={0x8, 0x1, @userptr=0x5, 0x3}, 0x3, 0x0, 0xffffffffffffffff}) connect$nfc_llcp(r0, &(0x7f00000004c0)={0x27, 0x0, 0x2, 0x1, 0x1, 0x20, "b2760a747ee16eecce703426d6e47b8154eb1bae11dc16f5d8feb34e9a501c6137dde11bd8eb9025986f319a7ba185b3984e5683616ffb2a8f3f846701679d", 0x3d}, 0x60) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) capset(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000080)) msgget(0x0, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) 00:36:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:08 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:08 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x1400, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r1, 0x29, 0x1c, &(0x7f0000000200)="b995b17c641ec516d48bd528297dcbebb83a4beed2f1d64ddb33b43e3a62418ef12583797b3967ea7581b0454d6101ad16a77642e486325685424127fb50eee9d8ee01ee41fa2614b0132d83c80f638f557d46630ab3a59557ae35886280d2dceaef0389e85b03920dfd7911723b4aa015ac69ee33017ffaf9cbbcddd33d79d355f7bdb807b8eb9a628e4809cad5", 0x8e) ioctl$TIOCSSERIAL(r0, 0x541e, &(0x7f0000000180)={0x3, 0xffff, 0x5, 0x2, 0x32a3, 0x0, 0x3d, 0x6, 0x0, 0x8, 0x8, 0x8, 0xfff9, 0x1, &(0x7f00000002c0)=""/146, 0x3cb, 0x7f, 0x2}) 00:36:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:08 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:08 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:11 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000100)=0x1) 00:36:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, r0}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={r3, 0x80000}) 00:36:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:11 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:11 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) msgget(0x0, 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x2, 0x4) 00:36:11 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000000c0)={0xbd04, 0x4, 0x0, 0x3, 0x7fffffff, 0x9}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) 00:36:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:11 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x1b1940) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:11 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:11 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:11 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x400) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x9, &(0x7f0000000240)=0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) splice(r7, &(0x7f0000000280)=0x3, r8, &(0x7f00000002c0)=0x20, 0x4bbbee14, 0x0) ioctl$USBDEVFS_RESETEP(r6, 0x80045503, &(0x7f00000001c0)={0xf}) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r4, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x10040014) 00:36:11 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2, 0x3cdc00) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:11 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) prctl$PR_CAPBSET_READ(0x17, 0xf) 00:36:11 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x400000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) fcntl$getown(r3, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000040)={0xffd, &(0x7f0000002280)=""/4093}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:12 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000280)) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4200, r0, 0xfffffffffffffffc, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x80080, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r2, &(0x7f0000000300)="4f52b5eda0229394ad47"}, 0x20) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$vhci(r4, &(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, "d756d0febb7ed837e99c90fc9c5ee3d038"}, 0x12) tkill(r0, 0x3c) prlimit64(0xffffffffffffffff, 0xd, &(0x7f0000000180)={0x4, 0x1}, &(0x7f00000001c0)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") r5 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000200)) clock_adjtime(0x2, &(0x7f0000000080)={0x5, 0x8, 0x6, 0x0, 0x2000, 0x378, 0x8, 0x9, 0x6, 0x81, 0x80, 0x1003498, 0x55, 0xffffffffffffffbd, 0x4, 0xffffffff00000000, 0x1, 0x7fff, 0x7f, 0x100000000, 0x100000000, 0x1, 0x5, 0x3f, 0x9}) ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:12 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:12 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000100)) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1e040, 0x0) ioctl$UI_GET_VERSION(r5, 0x8004552d, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x5, 0x3, 0x73, &(0x7f0000ffc000/0x1000)=nil, 0x7fffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:12 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1379.468634] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:12 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8000000000000, 0x101000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:12 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4205, r0, 0x0, 0x100040) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @local}, &(0x7f0000000200)=0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={0x14, r5, 0x4e8e2bd47b7602b7}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r5, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffff81}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:12 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, 0xffffffffffffffff) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:12 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, 0xffffffffffffffff) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:12 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x80000, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x100, 0x105001) accept4$inet(r4, 0x0, &(0x7f00000000c0), 0x80800) 00:36:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:12 executing program 2: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, 0xffffffffffffffff) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:12 executing program 2: socket(0x10, 0x803, 0x20) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:12 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:13 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:13 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:13 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x8, 0x210840) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="1300000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e37b4599c9b7cbbeeea8be34a"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x23, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r7, @ANYBLOB="e5ffffff0000000008001c00ef000000"], 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg1\x00', r7}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="1300000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e37b4599c9b7cbbeeea8be34a"], 0x48}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x23, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r12, @ANYBLOB="e5ffffff0000000008001c00ef000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x24}}, 0x48080) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000200)={&(0x7f00000000c0), &(0x7f0000000100)=""/241, 0xf1}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r13, 0x541b, &(0x7f0000000000)) r14 = dup2(r13, 0xffffffffffffffff) setsockopt$RDS_GET_MR_FOR_DEST(r14, 0x114, 0x7, &(0x7f0000000340)={@ethernet={0x1, @multicast}, {&(0x7f0000000040)=""/51, 0x33}, &(0x7f0000000180), 0x22}, 0xa0) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x26, &(0x7f0000000240)=ANY=[@ANYBLOB="18cecfff894254000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfb, &(0x7f00001a7f05)=""/239, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r15, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x21) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r14, 0x0, 0x2, &(0x7f0000000240)=')\x00', r16}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240)='(\x00', r16}, 0x30) wait4(r17, 0x0, 0x2, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1380.610314] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 00:36:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1380.732740] IPv6: ADDRCONF(NETDEV_UP): veth31: link is not ready [ 1380.764729] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 00:36:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1380.817715] IPv6: ADDRCONF(NETDEV_UP): veth33: link is not ready 00:36:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:16 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x8, 0xfff}) ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:16 executing program 5: r0 = socket(0x10, 0x803, 0x20) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000f31b010300000000000000000000000004ffff0000000040110000003f00000000000000"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0xfffffffffffffffe) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000380)) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r6) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000240)={0x0, 0x0, 0x4}) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x0, 0xa24f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000340000705000000ffeb00000000000000", @ANYRES32, @ANYBLOB="000004103ba78500010000000800010068746262dd00000000000200"], 0x3}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\a\a\x00'/20, @ANYRES32=r9, @ANYBLOB="00000000fffffffff6ffffff0b0001006d756c746971000008"], 0x3}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x11, 0x800000003, 0x0) bind(r11, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0xfdffffff, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001800dd8d0000000000000000020000000000fe020000000008000400", @ANYRES32=r12, @ANYBLOB="80671723ac4886ac2c66de4df1c7754abf8a8019e5aa7ac69b73c902c531e91acfbfca31db3625f9ded11cde5733c0498c4901f3d11a6e9970db54318d32eeecd53c748f15db346ccf1f876991f1baa08e225c9cf5726cf44ac7d4e6a09bb460628ce045222bb89bf676bc699a6465360f6b51dee3adbefcb694d7d874e59ed3cc02941498c5cffba36d8a0796018892a4e7933e312ff3c2555f02ddfcecda287ddccdf2b5f0adf1c18d9533e781985a2d064fe287ca5c2f01d841923b6dadf951cd3e71c9941b7816b42019b8409fa83955b7898d0c71ec05a9c052275213f05b7f2a4750e4ec5cba"], 0x24}}, 0x0) 00:36:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:16 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000001c0)={0x9}, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r7}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:16 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) ioctl$SIOCRSACCEPT(r4, 0x89e3) r5 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x2a000, 0x0) ioctl$KVM_GET_SREGS(r7, 0x8138ae83, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:16 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$x25(r2, &(0x7f0000000140)={0x9, @remote={[], 0x1}}, 0x12) ptrace$setopts(0x4206, r0, 0x0, 0x10) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0xffffffffffffffff) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="287f00000000000000170000000000000b0000001400078008000140000000000800024000000000"], 0x28}}, 0x0) r4 = dup(r3) r5 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x80, 0x40c400) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x100, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) r10 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x20500, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x4000, 0xfff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r9, &(0x7f0000000640)='./file0\x00', 0x0, 0x800, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r10, &(0x7f00000006c0)=ANY=[@ANYBLOB="8d00000008010000006e000400008000000102000000b1ae77fb00a0b8beed003000050000000000000000030073797a20005e6d643573756d766d6e657431252773656c696e75785e76626f786e6574312f0a012f6465762f7a65726f000e006e65742f6d6366696c74657236000a006e49742f726f75746500575ac0c8cdc2c032f812c3513b42963ce6671839d5c0a1000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32], 0x8d) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000380)={0xa0, 0xffffffffffffffda, 0x1, {{0x1, 0x3, 0x5, 0xfff, 0x3, 0x1, {0x6, 0x40, 0x80000000, 0x0, 0x0, 0x3, 0x6, 0x217d, 0xa2ea, 0x7fffffff, 0x9, r8, r12, 0x100, 0x1ff}}, {0x0, 0x9}}}, 0xa0) ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, &(0x7f00000001c0)={0x4d, "8b63b3d384419c061a333c0da7366a768c25af8fb8160b454f49ae06644a1db8ad561e6b2b637b7d5f7497590ccce9a71914f26e7f62679d3f880d590e1ded4314bc6ef3d4a90e94a65b4a90784812366055f7b5e01c05242aec16171741c6576a3b837fc98df3a03176f77e5d033bd1c36df4d04c641173a891647dbe588f10"}) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000080)={{0x2, 0x4e24, @rand_addr=0x5}, {0x306, @remote}, 0x38, {0x2, 0x4e22, @multicast1}, 'batadv0\x00'}) r13 = semget(0x3, 0x3, 0x7c) semctl$IPC_RMID(r13, 0x0, 0x0) semctl$SETVAL(r13, 0x3, 0x10, &(0x7f0000000100)=0x8) ptrace$cont(0x7, r0, 0x7, 0x6) 00:36:16 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0x2}) 00:36:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:16 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) ioprio_set$pid(0x2, r1, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x20442, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000100)=""/28) ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:16 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x800, 0x80000) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(0xffffffffffffffff, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(0xffffffffffffffff, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(0xffffffffffffffff, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:20 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000200), &(0x7f0000000240)=0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="0100020040634b2e7150d420ff5e51d4f80a5275a15d79e0150af94e5a7946ca7e1cc38c753f2e24ebf5353a249312d10dd07d6ce542779072b0100a18bb32ad96ad970e478021e19d4ca004fe3b6176714e1224d71bd5b3a5b4cd5db400f1a21174fc658ccd8e107e669fe262d3d140b25a5679e6bcba185ff2bca506000000543098ee26d1ca34de5ee10499636cea87edef", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x8008, 0x20, 0x1, r5}, &(0x7f0000000100)=0x10) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000002070103001300e6e4a616a0538f14323f532a9c25e698db5a11669e0014000780080001407490beef000000002800064000000100"], 0x28}}, 0x0) r7 = accept(r6, 0x0, &(0x7f0000000180)) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f00000001c0)=0x3f, 0x4) ptrace$cont(0x7, r2, 0x0, 0x0) 00:36:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, 0xffffffffffffffff) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, 0xffffffffffffffff) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1387.622221] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 00:36:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, 0xffffffffffffffff) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x0, 0x0, &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x1, 0x0) tkill(r0, 0x3c) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x297) clone(0x1011980, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffc000/0x3000)=nil) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) tkill(r3, 0x3c) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x1, 0x2, 0x7, 0x0, r3}) ptrace$cont(0x7, r0, 0x7, 0xbdd) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000140)="a668aceccfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece446fdd9a35eb0b6aacf3285d346188ee430859eee60ed9db2f5611fb88d8491023ce4c04ce1c3c9f89996078b13636498a4388bec94794076ea4adb967e621dbe0770655c8811c4cac7f95dbda8ddaf7edb31d5791ec6283c897faee656bd517cd192b542") ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0xffffffff, &(0x7f0000000240)=""/160) ptrace$cont(0x7, r5, 0x0, 0x0) 00:36:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x0, 0x0, &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x2000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) fstatfs(r4, &(0x7f0000000400)=""/16) r5 = syz_open_dev$mouse(&(0x7f00000003c0)='/dev/input/mouse#\x00', 0x0, 0x800) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3, 0x80000, r5}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = openat$cgroup_ro(r11, &(0x7f0000000280)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r12, 0x6, 0x1c, &(0x7f00000000c0)=""/169, &(0x7f0000000180)=0xa9) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28abd0fe0fab0f00000002070103000000000000000000715000140007800800d91bc8ec081c0800024000000000"], 0x28}}, 0x0) r13 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r13, 0x84, 0x13, &(0x7f0000000040)=0x1000, 0x4) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r14, 0xc0046686, &(0x7f0000000000)={0x2, 0x39, "facd841a579214c74a256499de619fdc46e2502ca6b18d486c50b3c3f101573963ab06631a495c36f4fa74b9c0b7bd5eb8ed0bfa37531bc1ad"}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x608800, 0x0) 00:36:23 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x400100) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0xd195, 0x0, 0x1, 0x709e}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000100)={0x7f, r1, 0x10001, 0x7}) 00:36:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000080)) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x400, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xf000000, 0x1ff, 0x44a, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x980915, 0x0, [], @value64=0x8001}}) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000140)={0x2, {0x2, 0x5c3, 0x8, 0x8001}}) ptrace$cont(0x7, r2, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0xd0cfa9ca9d521115, 0x0) 00:36:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r2 = dup2(r0, r1) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000040)={0x16, @remote, 0x4e21, 0x4, 'nq\x00', 0x4, 0x7fffffff, 0x58}, 0x2c) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:23 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x4040042) msgget(0x0, 0x4) 00:36:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ustat(0x5, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) fadvise64(r1, 0x7, 0x80, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000240)={{{@in=@initdev, @in=@empty}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) 00:36:23 executing program 4: msgget(0x2, 0x49d) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe4}]}]}, 0x28}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x9a0000, 0x3, 0x2, r2, 0x0, &(0x7f0000000000)={0x9a091b, 0x7fffffff, [], @value64=0x4}}) write$P9_RREADLINK(r3, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 00:36:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x0, 0x0, &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) write(r2, &(0x7f00000000c0)="b29e769e63380eb050525b46e7c6c36d901cea035b2d8ddba737f6de427d29f3c470a12178c1c56e252eaaac3ed4144bf1dd8972ca0fd690ece27470e6f92daa5b8ae1ce247e8218147fe726fa06e0ba10fb5b4eee41b830c7a60ca029a52a3ca8d82e6bed870da18342dd54d103c6f5677702582735288251c69fbb6479a470c1af9c9387eb41d941f881e1d68f9186efd01bab618d7566cde2eb4e2314efb173f645603a7e9ca0a57b1f18523c76de29a544ec239ef6ea785f3f052587f0e99c258196498746a66e533148bfafdbd0814f26b839e0537e056f44ce5fd76a8d9bc81fcd68d78de89a7ed97e14f98aaa71d45709b404fa916c6dcd4857c2", 0xfe) 00:36:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:26 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)={0x1000, 0x0, 0x2, 0x0, 0x0, 0x10}) msgget(0x0, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000000)={0x9, 0x0, 0x8001}) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x7) 00:36:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3]) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5080}, 0x881) 00:36:26 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x2, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r6 = creat(&(0x7f0000000740)='.\x00', 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000600)={r7, @in={{0x2, 0x4e21, @multicast2}}, [0x7fffffff, 0x0, 0x6, 0x1f, 0xffffffffdd420ded, 0x3, 0x7, 0x6, 0xfffffffffffffff7, 0x13, 0x800, 0xc418b65, 0x3, 0x6, 0x8]}, &(0x7f0000000700)=0x100) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r10}) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f0000000380)="35cd53b194215c614edf359ba70d71d1d1704dad46bf95aa08582c3a12a485e821019ecaa48c9a8413ba82031d211f120ba36fec4251ea597b97b61d6b1744ce51b9ec2ebbb32386f5484fe277ca73c6bb5bc4b601cbae05c441812bdc0cdd4431742aecd8ea10979fdd", &(0x7f0000000400)=""/180, &(0x7f00000004c0)="37d8833e2f77eb44f7d577693dc247d52cf8db1c2e2592da910b711bdf456359ab927c14fb", &(0x7f0000000500)="9d772fcd054bb341973930f5289e706ac5d2d7205f0bd7487c64f060a1d63c13edbd4134e058bf8abd0ca62d97fb46e529c5d2576427d6e337dbaa4b2b05fb4fb11941ba55065328c41bb36f2086520b99a1a41fe823fae5c5926c85c4ae8c24019d570bc53d8bf1aaef367d3224044ce1c92bb369d7995b051d39a3cb57281135a72453c222e77f6a86a5d5d5ae2b7e550a1bb38242c96847a5ace4a1669173ea6e2c28c6a77fc4c008bab5891a47", 0x3, r12}, 0x38) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r14 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r14, 0xc01064c7, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r14, 0xc00464c9, &(0x7f0000000180)={r15}) pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r13, 0xc00464c9, &(0x7f00000002c0)={r15}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000880)='\xeaem1,[{}\x00', 0xffffffffffffffff}, 0x30) r16 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r17 = dup(r16) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) ioctl$TIOCGSID(r17, 0x5429, &(0x7f0000000780)=0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x80000001, 0x8}, 0x200, 0x0, 0xfffffffc, 0x4, 0x0, 0x7fffffff}, r18, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x9, 0x20, 0xfffffffe, 0x9, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000240)={r19}) r20 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r20, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), 0x0, 0x0, 0x0) 00:36:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x2b, 0x1, @thr={&(0x7f0000000080)="d9f623bab822d43d210a2819f08486b95433fd14d4d555b2baa16d9a84aaae5f59a450d064bad4325c689c71a7d9e3053f19a92710ca92462a49e6b8e2bcffdc05d11e0357d50c334619abe13614abb4988c9a5c87bd2cf357844dc14a22ab487d2c8b6890b15b3550ac343bb987b85076d202539b8993e85b7c16fa96693624d7d13d906fdc5ef3a0895a3933850edefd99a8e9ea05594a36b6286e00a96290e6c51a223daf4c7ce74540df786438cb8ac1a6185b78fb3e7f8cfd078812834d98a5d654b70fc19c79934f24a4feac7cdb506bdbe0a3087cbd12cecb060875867a713eb87167a61fbf083b4fb388ee", &(0x7f0000000180)="480121e16e23fbe075ec4b0b"}}, &(0x7f0000000200)) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r2, 0x0, 0x0) 00:36:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x101000, 0x0) accept$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) syz_mount_image$nfs4(&(0x7f0000000200)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0x7, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000280)="b53e11bd4f7438d4490aea3041997d2dc3162b72a74ea9dad2f1f022328b527ca918f651af9aeb989bc225e6e894a1b2f2c4096e7ac6ef7ed9158e51296e1e288fc8a8811de91c8a4171f7cc4c76cf65a3cc2657b41504ffbf5234df076c90dc7489d03c3d594dcac74dfdf88e64574b78ae47459baa69e9c548223f5d248e7de3bcd10cd9f3411841d6b6af37fd526305910be289332366f762858862bbe5cfd4bf67b4e5d492a0d4dc142d709a440e17aa29cd79ecd636b9225dda3f2af9913cd7a3c90b7757457a92b4af814c35981b31a36fad027fdb352470349e", 0xdd, 0x2e}, {&(0x7f0000000380)="c0bb992399d9caeb69969dab8ae90f5a93c0f23db9843e4b0069e99d1536e2486ac125c29087bd4c91a7087f4f0a8f6c0e75adf8c3575332ae666a8bc89d44886b3796a96ac9efca494bd4edb72855eb9d372423a21ebf444145aa79faf8d3f36aadc8c9", 0x64}, {&(0x7f0000000400)="cdf241a055e7201aff0692f9b52147bd9140b7464042be1d417c0d8153b9aabd8926f2a16ecf58c664ae762026cd402bcd14fd8c18a746835ab83610e2b680d5a46a8f47136702445d0f844ca359d1712241d386bcdd9318aa8888c8753715c45ae5f2be47aa4a73f0d8780f0c50052f06026a37881000ccf2cc40b4032bc4304e8fda8862201153099f1b47431559b8f39a7e8da4be144b616fc74ecb6ce9630dbbe5b84689e5f234f7d63ed22a40a794afb4c71cb92a02c073201db1", 0xbd, 0x80000000000000}, {&(0x7f00000004c0)="174d50e9a185794f0effce8f3a74e0d1da8521a26e2f02da9c0b9a259f5a555825fcb3b4871244f14e56c8e8171f6042499ea6affc3d8a713e62620628c107fcaa81ed5e8e3164405ee30d422b15ea60d1505c9983c0bdcc4cb964dfea92193233e050cccf8a2a6cb0fb6d24128b3d30f53faff9502812ead6afa594047b662e3697acc8d6", 0x85, 0x1}, {&(0x7f0000000580)="871988855fcf90d4dfe9ef6f8028263745d2460f1172201718643dff085201b333bd8595a743015530c488ba974bcbb06b53fdd1324029165abe97bffcd00a41d0f3ca39d7c08b07f27f4dd5203c4127bde58506439cad1d5597238ad49d49e14d858d229d1363ce3ce5557c530d208185ea803e160442ea6db25a88a5b2a2ccdefc539839c7ce9c1f3aa0abf2", 0x8d, 0x4c4d}, {&(0x7f0000000640)="391dd588730a4dffe55af378f1fec79e1d1dafef7c3865227cd7129efbceddf1b0662728867445ab71eae6ca8d323e3aef3639e39068727a50a1c3e22329a48e47ea2b4894eafeed4a21", 0x4a, 0x8}], 0x910000, &(0x7f0000000780)='/dev/dlm_plock\x00') ptrace$setopts(0x4206, r0, 0x0, 0x100044) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000140)={0x0, @bt={0xb, 0x7, 0x1, 0x3, 0x0, 0xd5e, 0xf41d, 0x7fffffff, 0x8, 0x100, 0xffffffff, 0x80, 0x8, 0x4, 0xa, 0xc, {0x4, 0x3}, 0x1f}}) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000007c0)={0x0, 0x0}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000800)="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") r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="1300000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e37b4599c9b7cbbeeea8be34a"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x23, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r8, @ANYBLOB="e5ffffff0000000008001c00ef000000"], 0x28}}, 0x0) r9 = syz_open_dev$vcsn(&(0x7f0000000a40)='/dev/vcs#\x00', 0x0, 0x101000) vmsplice(r9, &(0x7f0000001f00)=[{&(0x7f0000000a80)="f2", 0x1}, {&(0x7f0000000ac0)="4f2c68dae8d29dbffdda58faf419cbce5cc92d7efd58", 0x16}, {&(0x7f0000000b00)="dd85e8cfd89e9cb0e12ec9fb10fb663fbef69ef009c10a635626c8a29896c3f7398c5c56a5693821374866a740851ea9f815343b8ccf3080b8d03b084929403d3e7496b1518bf394299bbe89dc62e884231a12da8ba875ea94c65cf80dc5bb3e8e65dd10ca48a056765d44862ff377a2b51d559ad794907e14115e7a167e64c31f21bebbe6c8fd62561a719420cb187269f3acf5d185dc0afc4a8d58b52da1198d", 0xa1}, {&(0x7f0000000bc0)="3ceabcf34b508eade10982e5c31a746b4d19b7e7a9a0e601fb9c99934a56b0bb566b8ad22157dd4ec087f77b707d549a00f8c2ce5481a8d1a790d8d3b9a55735510464355b24d5838324fadc4af7ef8731ae7dff40f747ba25383cfbe42eaad4dd885c22f9c9032efaea92089ab4691dbf815a0090b4101ed983bb559ec442dd66ec292574380197fce2fcc8bc42561cb42b4834852a5a1889ad5961113a39ac5dfe20a85dcdfa4d2ef4bf045029be5fa89294495a6e901d17a10bd31c2ca335fae5706ddcaeeec473c175517093578b2f31cd65f0d2ad87fa8a64aae5dd402d4b6fc4116f", 0xe5}, {&(0x7f0000000cc0)="21bf7f1f0c4ccbb91edc3ffe193b8a080506b1afd4910cb04c354de453652f922375ab967b1c43d0c735db3e32e32e64dd643312121ca30c442438844b906b2a5d7172e988ad712f56791d2f4a1353fe988e8107ab7e67fa4405bc87cb6f8140c474d6224a06f9432bd30c7eb71adb8b0d2472c98ebdacb70cb7dc24e24a05629a4e59edc6e94dadd24122b97da7a858e00e573ca42eafc2e1ca59a6ca1cbeb3bbf1f87da88ab5daadffbe9f47ef75a2862075c001be3432d2ca7b749c60122cb549aa33b90c", 0xc6}, {&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000001dc0)="ff0719b361769b580a3010dbb8de7322e2199e599c775865da5227d00ece6fbf0888eb0474a9b468dcf0654eb1f50fdf67965c1881147f24db3c", 0x3a}, {&(0x7f0000001e00)="e06566b30710dab4355c0f4771c09d140593ab4d80bf07b562c1b2ad0f7a01b7aea83e065c17c652e07226f821bb93288d9b3a1d6a05b0f539a29475e0cc06a78a57840259b016975774321a865b7be465a031e67b060c12a7dc9242901d29c756669d0e7fb027ceb884a722ae2d0cdefb46238d6dba66990bf5a562b9f27e1ad4939bec38645dfad7186f0c7e5cdc488452c84203e844d035a5c3ed7a96dba08ac968d363e5d0d57468eb5b9290551a0bd07c1050003c8083b6b37169d4e455482d37520a166980a2954cd3c74b9f2a5d253576ba692b49ee77757daed7b1d10fe4e25970df338778862538c7308e772abfe8", 0xf3}], 0x8, 0x6) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000001f80)='/dev/full\x00', 0x483, 0x0) mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x50, r10, 0xf0000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r4, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x2100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x24840, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x28000800) 00:36:26 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0x4, 0x70, 0x6, 0x0, 0x0, 0xff, 0x0, 0xfffffffffffffffc, 0x80, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xfffffffffffffffa}, 0x13020, 0x80, 0x9, 0x2, 0xfffffffffffffff9, 0x0, 0x8}) [ 1393.685568] ptrace attach of "/root/syz-executor.0"[25944] was attempted by "/root/syz-executor.0"[25945] 00:36:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000040)) 00:36:26 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:26 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x202, 0x0) 00:36:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1393.905761] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 00:36:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1393.959937] audit: type=1400 audit(1583454986.747:272): avc: denied { map } for pid=25955 comm="syz-executor.0" path="/dev/full" dev="devtmpfs" ino=1054 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 [ 1393.975748] IPv6: ADDRCONF(NETDEV_UP): veth35: link is not ready 00:36:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), 0x0, 0x0, 0x0) 00:36:27 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000207010300000000000000000000000014000780080001400000000008000240000000006b0c205504035babfd06323254ac07c9c71eebb9c8caafef7e3f92b04409c7e7751edc00de61b75c3c299bb926ccf815787415e13c782767b3dbc5a6af1f22be3c9d1bad172c45a1cbc7fb5649bcd952c0c8ee3c20f456c495637cf1b6bef61847decccfa5bf8818"], 0x28}}, 0x0) pread64(r2, &(0x7f0000000040)=""/81, 0x51, 0x3) 00:36:27 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400800, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x11821bf559e90d6e}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f8, 0x1, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x10) msgget(0x0, 0x24c) 00:36:29 executing program 5: socket(0x10, 0x803, 0x20) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x9, 0x212800) dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat(r2, &(0x7f0000000600)='./file0\x00', 0x400, 0x46) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000020701030000000000000000000000001400078008000140000000000800054000000000"], 0x28}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) dup(r7) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r11 = dup(r10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r11}) ioctl$VIDIOC_DQBUF(r12, 0xc0585611, &(0x7f0000000640)={0x3, 0xb, 0x4, 0x20202000, 0x6, {0x0, 0x7530}, {0x3, 0x2, 0x7, 0xff, 0xff, 0x7f, "d330cec7"}, 0x5, 0x4, @fd, 0x7ff, 0x0, r8}) setsockopt$inet_tcp_TLS_RX(r13, 0x6, 0x2, &(0x7f00000006c0)=@gcm_128={{0x303}, "39c164e766db72d5", "d87475044d6bcce596854c12f7dd8cba", "19618e26", "1fa0dd3e093d4735"}, 0x28) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r15 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x280002, 0x0) r16 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r17 = dup(r16) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_CALL(r15, 0x4008af21, &(0x7f00000005c0)={0x2, r17}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000002070103000000000000000000000000140007800800024000000101080002400000000030c3cbcbbb6bb1b766b79cc3679f1ee497fb32b6bc31db77bb72bf901eb01bbf914a954a"], 0x28}}, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000380)="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") r18 = dup(r14) syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x482) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r18, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in6=@empty}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f00000007c0)=0xe8) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000500)) r19 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r20 = dup(r19) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) connect$unix(r20, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r21 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r21, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:29 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfdf}) msgget(0x0, 0x4) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) sync() capset(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000100)={0xffffffc1, 0x3, 0x9, 0x4, 0x7fffffff, 0xc524}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r2, 0x40044104, &(0x7f0000000000)=0x9) 00:36:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4a340, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000080)={0x8, 0x622600, 0x8, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), 0x0, 0x0, 0x0) 00:36:29 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") capget(&(0x7f0000000380)={0x19980330, r0}, &(0x7f00000003c0)={0xffffff80, 0x3, 0x80000000, 0xffffffff, 0x91a, 0xffffffff}) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9, 0x800) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x4, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x44040) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="35f245cd692b117a14460332fb91ff15942db9dc9d9aa38a4e09a4ebe0f2043d2efb08eb1152b05b9265236791abe9dddaad5ba5336546e11bd894f4168cdbd1d7443f675e4a20e476e5ad69c2920a9a973cc5a2b7891281ea32a838ac86b8f94e0fe77c8eea2a813a59e7d05c4a64d9e1293af07450cfdf7d8f5deae565812b46e2a1430ccc861a4c656cac9fb5b42482157d8e68421022ecbdfd1babbaa5effca7b0555dc1e12d3cb25ec3c78fc1d20df2b22a983d28844a415db535c76bd8f437485dd38238401bd2cfee0e3374", 0xcf, 0x0) r3 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0xfffff, r3) request_key(0x0, 0x0, &(0x7f0000000480)='\xf3F|$\x00\xac\xfaC\xe8{\x89\x80F\xc7G\xb7\xc0#z\xa1{\x91[\xd48+_\x1b\xb9\xd3t\x18\xd0\xe6\xfc\xb1+\r\x95\xd3HyV\b\xf5\xa2\xaa\xf2\xefz\x98\xff\xbb2\x1e\x81\x8c\xd3\xab*^\x93\xba\xe8\xe3[W\x82W', r3) keyctl$read(0xb, r3, &(0x7f0000000100)=""/50, 0x32) keyctl$reject(0x13, r2, 0xffff, 0x401, r3) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 00:36:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:29 executing program 4: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x9, 0x7, 0x4, 0x2000000, 0x0, {0x0, 0x2710}, {0x5, 0x0, 0x1, 0x3, 0x6, 0x5, "103efd89"}, 0x9, 0x1, @offset=0xff, 0x9, 0x0, 0xffffffffffffffff}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000240)={0x6, 0xd000}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f0000000280)=""/131, 0x83) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) msgget(0x2, 0x44) 00:36:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0x2, 0xfffffffffffffffe}, 0xf) r2 = getpid() sched_rr_get_interval(r2, &(0x7f0000000040)) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x6, 0x0, 0x9}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc001}, 0x20048800) 00:36:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:29 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:29 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/4\x00') sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x100, 0x70bd28, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000010}, 0xc800) 00:36:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(0xffffffffffffffff, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100), 0x0, 0x0) 00:36:32 executing program 0: ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xfffffff, 0x0, 0x4, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9a0902, 0x9, [], @p_u8=&(0x7f0000000080)=0x1}}) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = getpgid(r1) ptrace$setopts(0x4200, r2, 0x7568000000000000, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r1, 0x0, 0x0) 00:36:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(0xffffffffffffffff, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) rt_tgsigqueueinfo(r3, 0x0, 0x32, &(0x7f0000000300)={0x38, 0x7, 0xfffff194}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvfrom$unix(r2, &(0x7f0000000040)=""/43, 0x2b, 0x43, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) fdatasync(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, &(0x7f0000000100)=""/249, &(0x7f0000000240)=0xf9) 00:36:32 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) 00:36:32 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/uts\x00') ioctl$FIBMAP(r7, 0x1, &(0x7f0000000240)=0x81) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) r8 = dup3(r6, 0xffffffffffffffff, 0x80000) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000040)={r10}, &(0x7f0000000140)=0x8) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000000040)={r12}, &(0x7f0000000140)=0x8) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r15, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r15, 0x84, 0x66, &(0x7f0000000040)={r16}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r14, 0x84, 0xf, &(0x7f00000005c0)={r16, @in6={{0xa, 0x4e21, 0x8, @empty, 0x8}}, 0x5, 0x4, 0xdc2, 0xffffffff, 0x1f}, &(0x7f0000000680)=0x98) r18 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r18, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r18, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r18, 0x84, 0x66, &(0x7f0000000040)={r19}, &(0x7f0000000140)=0x8) r20 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r20, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x4e24, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r20, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r20, 0x84, 0x66, &(0x7f0000000040)={r21}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000002540)={r21, 0xf52}, &(0x7f0000002580)=0x8) r23 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r23, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r23, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r23, 0x84, 0x66, &(0x7f0000000040)={r24}, &(0x7f0000000140)=0x8) r25 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r25, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r25, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r25, 0x84, 0x66, &(0x7f0000000040)={r26}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r18, 0x84, 0x7c, &(0x7f00000002c0)={r26, 0x5, 0x8000}, &(0x7f0000000300)=0x8) sendmmsg$inet_sctp(r8, &(0x7f0000002340)=[{&(0x7f0000000280)=@in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0xfe, 0x0}, 0x9}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000380)="cf1a0f63149051c01e16ecdd61be437d5554672123a2aa5097546b9ec47ce2789764be0012b204e574d5eddc249a3db47e9f9419249e0f3a64dcf0f3f7a081f35863a140e7783a467e3be4d78c762794fc36331a440d361aef68666e48d5c9522528b6683112cc84e9af11be06c426cdb4f05e893c53564f4c1a6af12a331978c0cf7324d31b7a4ba7bb55639cb54c9b3cb76a1697bb009948a168a37013ab9c44ec79f546c8b3c751a490964e42f843a3a9be2e68", 0xb5}, {&(0x7f0000000440)="748a89e50d8a15c70bd5e547013b38e38123235e119b57ba", 0x18}, {&(0x7f0000000480)="b3abf33e73fb4a98ca9f710efd19a660bbae5bc32cc1b20d02c1f8706879bb6856e98f662f789cb9cfe282d336b2a38171a2c7659878a763bcfe61ba0ef71a50d58c4991173ac8ec4df7dc66443cf250d0c7e74dbd8786165c2c4aec03f705c52bb2aa0758b2cb5a6bb7b4b4cd654fb0ca65dda99c3d182b3d7a704b907da770c565cb9bb5d674e81a10fb6a56ac6a072b14736574a8abbbdd9db4a0515077ea16d5c29b70c8619b93e89197b06129e96b55617878a09ad83cfa3739c4b0fdaac64866ae44e14be2d9ddc24961088bcc599f7231bfbed8cada6676bed073d73d492f94accc5fb9bc78a43602603bd01036b7fef35590", 0xf6}], 0x3, &(0x7f00000006c0)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0x8, 0x201, 0x10000, 0xa, 0x0, 0xffffff0e, 0x7f, r10}}, @authinfo={0x18, 0x84, 0x6, {0xf5}}, @sndrcv={0x30, 0x84, 0x1, {0x8001, 0x0, 0x8209, 0x1c00, 0x70, 0x80, 0x7fff, 0x1, r12}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x0, 0x7, 0x7, r27}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x3561, 0xc, 0x7, 0x8, 0x0, 0x80, 0x36d, r17}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x13}}, @init={0x18, 0x84, 0x0, {0xff, 0x8, 0x6, 0xf800}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7ff}}], 0x110, 0x20008004}, {&(0x7f0000000800)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000840)="c2405c33d9af74f7352b1b650ab1303460580e33fe61c7d02f31384f336a640456986f4380dfebeebdd6c724e3fa612df3cf25f4f1c6774aa575f195f4ed4f3ce532255f27e3e692d6e849e305f6913b6b3b1aeaaf3761034e5a4b9a9409c9f33feb989956c4d052e7fbadbf905ed764df128340104a53a037c11c000a42ad8ddeb8380ed6810f496d2dc8ab9c7b4909c315e370b881ff5865510b80218867b4b9e37ff2531510ceda959bb0f56b59555a4b1f0f6db97200c21975b4fae9eae1eb80929e7365", 0xc6}, {&(0x7f0000000940)="f7fe696bb4ea8c173695754774e11d51edafdffba073bf89b92dcc37238e717a613fcbb0c53124a36054e4fcdb0815b330d68b77c25a563ba790f7dcb44643db48e5422aa1bcf23f10c47ad3ab0f1ef233f3a8e809bae8871708d473ff6d9810cfbe7876aa5c2b52e4b13e6cb25987fd31da22114c7bfedb3eb224a1501529cf903406dda6921d1779b30d5be1de9de1deea9079881f2c6ac157322373c4883b6140a05f168e854244202ea8dd94604f04bb066905168c6b036bbd86b0d9400c4366c6098e3e019180720f11ec1076486969035d33b6578daf3709595a8aa900d0c3fce5c8ad40a286dfa4d8", 0xec}], 0x2, &(0x7f0000000a80)=[@dstaddrv6={0x20, 0x84, 0x8, @local}], 0x20, 0x2400c040}, {&(0x7f0000000ac0)=@in={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000b00)="a468644614e230665bc37ad21d2facdf72894948f5c7275718bca18d9a94f73696529b1e9f680c3d8d2e54e05c768a33af3a7c04b251b89450d201294db2161506945a1ae31d7db205393a2ccfd17d3cb46c0bc1c720910608a6f62a188a7a30b556384ed0f263c65aacccae49b851ba515870bafdc16d48e5bcca4df66d555e73ad8cbdd0d814c9fd43f542aabc808578f45693ea44f4ba74b0730bc41ae51db187a10e94cc523716", 0xa9}, {&(0x7f0000000bc0)="ca", 0x1}, {&(0x7f0000000c00)="91f85d84fdfb7eb6fdd95bb359cb2434b7e09af2f87ee75e914d6efaee6e2292a899e641bb5dd8044b6b5705aebbec2b3b1f3568a9535fa364b9ea65df8338dd5827188c7a6079b7c462c3dda73ff1abad467074abb3db1b60fa72f4", 0x5c}, {&(0x7f0000000c80)="dd8c1421e5456d478171dbe4033ad1e98f5e65dc5e58c4a2bdf2c9b10de6f0ef4355a6bf55909f2a26b342283dca3e620ac64dade237ec3eb093b93db514d9ca4dab7bdccffc016e6b62e435daa08f5b366a81a42f50389bf345d356bc5b3d2dda849a531356e5a5949ce6238f089ff4f84a49352500409cb62e27e76b09e9ad6523ee8038ccefcb47bda52cfefc9244978d4d6856008355c378ed261d68ef6dc9cfeff4", 0xa4}, {&(0x7f0000002440)="c98311393aeb7cc80f480fb599ad9a27cb0fea04b6014676e39ee7c553cdf389517cd5baa1866b47566095daa848a29c20903f26cf053a9c3e9d56f6717d6570332b8c8ed2332ede1f44f4086719e30d34cc1155cff25ea1c40e75308fa67b90b3b66e2001126e793b39c6a60a53681e4d5279f0858159ae3852aea60f7bbf6aa099bb0964c13e4bc65af892180b2a7fd5c4b93e0b00911877f7b8cb318a9e2553248f9973bc4781edf6893a221189772ce9e28b3a2c6ed996e2ed1729d187434a3cf7a7ff667958cf03668c67d3cc91389045f8abba432e63e43dfca24943b98e", 0xe1}, {&(0x7f0000000d80)="965fc54922c7f6191bd9e3eadabd590544993a44eccb6d9434fe314c69c813fd0aa2635e6a23f07c6bef3b4916aec865bb6dbd1d8a6c511ca8d1721ebc585c8421fb45846357a5aa83325315966e7b70ef6d18446dc0adb07a746f6e033dded6007b9c17f9d1d166b1c4d64b97cd7f9785468cdf4e3bdb50bdb39aa4b9e9185025848c850c9dd997dc836eb60fc2f1b12c68c92eddb6520a4c6fcec0b3ca99f77890b4afe760f1505273c42c20b8f27b632332c2f1c6800692d3a333c74de776b9d5ed882f51341e20ffb3fa7e0964554a", 0xd1}], 0x6, &(0x7f00000025c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @sndinfo={0x20, 0x84, 0x2, {0xe86d, 0x0, 0x5, 0x8, r22}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @sndinfo={0x20, 0x84, 0x2, {0x101, 0x200, 0x1, 0x7, r16}}], 0x70, 0x24004044}, {&(0x7f0000000f80)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000021c0)=[{&(0x7f0000000fc0)="3cd6e8cafc78c0bef818ff801c87d931ce50c00e70510c38e4a10b55be96aa6e9f36a956207561efbbe00db349256365ed86937caa1bdfcdd13f8120f96eb58cf104a624639d429205c9746aee8701335a971e57445c210c5dfba0edbc7b34cf5517a3c726bcd2a768a3577b20c7a09187c0581d34d26053e2a6f76be5260e312eebfd90fef25909b3365122ae5d879e377e86682ba17f8cff8cd069ef39fb57f9dc2537b34e48b272c6d1b7ac0cbd23abf0", 0xb2}, {&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000002080)="576d3e1102f1d4925e7b41c266bd729ee1e747f44b349839d53809f00f6e3dfb35d1a1578869794c5955d77de2df932cd4e9895fb8a0ec40f57850963474b20e7babf7e9f53130e8d76b176039e9c34f09bd2163bd42f1481aadd1bb0a77e93184a6fcb9fd2b6697b3910f94c12305f8cc5fe1fbd1590bc9c195e469d601b643b6c0cf9905640b715aa836dbe9a02d172ac35e5a1d488dbc114f2ee93c9c082440e8", 0xa2}, {&(0x7f0000002780)="46e2cd5d7b8bf3f4b83e7cb24b3013115e8ac6d8d60f3c9514ba03535088", 0x1e}, {&(0x7f0000002180)="dd1ae154b42e6932915a6bcde108c0644b1a4bf1bcc7f3fee6eaf30c96329fec3645d848cf90bfb75c2a625273", 0x2d}], 0x5, &(0x7f0000002240)=[@init={0x18, 0x84, 0x0, {0x2, 0x400, 0x100, 0x2}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x1b}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x672d, 0x8, 0x8, 0xb54, 0x1, 0x9, 0x8, r24}}, @sndrcv={0x30, 0x84, 0x1, {0xa46, 0x1000, 0x8, 0xb9, 0x183, 0xfff, 0x2, 0x7}}, @init={0x18, 0x84, 0x0, {0x8000, 0x7, 0x0, 0x7}}], 0xf8, 0x20000011}], 0x4, 0x20024800) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100), 0x0, 0x0) 00:36:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(0xffffffffffffffff, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r1 = dup2(0xffffffffffffffff, r0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xe}, 0x3}, 0x1c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) tkill(r3, 0x203c) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x9, 0x30902) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r2, 0x0, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x7) 00:36:32 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 00:36:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, 0xffffffffffffffff) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400201) setsockopt$inet_buf(r2, 0x0, 0x2b, &(0x7f0000000080)="20d023f663ac006fe9f0571de03913d77584ae0d43e49a285e6038b879ffb4b8747c671a0688d9773e038563465514769f8234dd9bf7b0ea1e9396db63e81d1c0795fb786a5e1400a03cf5da50f5275e8b308a690add2811d31f0ef8326501b071ac4fac75b179e21d65b37651b6", 0x6e) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:32 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x5, 0x400200) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x864}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x48001}, 0x854) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x800, 0x800000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0xff}, 0x2) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0xfffffffffffffffd, 0x4, 0x80, &(0x7f0000000000/0x4000)=nil, 0x9}) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000080)={0x28, 0x4, 0xa, 0xb, 0x81}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, 0xffffffffffffffff) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x30000, 0x32) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x1, [0x9]}, 0x6) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:33 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x10000, 0x0, &(0x7f0000003000/0x4000)=nil}) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000300)=""/160) r5 = memfd_create(&(0x7f00000002c0)='systemem0md5sum$\x00', 0x0) r6 = memfd_create(0x0, 0x0) write$binfmt_elf64(r6, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r5, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000100)=0x7) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_targets\x00') ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:33 executing program 5: r0 = socket(0x8, 0x4, 0x20) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400ff7f", @ANYRES16=r7, @ANYBLOB="00082bbd7000ffdbdf2504000000050035000500000005002a000100000005002e000000000005002a000000000005002a000100000005002d0001000000"], 0x44}}, 0x2000e014) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x20, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) 00:36:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100), 0x0, 0x0) 00:36:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, 0xffffffffffffffff) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x80200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000100)) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x9, @mcast1, 0x9}}, 0x4, 0x3}, 0x90) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x105080, 0x0) 00:36:33 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x8, 0x6, 0x4, 0x10, 0x6, {0x77359400}, {0x1, 0x0, 0x4, 0x7d, 0xe1, 0x20, "a3202a92"}, 0x8000, 0x2, @fd, 0x1ff, 0x0, 0xffffffffffffffff}) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000180)={r2}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000000)=[0x5, 0xfffffffc, 0xfff], 0x3, 0x80800, r2, r3}) msgget(0x0, 0x4) 00:36:33 executing program 5: r0 = socket(0x10, 0x803, 0x20) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) open_by_handle_at(r2, &(0x7f0000000240)={0xcc, 0x0, "8045d92bfc4c326f530baefe7466279fc7914a799216fb2cf4257584371607a5c92446070431e839546401cdafc6af75874cead587e8e5f08b169a50f08f321fb4f787afc653ec53d2935a5a4195b759955cccc6511fd43a1995c1f800cd7c17006f500fc3041f14053901d8c8010cc0c086e151309efeb3e473c5a230a32225e71cf9e95263e5bced76ebf61ff93f2f0cdac491bf93d57df981d4c42a5a34bc2efa95324c31f64e9de3a37527e0affde7c82ed620874969ddea3cddaa46f157813c2606"}, 0x220480) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r7}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r11, 0x84, 0x21, &(0x7f0000000380)=0x9, 0x4) ioctl$NBD_SET_SOCK(r1, 0xab00, r10) 00:36:33 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="faffffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000001c0)={r6, 0xb4da, 0x80, 0xb00, 0x81, 0x46b8, 0x4, 0x492, {0x0, @in={{0x2, 0x4e23, @local}}, 0xfffffadb, 0x7ff, 0x81, 0x6, 0x7}}, &(0x7f0000000280)=0xb0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000002c0)={r7, 0x24cf, 0x9, 0xc1d, 0x9}, 0x14) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r2}, 0x10) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x711001, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f0000000140)={0x3, 0x20, 0x0, 0x0, 0x6}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x0, 0x0, &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) fchmod(r1, 0x8) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000040)={0x0, 0x80000}) 00:36:33 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r3) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x100, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:33 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:33 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) syz_open_procfs(r2, &(0x7f0000000040)='net/ipx\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) fcntl$dupfd(r3, 0x406, r4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) r7 = semget(0x3, 0x3, 0x7c) semctl$IPC_RMID(r7, 0x0, 0x0) statx(r6, &(0x7f0000000100)='./file0\x00', 0x400, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f0000000340), 0x41395527) r11 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x20500, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x4000, 0xfff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r10, &(0x7f0000000640)='./file0\x00', 0x0, 0x800, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r11, &(0x7f00000006c0)=ANY=[@ANYBLOB="8d00000008010000006e000400008000000102000000b1ae77fb00a0b8beed003000050000000000000000030073797a20005e6d643573756d766d6e657431252773656c696e75785e76626f786e6574312f0a012f6465762f7a65726f000e006e65742f6d6366696c74657236000a006e49742f726f75746500575ac0c8cdc2c032f812c3513b42963ce6671839d5c0a1000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32], 0x8d) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r15, 0x407, 0x0) write(r15, &(0x7f0000000340), 0x41395527) r16 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x20500, 0x0) statx(r9, &(0x7f0000000440)='./file0\x00', 0x4000, 0xfff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r15, &(0x7f0000000640)='./file0\x00', 0x0, 0x800, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r16, &(0x7f00000006c0)=ANY=[@ANYBLOB="8d00000008010000006e000400008000000102000000b1ae77fb00a0b8beed003000050000000000000000030073797a20005e6d643573756d766d6e657431252773656c696e75785e76626f786e6574312f0a012f6465762f7a65726f000e006e65742f6d6366696c74657236000a006e49742f726f75746500575ac0c8cdc2c032f812c3513b42963ce6671839d5c0a1000000", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32], 0x8d) semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f0000000240)={{0x1, r8, r13, r14, r18, 0x2a}, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 00:36:33 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:34 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000680)={&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/96, 0x60}, {&(0x7f0000000440)=""/234, 0xea}], 0x2, &(0x7f0000000580)=""/223, 0xdf}, 0x10102) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000240)={0x0, 0x6}, &(0x7f0000000280)=0x8) fcntl$notify(0xffffffffffffffff, 0x402, 0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f00000006c0)={r8, 0x1d, "527af643b73be6dbebd2ff9ccef2a7564e8d0d7655c3a6dcf9dd05df99"}, &(0x7f0000000300)=0x25) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd}, &(0x7f0000000100)={0x1ff, 0x10000}, 0x0, 0x0) 00:36:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0xfffff, r1) request_key(0x0, 0x0, &(0x7f0000000480)='\xf3F|$\x00\xac\xfaC\xe8{\x89\x80F\xc7G\xb7\xc0#z\xa1{\x91[\xd48+_\x1b\xb9\xd3t\x18\xd0\xe6\xfc\xb1+\r\x95\xd3HyV\b\xf5\xa2\xaa\xf2\xefz\x98\xff\xbb2\x1e\x81\x8c\xd3\xab*^\x93\xba\xe8\xe3[W\x82W', r1) keyctl$read(0xb, r1, &(0x7f0000000100)=""/50, 0x32) add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="fb7c402ff11a510f847a8372a69c019c6407dda3fcefce2afe1a0887f4536fd2e688ad6a53466f59ef06c08ee449c91d2b9cc1c58975aba72f27798f995f7162f56e5031d9306e8dc1e2341af4610211a4ce60af8cc197e4f8206130adb6e93b0e999f0441f5f327a9a215546b49d65f84536a85583a216bc2f7ca6c553ff1ba5438d78e8be86f5dbe477f0b184fd1d68c9e535abb695f63b71c8f00892b5f1c6353da0486e1ac69500d8e", 0xab, r1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:34 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={r3, 0x14, "e2c762d3904f1ea037ea4c33bab3aaa2736f250e"}, &(0x7f00000000c0)=0x1c) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000100)={r4, 0x2, 0x1, 0x1000, 0x7f, 0x5, 0xbf, 0x20, {r6, @in6={{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7fffffff}}, 0x1, 0x9, 0x1, 0xe0000000, 0x2}}, &(0x7f00000001c0)=0xb0) 00:36:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x0, 0x0, &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:34 executing program 1: r0 = socket(0x8, 0x4, 0x20) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400ff7f", @ANYRES16=r7, @ANYBLOB="00082bbd7000ffdbdf2504000000050035000500000005002a000100000005002e000000000005002a000000000005002a000100000005002d0001000000"], 0x44}}, 0x2000e014) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x20, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) 00:36:36 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:36 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x28}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r7}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x0, 0x0, &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:36 executing program 4: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) 00:36:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:36 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x2}) msgget(0x0, 0x4) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) 00:36:36 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) r6 = perf_event_open$cgroup(&(0x7f0000000340)={0x5, 0x70, 0x1, 0x80, 0x4, 0xff, 0x0, 0x1, 0x2200c, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x0, 0x2, 0x1, 0x6, 0x8, 0x5, 0xc7}, r3, 0x4, r0, 0x8) fsetxattr$trusted_overlay_upper(r6, &(0x7f00000003c0)='trusted.overlay.upper\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="00fb90040879c772df6b257295de4e5fc58262d09fc90db1f4fdcaab00d713361c79202343d60432911d7c66e74afaf6ae32379970bec8887442bdbf9a466f3f09e1c20e378d543b16ce73f86d5385f9d4d05a323e50c258f56632513302e2e133cd0ef5068254fa40dea87c4aa340fb7c618af1acdab111dcd4339b7a88a12de1d41636c17d72000000000000000000"], 0x90, 0x3) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200001, 0x0) ioctl$TCGETA(r7, 0x5405, &(0x7f0000000540)) r8 = socket$kcm(0xa, 0x2, 0x73) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) recvfrom$rose(r10, &(0x7f0000000240)=""/184, 0xb8, 0x42, 0x0, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0)=0xf789, 0x4) bind$nfc_llcp(r10, &(0x7f00000004c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xdc, "f8e2479c8a0dff53ef84ce65f17e4de09492e6d620fc4818e989b0f04f2f855a33b24fcbdc1d2b4e6ab86c13131eefe1643789d948de1ad9b0564ca28fd2ff", 0x3f}, 0x60) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:36 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r4, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:36 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x28}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r7}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x430080, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000100)=""/217) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="003c412229b2618109628745d9b333e776ae532bdd3e909ab4e4da5250aed36b46641991109c43b11aed7bf0a5f3c061b482a7aec10626b8275f779462ee2f8914cab97d4e67f1b5576d52405f63a215245889f25b4c3a81"], &(0x7f000095dffc)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x48, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x1, @local, 0x88}, @in6={0xa, 0x4e23, 0x6, @mcast2, 0x87}]}, &(0x7f0000000340)=0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x4) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_FORWARD(r9, 0x40084149, &(0x7f0000000400)=0x8) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000240)=0x15, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:36 executing program 4: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x7ff}) msgget(0x0, 0x4) socketpair(0x18, 0xa, 0x20, &(0x7f0000000040)) 00:36:36 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x2, 0xad, 0xf79, 0x7a5}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x810) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000380)={0x0, 'veth1_vlan\x00', {0x2}, 0x2}) 00:36:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), 0x0, 0x0, 0x0) 00:36:37 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x41c1, 0x9008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext={0x1, 0x10000}}, 0x0, 0x0, r4, 0x8) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = shmget(0x3, 0x4000, 0x8, &(0x7f0000007000/0x4000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000040)=""/50) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x202002) keyctl$chown(0x4, r4, r3, 0x0) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f00000000c0)) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xf, r6, 0x0, 0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x3, r1, 0x0, r3, 0x0, 0x0, 0x7ff}, 0x776a6f04, 0x200, 0x8, 0x6, r5, r6, 0x3}) shmctl$IPC_RMID(r0, 0x0) r7 = gettid() r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_GET_IRQCHIP(r9, 0xc208ae62, &(0x7f0000000080)) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x3c) ptrace$cont(0x18, r7, 0x0, 0x0) ptrace$setregs(0xf, r7, 0x0, &(0x7f00000002c0)="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") r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r11 = fcntl$dupfd(r10, 0x406, 0xffffffffffffffff) ioctl$FBIOGET_VSCREENINFO(r11, 0x4600, &(0x7f0000000400)) ptrace$cont(0x7, r7, 0x0, 0x0) 00:36:37 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="24000000190007041dfffd946f61050002f80200fe0200000001080008000f000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000240)=""/68) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000000100)=0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) getsockname(r8, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r9, 0x8}, &(0x7f0000000140)=0x8) getrusage(0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r9, 0xda}, &(0x7f00000000c0)=0x8) socket$netlink(0x10, 0x3, 0x4) 00:36:37 executing program 1: socket(0x10, 0x803, 0x20) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:37 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0) 00:36:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x33) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) rt_sigreturn() ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x20001, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:37 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0xfffffffffffffffa) r5 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r5, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) 00:36:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000100)={0x0, 0x400}) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r1, 0x8247d3b1d964b454, &(0x7f0000000180)={{r2, r3+30000000}, {0x77359400}}, &(0x7f00000001c0)) ptrace$cont(0x7, r0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) 00:36:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x430080, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000100)=""/217) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="003c412229b2618109628745d9b333e776ae532bdd3e909ab4e4da5250aed36b46641991109c43b11aed7bf0a5f3c061b482a7aec10626b8275f779462ee2f8914cab97d4e67f1b5576d52405f63a215245889f25b4c3a81"], &(0x7f000095dffc)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x48, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x1, @local, 0x88}, @in6={0xa, 0x4e23, 0x6, @mcast2, 0x87}]}, &(0x7f0000000340)=0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x4) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_FORWARD(r9, 0x40084149, &(0x7f0000000400)=0x8) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000240)=0x15, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), 0x0, 0x0, 0x0) 00:36:38 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x9, 0x1, "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", 0x80, 0x2, 0x81, 0x85, 0x3, 0x6, 0x18, 0x1}}}, 0x120) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x4, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$RNDZAPENTCNT(r10, 0x5204, &(0x7f00000001c0)=0xfff) 00:36:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) r1 = shmget(0x3, 0x4000, 0x8, &(0x7f0000007000/0x4000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/50) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x202002) keyctl$chown(0x4, r5, r4, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xf, r7, 0x0, 0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000280)={{0x3, r2, 0x0, r4, 0x0, 0x0, 0x7ff}, 0x776a6f04, 0x200, 0x8, 0x6, r6, r7, 0x3}) shmctl$IPC_RMID(r1, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r9, &(0x7f0000000040)="2dfea925b527ab571099d75c65184031e0f6da5923882f75700428cb", &(0x7f0000000080)=""/229, 0x4}, 0x20) [ 1405.352995] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:36:38 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)) msgget(0x0, 0x4) 00:36:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:38 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x5}) msgget(0x0, 0x4) 00:36:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x12) dup2(r1, r2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:38 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000001280)={0x2fb, 0x71737d3b, 0x3ff, 0xfffffffa, 0x2, @discrete={0xc, 0x9}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) syz_read_part_table(0x1, 0x3, &(0x7f0000001200)=[{&(0x7f0000000080)="dfdc600da1a54a151e94d12e1048df2d1c6a2bb25b63077e157932da779bc2b06232f59d8beb5f6f4818742f29a68f25f110d70ab103e9025f62a1491716139fa56653fdc29e29a6c373c75381002c1bfb2de58153cb0b1fcd39e5b8a5e819f491868043aed4fc1509e5c63b298abe343c22f34b4d367e108325efc78c84e0fc2fefcb5559366ea9f885e923a13d7eed0ae1f093056e61b4c1694125684828018c078b2c2bd211d3d506bacdb44d4167e67ceb5cb2c4047ad669e2af63910a7d7f73a54430b876cc1a3ef7c670874089372af1edcb1e97878890df2a70064eba24189ef7d9845174d2206b", 0xeb, 0x7}, {&(0x7f0000000180)="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", 0x1000, 0x1}, {&(0x7f0000001180)="6b063b144bc99a6767378de105afe76f177a16538f9ff1046211b08e897b979eb43fd0f66af91813597650fffa701f2eea0f18036b9e117c8cc0ce1e5d18b4dd846207", 0x43, 0x7}]) msgget(0x0, 0x4) 00:36:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1405.761857] Dev loop4: unable to read RDB block 8 [ 1405.768504] loop4: unable to read partition table [ 1405.800844] loop4: partition table beyond EOD, truncated [ 1405.815381] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 00:36:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1406.241218] Dev loop4: unable to read RDB block 8 [ 1406.246125] loop4: unable to read partition table [ 1406.270342] loop4: partition table beyond EOD, truncated [ 1406.280622] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 00:36:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, 0xffffffffffffffff, 0x0, &(0x7f0000000080)="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") ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:40 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), 0x0, 0x0, 0x0) 00:36:40 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xa) close(r2) socket(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@dev, @in6=@mcast1}, {@in6=@ipv4={[0xfffffff0], [], @loopback}, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) fcntl$setstatus(r4, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x7ffff}}, 0x10, &(0x7f0000000100), 0x60, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80389}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9}}], 0x48}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000640)={@x25={0x9, @remote={[], 0x3}}, {&(0x7f0000000100)=""/4, 0x4}, &(0x7f00000002c0), 0x8}, 0xa0) msgget(0x0, 0x4) 00:36:40 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(r10, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r8, 0x40086424, &(0x7f0000000180)={r11, 0x2}) ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f00000001c0)={r11}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r12, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) waitid(0x2, r1, &(0x7f0000000080), 0x4, &(0x7f0000000100)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1407.981627] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=26384 comm=syz-executor.4 00:36:40 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r7, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1408.025330] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=26384 comm=syz-executor.4 00:36:40 executing program 5: dup(0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r5, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x8, 0x12) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$getenv(0x4201, r4, 0xfffffffffffffff8, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1408.090014] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=26384 comm=syz-executor.4 00:36:40 executing program 1: socket(0x10, 0x803, 0x20) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0xfff, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) r1 = getpgid(r0) waitid(0x0, r1, &(0x7f0000000080), 0x4, &(0x7f0000000100)) [ 1408.158396] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=26384 comm=syz-executor.4 [ 1408.244027] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=26384 comm=syz-executor.4 [ 1408.278862] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=26384 comm=syz-executor.4 00:36:41 executing program 1: socket(0x10, 0x803, 0x20) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:41 executing program 5: r0 = socket(0x10, 0x803, 0x20) r1 = dup(r0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000480)=ANY=[@ANYBLOB="06000000ff0700006b000000000000008000000000000000000000000000000005000000000000000500000000000000ffffffff0000000077000000000000004c0000000000000005000000000000000100008420ee13a38597cbe2b1c9acd90000000000080000"]) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100000000010000, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1ff, 0x400000) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r7 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$update(0x2, r7, &(0x7f0000000380)="ea6c5ffa93f8a440f3266536bd2424bc80273ba1a2a7c74fcfbbeb1d9080a6e2d0a558aa3edb8042e5b872e4cbf347cf9b93225849d85bb4e43eca27f70ef54cc64a6aa70d9dc3de0a2794a2821b200df6299da4d6874792c2bc5c538b079e572df4519896ac5f3af6a8a09f51197f7e03f1e6571625ce5bd1b1326168274767ee50da9f9c47b0ddde7d35604ef99e01ba8937df11d96fdef8c3dac109726e501118c828ef954d3b09bbde290ddde87be437d563c14b8166bfb7ce5cb35198ccc54e7bb2b1a612ebeac83bb0c4f8698a9b1db8cead4f9f19ea210eed7dc8be2ff3617fb101733129e33df1a51d5343a085c09d5029863a8601", 0xf9) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) munlockall() perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f00000002c0)) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TIOCSIG(r9, 0x40045436, 0x13) r10 = socket$kcm(0xa, 0x2, 0x73) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) bind$l2tp(r12, &(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x10) sendmmsg$inet_sctp(r10, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BASE(r14, 0x4008af12, &(0x7f0000000240)={0x3, 0x3}) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1408.297536] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=26384 comm=syz-executor.4 [ 1408.379811] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=26384 comm=syz-executor.4 [ 1408.407591] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=26384 comm=syz-executor.4 [ 1408.436667] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=26384 comm=syz-executor.4 00:36:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100), 0x0, 0x0) 00:36:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000080)={0x7, 0x7a, {r3}, {0xffffffffffffffff}, 0x3, 0x80}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x6, 0x26f, {0x0}, {0xee00}, 0x20}) tkill(r4, 0xd) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:41 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r4, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x0, 0x1ff, 0x8, 0x7}, @ipx={0xffff, 0x3b, 0xf7, 0x0, {@current, @random="3a3dd73f4906", 0x5}, {@current, @broadcast}, "4ac7d001c691a9c8f917582d8f0afc31e71e2d1e3d5b496eeca8a695a8"}}, 0x45) dup2(r7, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:41 executing program 5: r0 = socket(0x3, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:41 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0xfffffffffffffff9, 0x40000) 00:36:41 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r4, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x0, 0x1ff, 0x8, 0x7}, @ipx={0xffff, 0x3b, 0xf7, 0x0, {@current, @random="3a3dd73f4906", 0x5}, {@current, @broadcast}, "4ac7d001c691a9c8f917582d8f0afc31e71e2d1e3d5b496eeca8a695a8"}}, 0x45) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:41 executing program 4: gettid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) r3 = getpgid(0xffffffffffffffff) capset(&(0x7f0000000040)={0x20080522, r3}, &(0x7f0000000080)={0x3, 0x4, 0x0, 0x2000000, 0x0, 0xfffffffe}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0xc2681, 0x0) msgget(0x0, 0x4) 00:36:41 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="74000000000119050000000000000000000000002400010014000100080000000c00020005000100000000002400e4ff0b00020005000100000000001400010008f70000000000000800020000000000080007000000000010000500"/103], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) r6 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f00000000c0)={0x9, {{0x2, 0x4e24, @empty}}, 0x1, 0x6, [{{0x2, 0x4e21, @rand_addr=0x6}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e23, @rand_addr=0x6}}]}, 0x390) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VFIO_CHECK_EXTENSION(r8, 0x3b65, 0x5) ptrace$setopts(0x4206, r6, 0x0, 0x50) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r6, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={&(0x7f0000000540)="ea33dbfc317fc68845cd78019810428ec3eaf284cd94f16f73543c846f8b7db7d420f56205be509b1fb9ffb6c071a009bc014b71523e58ea43c839730054efe7224d0096fd608209c28c6fddd7a7c3d4cf4b5499bfd45b5efa7eb1bfc7bf2d36131086cd758171199710116a448b8aa92628387a8c0a7a3c736c2fa4cc54b20b30114dcd9f73797042535a5585d96284805b485716b884cddd255de509bb98cddf819c0fdc4da539cc0578dbf32f1297670b39864925", &(0x7f0000000600)=""/191, &(0x7f00000006c0)="8ada5cf7515ac0dc3d98af0031713c3f9db2f62a43099bc5c07ccf529a97", &(0x7f0000000700)="1cd217b30ed41111f831a9cd4fc2c42f9935e980a4d7f1a7d2af2273150a245ed0f4dfc66bdd1d0db339c51aa28453734332138e76e9750a909140a8430ac1932665cdd0d25ab854142077", 0x96f7, r12, 0x4}, 0x38) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f00000004c0), &(0x7f0000000500)=0x4) 00:36:41 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xd07}, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f00000001c0)) 00:36:41 executing program 1: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r4, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x0, 0x1ff, 0x8, 0x7}, @ipx={0xffff, 0x3b, 0xf7, 0x0, {@current, @random="3a3dd73f4906", 0x5}, {@current, @broadcast}, "4ac7d001c691a9c8f917582d8f0afc31e71e2d1e3d5b496eeca8a695a8"}}, 0x45) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) dup2(r7, r1) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1409.016481] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1409.038364] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:36:41 executing program 4: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc48e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b0753a188748c569f435fb3bae96efb74b50ed93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274dc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r0, r1}, &(0x7f0000000440)=""/257, 0x101, &(0x7f0000000180)={&(0x7f0000000240)={'crc32c-intel\x00'}}) keyctl$chown(0x4, r2, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) 00:36:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef064488cac3ffee2ca00f164b4cc112d6a7c8f08b80760b8e5b4b88eb663ba058ee3dc39beb6248ea5a9a7cef1c31afc36738228d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417e2f5d0f161ece4") ptrace$setopts(0x4206, r0, 0x3ff, 0xa) ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100), 0x0, 0x0) 00:36:42 executing program 4: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x400000, 0x3}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000000)=0x5) msgget(0x0, 0x4) 00:36:42 executing program 1 (fault-call:9 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0xfffff, r1) request_key(0x0, 0x0, &(0x7f0000000480)='\xf3F|$\x00\xac\xfaC\xe8{\x89\x80F\xc7G\xb7\xc0#z\xa1{\x91[\xd48+_\x1b\xb9\xd3t\x18\xd0\xe6\xfc\xb1+\r\x95\xd3HyV\b\xf5\xa2\xaa\xf2\xefz\x98\xff\xbb2\x1e\x81\x8c\xd3\xab*^\x93\xba\xe8\xe3[W\x82W', r1) keyctl$read(0xb, r1, &(0x7f0000000100)=""/50, 0x32) r2 = request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='$trusted]systemppp1eth1]bdev:)wlan1\x00', r1) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc48e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b0753a188748c569f435fb3bae96efb74b50ed93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274dc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r3, r4}, &(0x7f0000000440)=""/257, 0x101, &(0x7f0000000180)={&(0x7f0000000240)={'crc32c-intel\x00'}}) keyctl$instantiate_iov(0x14, r2, &(0x7f0000000200)=[{&(0x7f0000000140)="8f2d3ae767aeba564733439e3d54ba0a2d9c6666f71ee5a0a6fdc30769281f5b7cdd2a30722d96937f00f285bff3cb9c4cacfa141e42350dfb4dd2fa1e61600fd874105b2099c9c1de2e585439b383f0932125", 0x53}, {&(0x7f00000001c0)="95f7653306fc55e8430903c4ba02f1ee332ceb3869378fc42a45d14ba194c8", 0x1f}], 0x2, r3) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/checkreqprot\x00', 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x0, 0x1d, 0x0, "b50d72aa651ae3b412e76825e9563d6289443d93e59169d1beff31d243344d1bb40a862d2bafe2702abcb81c47e505d81f6127ab2fdb6730862f6e137c41263ed1bf2d1f40cc138d700d2859e57d25e1"}, 0xd8) tkill(r6, 0x3c) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4, 0x1, 0x14, 0x18, "dcb43b3737bf2c410d11b55c4d6a666294cf3fc95c20a1c31c968f329f0c9efb0244a28ba168fa790da1753c08cfcc67738ee444b1f04b6a6ad10f02f893ff69", "147070b4fe95d68c8d4f73ed9bc09451800f6240c433971fcc901b3c393340de", [0xd1, 0x1]}) ptrace$cont(0x1f, r6, 0xc, 0x9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="b70200000000000000000d000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000426bd7000fddbdf25060000000800060002000000080005003f000000080004003f0000000800ea000300000004000280080005000008000021455824403e6eaf1e88b47b7a601eb64351c6aecd59c47d6d340b65461d2d18cf202c2520f0e2d81324c1cfe3e836786f9a04df7df5ca7a74be4653836828a19c78920f255228ea90cccd13"], 0x40}, 0x1, 0x0, 0x0, 0x40440d4}, 0x800) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800e2b8dc7f2cafd5a8000000000000000000001400078008000140000000000800024000000000"], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f00000001c0)={0x1ff}, 0x0, 0x0) 00:36:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, &(0x7f0000000240)) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:42 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget(0x0, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = geteuid() statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x400, 0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) r9 = getegid() pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f0000000340), 0x41395527) r11 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x20500, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x4000, 0xfff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r10, &(0x7f0000000640)='./file0\x00', 0x0, 0x800, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r11, &(0x7f00000006c0)=ANY=[@ANYBLOB="8d00000008010000006e000400008000000102000000b1ae77fb00a0b8beed003000050000000000000000030073797a20005e6d643573756d766d6e657431252773656c696e75785e76626f786e6574312f0a012f6465762f7a65726f000e006e65742f6d6366696c74657236000a006e49742f726f75746500575ac0c8cdc2c032f812c3513b42963ce6671839d5c0a1000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32], 0x8d) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r14, 0x407, 0x0) write(r14, &(0x7f0000000340), 0x41395527) r15 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x20500, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x4000, 0xfff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r14, &(0x7f0000000640)='./file0\x00', 0x0, 0x800, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r15, &(0x7f00000006c0)=ANY=[@ANYBLOB="8d00000008010000006e000400008000000102000000b1ae77fb00a0b8beed003000050000000000000000030073797a20005e6d643573756d766d6e657431252773656c696e75785e76626f786e6574312f0a012f6465762f7a65726f000e006e65742f6d6366696c74657236000a006e49742f726f75746500575ac0c8cdc2c032f812c3513b42963ce6671839d5c0a1000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32], 0x8d) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r18, 0x407, 0x0) write(r18, &(0x7f0000000340), 0x41395527) r19 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x20500, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x4000, 0xfff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r18, &(0x7f0000000640)='./file0\x00', 0x0, 0x800, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r19, &(0x7f00000006c0)=ANY=[@ANYBLOB="8d00000008010000006e000400008000000102000000b1ae77fb00a0b8beed003000050000000000000000030073797a20005e6d643573756d766d6e657431252773656c696e75785e76626f786e6574312f0a012f6465762f7a65726f000e006e65742f6d6366696c74657236000a006e49742f726f75746500575ac0c8cdc2c032f812c3513b42963ce6671839d5c0a1000000", @ANYRES32=r20, @ANYRES32=r21, @ANYRES32], 0x8d) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x4}, [{0x2, 0x4, r2}, {0x2, 0x2, r3}, {0x2, 0x6, r4}], {0x4, 0x2}, [{0x8, 0x2, r5}, {0x8, 0x5, r6}, {0x8, 0x1, r7}, {0x8, 0x6, r8}, {0x8, 0x0, 0xee01}, {0x8, 0x2, r9}, {0x8, 0x5, r13}, {0x8, 0x1, r17}, {0x8, 0x7, r21}], {0x10, 0x5}, {0x20, 0x1}}, 0x84, 0x1) 00:36:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x800080) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, 0x1403, 0x4, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x24) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0), 0x111, 0x2}}, 0x20) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r5}) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) getpgid(r6) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r7, r0) r8 = accept4(r7, &(0x7f0000000240)=@ipx, &(0x7f00000001c0)=0x80, 0x1000) ioctl$sock_netdev_private(r8, 0x89fb, &(0x7f00000002c0)="637a0a6ddf9d138916ac0b7d2e8bf3e3977147fd7a72ef45508c579b4b6df591de321feec179a38f4766f220df3672462a6ef4f81de3436fca92368a7ae91ad7d72f6a6e30cb9c382d68ded2fa0ac282ef39cea20a2a8e617788e2c4930c69e44354f062cd458897cdf0f3c2edf70198b3421b2997169b18daff4c58989f8e61b041a52ca83f149a78e4e0c8b03e0e7b0f194849278fcb89193251fb99f3203a81281fd87b3e519c5555822bced193b5708890a84c560fd01febcaf4970ad6e26be8b3569a6941282ae15514d54c6f129efb06f5183fdf") select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) 00:36:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RMKNOD(r6, &(0x7f00000001c0)={0x14, 0x13, 0x2, {0x4, 0x3, 0x8}}, 0x14) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r7, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x452000) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0) 00:36:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4, 0x0, r6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000280)={0x2, 'bond0\x00', {0x701}, 0xf657}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0xe1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x40, 0x0) setsockopt$IP_VS_SO_SET_DEL(r8, 0x0, 0x484, &(0x7f0000000240)={0x2e, @local, 0x4e24, 0x2, 'sed\x00', 0x2, 0x6, 0x61}, 0x2c) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r10, 0x80044dfe, &(0x7f0000000380)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) ioctl$FITRIM(r12, 0xc0185879, &(0x7f00000003c0)={0x5, 0x8, 0x100000001}) dup2(r11, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100), 0x0, 0x0) 00:36:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x408140) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getpeername$inet(r7, &(0x7f0000000280)={0x2, 0x0, @dev}, &(0x7f00000002c0)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={r8, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r9}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r10, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:43 executing program 5: r0 = socket(0x10, 0x803, 0x20) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x69}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40286608, &(0x7f0000000380)={0x2, 0x0, 0x5, 0x2, 0x67ef9ec7, 0x3d8}) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$sock_void(r7, 0x1, 0x29, 0x0, 0x0) r11 = dup(0xffffffffffffffff) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(r11, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r12, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0x16, 0x1, './cgroup.cpu/syz1\x00'}, @NLBL_MGMT_A_DOMAIN={0x16, 0x1, './cgroup.cpu/syz1\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @remote}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x40001) sendmsg$NLBL_MGMT_C_REMOVE(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r12, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/ion\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x3) 00:36:43 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x700003a, 0x0}}], 0x400000000000085, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000400)={0x6, 0xa, 0x4, 0x10, 0x1, {r3, r4/1000+10000}, {0x3, 0x0, 0x6, 0x4, 0x1, 0x4, "b714b06b"}, 0x6, 0x4, @userptr=0x1, 0x4, 0x0, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000480)=0x3, 0x4) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r8 = dup(r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r9}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = dup2(r10, r2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r11, 0x110, 0x4, &(0x7f00000001c0)=0x2, 0x4) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r13, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r14, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x62f}]}, 0x24}, 0x1, 0x0, 0x0, 0x28000}, 0x40) 00:36:43 executing program 5: r0 = socket(0x10, 0x803, 0x20) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) write$P9_RREAD(r1, &(0x7f0000000240)={0xe6, 0x75, 0x1, {0xdb, "fa780a3f6890e2b6d1e3d6acd3cd877f6a1fe49c2696b405d3a599102fae9d11cc8852120dbc04c4107f10ae34dce8f51097b45a2c0a2dc3910f725ac7f7a971cebc854d4037aa986cde66a49d920e499c71de235ec95a3b21db510a5deb004ed5d3c5acc9fe820a95b37223c32182121366c6eca6156228d082cc62fdbcde63784c1b2e492f973ea10e39127fea07c42818a95e7cf0ed95bdcf0d7ab64e3456a77bbe85535e3c8e5c30875b06ac2221361470997e4ce198db30f1533ffeba44ba502d8e6ce19e95efc6640ef82eb2c10d662cb441896cd067481f"}}, 0xe6) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 00:36:45 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000000240)={0x2, "e19bf470f177d78c7add4c86040034f7f438fafe1be222630ea6220a4eb5f8c7", 0x1, 0x1ff, 0x0, 0x4, 0x1}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:45 executing program 4: r0 = socket(0x10, 0x803, 0x20) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) write$P9_RREAD(r1, &(0x7f0000000240)={0xe6, 0x75, 0x1, {0xdb, "fa780a3f6890e2b6d1e3d6acd3cd877f6a1fe49c2696b405d3a599102fae9d11cc8852120dbc04c4107f10ae34dce8f51097b45a2c0a2dc3910f725ac7f7a971cebc854d4037aa986cde66a49d920e499c71de235ec95a3b21db510a5deb004ed5d3c5acc9fe820a95b37223c32182121366c6eca6156228d082cc62fdbcde63784c1b2e492f973ea10e39127fea07c42818a95e7cf0ed95bdcf0d7ab64e3456a77bbe85535e3c8e5c30875b06ac2221361470997e4ce198db30f1533ffeba44ba502d8e6ce19e95efc6640ef82eb2c10d662cb441896cd067481f"}}, 0xe6) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$AUDIT_TTY_GET(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f8, 0x4, 0x70bd2d, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4081}, 0x40004) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r7, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:45 executing program 2 (fault-call:9 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:45 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, r4}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r12, 0x2405, r2) r13 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, r13}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f00000000c0)={r5, 0x0, r14}) 00:36:45 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) getsockopt$packet_int(r4, 0x107, 0x7, &(0x7f00000001c0), &(0x7f0000000240)=0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:45 executing program 4: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f0000000240)={0x2, "e19bf470f177d78c7add4c86040034f7f438fafe1be222630ea6220a4eb5f8c7", 0x1, 0x1ff, 0x0, 0x4, 0x1}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:45 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r6 = dup3(r5, r2, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000001c0), 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r7}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000240)={[0x3, 0x7fffffff, 0x72e, 0x7, 0x2, 0x0, 0x8000, 0xfffffd2a, 0x2, 0x8, 0x5f, 0x39c17d24, 0x1800, 0x1000, 0x9, 0xfffffffe, 0x6, 0x0, 0x3, 0x80000000, 0x4, 0x7f, 0x153, 0x5, 0x7, 0x6, 0x3, 0xffff, 0x8, 0x9, 0xfffffffd, 0xfffffe01, 0xe7a, 0x4, 0x7fff, 0x713, 0x100, 0x1, 0x1000, 0x6, 0x0, 0x5, 0xf8, 0x5, 0x0, 0xfce5, 0x1, 0x9, 0xb5, 0x5, 0x81, 0x4, 0x7fffffff, 0x8ffc, 0x5, 0x5, 0x33c, 0x5, 0x8000, 0x7ff, 0x8, 0xfffffffa, 0x3, 0x9, 0x100, 0x771, 0x5aa2, 0x1, 0x8001, 0x2106, 0x1f, 0x8, 0x200, 0x80000000, 0x1, 0x1, 0x4, 0x0, 0x1, 0xe2, 0x0, 0x8, 0x7, 0x62f, 0x0, 0x6, 0x5, 0x4e4, 0x2, 0x9, 0x5, 0x7, 0x0, 0xffffffff, 0xfc6, 0x2, 0x798, 0x2aac, 0x400, 0x1, 0x3, 0x7f, 0x5, 0x5, 0x6e75, 0xfff, 0xf03, 0x101, 0x10001, 0x7fffffff, 0x6, 0x0, 0x548c, 0xe4f, 0x2, 0x4, 0xa64, 0xd9, 0x8a9, 0x1f, 0x2f, 0x0, 0x0, 0x92, 0xb7f, 0x101, 0x8001, 0x3, 0x2, 0xfffffbff, 0x8000, 0x795, 0x4d0, 0x7, 0x0, 0x10000, 0x8, 0x3ff, 0xfff, 0x10001, 0x1, 0x13a9b2c0, 0x1, 0x2, 0x6f8, 0x2, 0x8, 0x9, 0x100, 0x8, 0x44, 0x5, 0x1f, 0xc75, 0x1, 0x0, 0x5, 0x7, 0x5, 0x157e, 0x0, 0x80, 0x9, 0x7843, 0x7, 0x2, 0x0, 0xc0, 0x1, 0x8, 0x9, 0x4, 0xa1d1, 0x0, 0x80000001, 0x81, 0xd9, 0x7, 0x6, 0x7, 0x4, 0x9, 0x6, 0x9, 0x400, 0x400, 0xffff, 0x800, 0xffffff86, 0xfffffff7, 0x0, 0x3, 0x7, 0x8, 0xc3, 0x7, 0x1, 0x101, 0xf631342, 0x390000, 0x10000, 0x6, 0x8, 0x80, 0xfffffff8, 0x3ff, 0x3, 0x8, 0xffffffff, 0xffffffff, 0x80000001, 0x7, 0x9, 0x24, 0x6, 0x2, 0x5, 0x2, 0xffffffff, 0x8, 0x3, 0xcae, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x3, 0x6, 0xffffff01, 0x7fff, 0x8, 0x9df, 0x0, 0x9358, 0x2, 0x8000, 0x7482, 0x1, 0x6, 0x9, 0x0, 0x3255, 0x1, 0x1, 0x8, 0x9, 0x5, 0x4, 0x4, 0x8, 0x8, 0x7, 0x7f, 0x10000, 0x2, 0x8, 0xfffffff9, 0x7fff, 0x7, 0x4, 0x7, 0x41, 0x3f, 0x10000, 0x3, 0x200, 0xfffff383, 0x6, 0x8000, 0x561, 0x2, 0x1000, 0x2, 0x3ff, 0x8, 0x2df86bdc, 0xa247, 0x0, 0xfffffffb, 0x7, 0x3, 0x2, 0xffffffff, 0x7, 0x51, 0xffff, 0x101, 0x4, 0x3, 0x9, 0x4, 0x5, 0xad16, 0x3, 0x1, 0x800, 0xbc9, 0x8, 0x0, 0x0, 0x37, 0x7ff, 0x2, 0x2, 0x1f, 0x4, 0x517a, 0xcaa4, 0x8, 0x4, 0x0, 0xfff, 0x7fffffff, 0x10001, 0x1, 0x0, 0x6, 0x3, 0x1, 0x1, 0x5, 0xfffffce5, 0x0, 0x4, 0x200, 0x1, 0x1ff, 0x7fffffff, 0x80, 0x9, 0xa541, 0x4, 0x20, 0x1, 0x8, 0x90c, 0x7fffffff, 0xfffffffe, 0x0, 0x8, 0x9, 0x8, 0xa5e2, 0x101, 0x1000, 0x1, 0x6, 0x7fff, 0x3, 0x5, 0x5, 0x4, 0x2, 0x1, 0x9, 0x10001, 0x10001, 0x3, 0x4, 0x100, 0xe70c, 0x1, 0xfffff800, 0x7fff, 0x1ff, 0x8000, 0x0, 0x3f, 0x8de4, 0x6, 0x100, 0xae, 0xf494, 0x3f, 0x7, 0x8, 0x8, 0x7, 0xf18, 0xcdea, 0x7, 0x3, 0x2, 0x3, 0x6, 0x7fffffff, 0x6, 0x7, 0x7fff, 0x8001, 0x4, 0x6, 0x3, 0xc34, 0xffffff01, 0x5, 0xa993, 0x7, 0x7, 0xc997, 0x3, 0x6, 0x2, 0x0, 0x5, 0x7515, 0xd2cb, 0xffffffff, 0x0, 0x401, 0x3, 0x6, 0x5a, 0x2, 0x4, 0x5, 0x1, 0x9, 0x1000, 0xffff, 0xaf8, 0x0, 0x7cdc3e99, 0x75, 0xe20e, 0x80000000, 0x0, 0x100, 0x81, 0x7, 0x9, 0x5f, 0x401, 0x800, 0x4, 0x8c, 0x400, 0x3d1, 0x831, 0x0, 0x0, 0x7, 0x2142, 0x80000000, 0xfffffffe, 0x6, 0x0, 0xf23, 0x5, 0x2, 0x4, 0xfffffffc, 0x1, 0x400, 0x3ff, 0xc1, 0x3, 0x2, 0x0, 0xffffffff, 0x3, 0xb749, 0x29, 0x5, 0x9e, 0x1f, 0x3ff, 0x81, 0xafdc, 0x2, 0x7, 0x0, 0x1, 0x2a, 0x0, 0x3, 0xfffffff9, 0x101, 0x10001, 0x40, 0x6, 0x2, 0x86d, 0xffffaa3d, 0x1000, 0x5, 0x6, 0x80000001, 0xfff, 0x4112, 0x1ff, 0xf77b, 0x4, 0x81, 0x2, 0x7, 0x4, 0x9, 0x2, 0x1, 0x5, 0x4, 0x6, 0x76, 0xc1c1, 0x0, 0x6, 0x7f, 0x4, 0x7, 0x80, 0x8, 0x8, 0xffffffff, 0x1, 0xffff, 0xfffffffb, 0x37dd33fe, 0x7, 0x0, 0x0, 0x40, 0x3, 0x0, 0x8, 0x8, 0xfffffff7, 0x3f, 0x80000000, 0x7, 0x1ff, 0x1, 0xe03, 0x2, 0x800, 0x7, 0x2, 0x5, 0x6, 0x7, 0x2, 0xf7, 0x101, 0x9, 0x3f, 0x6, 0x0, 0x3, 0x3f, 0x20, 0x63c, 0x8, 0x6, 0x7fffffff, 0x5, 0x3, 0x7f, 0x9, 0xfff, 0x1, 0x80000001, 0xffffffff, 0x0, 0x8, 0x40f3, 0x4, 0x48f3, 0x1, 0x10001, 0x0, 0x4, 0x0, 0x6, 0x3, 0x7fffffff, 0x0, 0x10000, 0x7ff, 0x9, 0x4, 0x9, 0xdebe, 0x9, 0x1, 0xebb, 0x629, 0x2, 0x82, 0xffff, 0xd75, 0x6, 0xffff, 0x7, 0x5, 0x7d, 0x40, 0x80, 0x20, 0x8, 0x3, 0x3, 0xff, 0x7, 0x3, 0xffffffff, 0x7f, 0x8000, 0x9, 0x3, 0xb4a8, 0x6, 0xffffffff, 0x1, 0x10000000, 0x6, 0x8, 0x100, 0x9, 0x9, 0x6, 0x6, 0x1, 0x5, 0x7, 0x8, 0x7, 0x8, 0x9, 0x2, 0x7, 0x100, 0x5, 0x2, 0x9, 0x1, 0x1, 0x400, 0x8, 0x2, 0x8, 0x322b, 0x6, 0x4, 0x6, 0x5, 0x8000, 0x8000, 0x8, 0x1, 0x5867, 0x1, 0x64f, 0xa533, 0x7, 0x0, 0x8, 0x7, 0x7, 0x4, 0x7, 0x4, 0x101, 0x5, 0x1, 0xfffffffc, 0x1f, 0x26a, 0x5, 0xd3fe, 0x2, 0x7fff, 0x0, 0x3, 0x40, 0x0, 0x6, 0xff, 0x8, 0x2, 0x2e0c, 0x7ff, 0x5, 0x0, 0xc1, 0xd8, 0x8, 0xffffffff, 0x4c, 0x3, 0x7f, 0x1f, 0xebee, 0x5, 0xffffffc1, 0x6, 0x4, 0x6, 0x3f, 0x3, 0x0, 0x1, 0xdd1, 0x101, 0x20, 0x7, 0x4, 0x8b07, 0x1000, 0x4, 0x53dc, 0x800, 0xd17, 0xffff, 0x6, 0x7fffffff, 0xc74a, 0x0, 0x7fffffff, 0x9, 0x0, 0x1ff, 0x8, 0x8, 0x4, 0xe3ee, 0x6, 0x2, 0x2, 0x3, 0x80000001, 0x6ae, 0x7, 0xed, 0x2, 0x81, 0xfffffff8, 0x0, 0x4, 0x2, 0x26cb325f, 0x5, 0x0, 0x2, 0x2, 0x2, 0x7fffffff, 0x8fc7, 0x0, 0x3, 0x7, 0x7, 0x2, 0xff, 0x5, 0x3, 0x1f, 0x8, 0x18, 0x5, 0x5, 0x10001, 0x3, 0x40, 0x8, 0xfff, 0x0, 0xffffff81, 0x9910, 0x6b5, 0x200, 0xeb4d, 0x401, 0x9, 0x8, 0x10000, 0x8, 0x3, 0x4, 0xfffffffd, 0x20, 0xfff, 0x2, 0x10000, 0xa02, 0x2, 0x9, 0x3, 0x4, 0xffffffff, 0x2000, 0x6, 0x1, 0x3, 0x9, 0xffffffff, 0x3, 0x2, 0x4, 0x10000, 0x8, 0x6, 0x54790000, 0x8, 0x10000, 0x6, 0x844, 0xe01, 0x10001, 0x80, 0x0, 0x10000, 0x5, 0x6, 0x80000001, 0x6, 0x0, 0x6, 0x5, 0x4, 0x1, 0x3f, 0x341, 0x3, 0x2, 0x7, 0xfffffff8, 0x6, 0xffffffff, 0x934, 0x1f, 0xd491, 0x5, 0xc64, 0x0, 0x879, 0x0, 0x7fffffff, 0x200, 0x7, 0x8, 0x8, 0x3ff, 0x7fffffff, 0x400, 0x2, 0x2, 0x1f, 0xfff, 0x4, 0x9, 0xff4, 0x8, 0x9, 0xffffffa8, 0xfffffffb, 0x10000, 0x80000000, 0x9, 0x3, 0x2, 0x734, 0x3f, 0xfbf, 0x40, 0xb, 0x8000000, 0x8001, 0x1, 0x9, 0x3, 0x1, 0x1000, 0x6ab6, 0x4, 0x20, 0x7, 0xad73, 0x4, 0x9, 0x6, 0x3d94, 0xfffffa45, 0x6, 0xfffffff7, 0x2, 0xad, 0x6, 0x101, 0x7fff, 0x4, 0x1, 0x1, 0xcb, 0x100, 0x4, 0x7, 0x100, 0x1, 0x16578479, 0x4, 0x7, 0x1f, 0xf1, 0x6, 0x4000, 0x40, 0x5, 0x2, 0x7, 0x468, 0x8, 0x1000, 0x8, 0x7, 0x0, 0x1, 0x9, 0x3, 0x6, 0xffff, 0x1, 0x9, 0x8, 0x2, 0x6, 0x6, 0x5f, 0xfffffffc, 0x1000, 0xe68f, 0x7, 0x1, 0x8, 0x8000, 0x9, 0x96000000, 0x20000, 0x0, 0x9, 0x800, 0x9, 0x2, 0x9, 0x7f, 0x1148, 0x10001, 0x8000, 0x1ff, 0x0, 0x4c, 0xfffffffa, 0x10001, 0x2, 0x2, 0x5, 0x2, 0x4, 0x2, 0x83, 0x6, 0x3ff, 0xfc000000, 0x0, 0x101, 0x8000, 0x3ff, 0x3, 0x200, 0x7d, 0x1ff, 0x6, 0x4, 0x5e0, 0x3448, 0x80000001, 0xd1, 0x7fffffff, 0x8001, 0x1, 0x0, 0x5, 0x8, 0x9bf, 0x3, 0x80000001, 0x6a31e170, 0x9, 0xfffffffd, 0x4, 0xfffffff7, 0xfffffffa, 0x3, 0x8, 0x1, 0xa2, 0x40, 0xffffffff, 0x401, 0x8, 0x1ff, 0x7, 0x5, 0x200, 0x3f, 0x400, 0x4, 0x3f, 0x40, 0x9, 0x7, 0x81b, 0xb10, 0x2, 0x80000001, 0x4, 0x0, 0x8001, 0xfffffff7, 0xb78, 0x3, 0x9, 0xffffffff, 0x80]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) 00:36:45 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:36:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x34, r9, 0x1, 0x0, 0x0, {{}, {}, {0x12, 0x17, {0x0, 0x0, @udp='udp:syz0\x00'}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r9, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1ee0}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000) [ 1413.120960] FAULT_INJECTION: forcing a failure. [ 1413.120960] name failslab, interval 1, probability 0, space 0, times 0 [ 1413.150536] CPU: 0 PID: 26589 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1413.158543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1413.167940] Call Trace: [ 1413.170553] dump_stack+0x13e/0x194 [ 1413.174211] should_fail.cold+0x10a/0x14b [ 1413.178388] should_failslab+0xd6/0x130 [ 1413.182413] kmem_cache_alloc_trace+0x2db/0x7b0 [ 1413.187107] kvm_dev_ioctl+0x15b/0x1480 [ 1413.191080] ? kvm_put_kvm+0xa90/0xa90 [ 1413.194958] ? kvm_put_kvm+0xa90/0xa90 [ 1413.198835] do_vfs_ioctl+0x75a/0xfe0 [ 1413.202621] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1413.207361] ? ioctl_preallocate+0x1a0/0x1a0 [ 1413.211761] ? security_file_ioctl+0x76/0xb0 [ 1413.216153] ? security_file_ioctl+0x83/0xb0 [ 1413.220546] SyS_ioctl+0x7f/0xb0 [ 1413.223896] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1413.227857] do_syscall_64+0x1d5/0x640 [ 1413.231826] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1413.236999] RIP: 0033:0x45c479 [ 1413.240172] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1413.247864] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1413.255122] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1413.262445] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1413.269714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1413.276985] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000000 00:36:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x1f, r0, 0x0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000020701030000000000000000000000001400078008000140000000000800024000000000745ade6b416f551a7a637866de1ad9b68a2f7423b5878d80def68b2844c40c99e2cea4f3bb2685513c71fa7cfdc1d0e39252b7a0a81b8cb6c8295b57c2d94ebd3027542b0927fb6ec14786957e68bad800f972528f7ef50178c736b8dfc38e17"], 0x28}}, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000080)={0xcb64, 0xa, 0x4, 0x400, 0x3, {0x77359400}, {0x4, 0x8, 0x4, 0x7, 0x9, 0x9, "abb77305"}, 0x1, 0x1, @fd, 0x6, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000100)={0xb34, 0x1, 0x5}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:48 executing program 5: r0 = socket(0x10, 0x803, 0x20) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80800) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000240)={0x6, [[0xffffff6d, 0x0, 0x10001, 0xffff985f, 0x5, 0x8, 0x5, 0x4], [0x1, 0x3, 0xfffeffff, 0x400, 0x9, 0x9, 0x806, 0x2], [0x5, 0x10001, 0x9, 0x4, 0x2e, 0x3ff, 0x5]], [], [{0x0, 0x7, 0x0, 0x0, 0x1}, {0xffff, 0x40, 0x1, 0x1, 0x1, 0x1}, {0xf72a, 0x2, 0x1}, {0x7fff, 0x85f, 0x1, 0x0, 0x0, 0x1}, {0xffffffff, 0x6387, 0x0, 0x1}, {0x3ff, 0x101, 0x1, 0x1, 0x1}, {0x9, 0x8000, 0x0, 0x1}, {0x3, 0x5, 0x1, 0x1}, {0x8, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x5, 0x1, 0x0, 0x1}, {0x80, 0x8}], [], 0xdcb3}) dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f00000004c0)={0x2, 'veth0\x00', {0x2e98}, 0x1}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4, 0x208100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40001, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) 00:36:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$evdev(r6, &(0x7f0000000280)=[{{}, 0x6, 0x5, 0x560}, {{0x0, 0x7530}, 0x4, 0x6, 0xcb2}, {{r7, r8/1000+10000}, 0x17, 0x67, 0x7ff}, {{0x77359400}, 0x1f, 0xffff, 0x5}, {{0x0, 0x7530}, 0x4, 0x4, 0x5}, {{r9, r10/1000+10000}, 0x12, 0xff, 0x20}, {{0x0, 0x7530}, 0x3, 0x1, 0x7fffffff}], 0xa8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = dup2(r11, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) recvmmsg(r12, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f00000003c0)=""/162, 0xa2}, {&(0x7f0000000480)=""/247, 0xf7}], 0x3, &(0x7f00000005c0)=""/121, 0x79}, 0x2}], 0x1, 0x1020, &(0x7f0000000680)={0x77359400}) 00:36:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = shmget(0x3, 0x4000, 0x8, &(0x7f0000007000/0x4000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000040)=""/50) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x202002) keyctl$chown(0x4, r7, r6, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) r9 = getpid() rt_tgsigqueueinfo(r9, r9, 0x16, &(0x7f00000000c0)) ptrace(0x10, r9) ptrace$setregs(0xf, r9, 0x0, 0x0) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000280)={{0x3, r4, 0x0, r6, 0x0, 0x0, 0x7ff}, 0x776a6f04, 0x200, 0x8, 0x6, r8, r9, 0x3}) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x1000) r10 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r11}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7f1, 0x1c}, 0x0, 0x0, 0x5, 0x5, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r12, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003040)=[{{&(0x7f0000000240)=@un=@abs, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/69, 0x45}, {&(0x7f00000001c0)=""/54, 0x36}, {&(0x7f0000000340)=""/32, 0x20}, {&(0x7f0000000380)=""/236, 0xec}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000000580)=""/88, 0x58}, {&(0x7f0000000600)=""/93, 0x5d}, {&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/217, 0xd9}], 0x9, &(0x7f0000000880)=""/32, 0x20}, 0x3c0}, {{&(0x7f00000008c0)=@ax25={{0x3, @netrom}, [@null, @bcast, @bcast, @bcast, @netrom, @default, @default]}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000940)=""/12, 0xc}, {&(0x7f0000000980)=""/11, 0xb}, {&(0x7f00000009c0)=""/45, 0x2d}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/8, 0x8}], 0x5, &(0x7f0000000b80)=""/84, 0x54}, 0x1}, {{&(0x7f0000000c00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000c80)=""/36, 0x24}, {&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/96, 0x60}, {&(0x7f0000000e40)=""/21, 0x15}, {&(0x7f0000000e80)=""/123, 0x7b}, {&(0x7f0000000f00)=""/192, 0xc0}, {&(0x7f0000000fc0)=""/33, 0x21}], 0x7, &(0x7f0000001080)=""/205, 0xcd}}, {{&(0x7f0000001180)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002780)=[{&(0x7f0000001200)=""/228, 0xe4}, {&(0x7f0000001300)=""/69, 0x45}, {&(0x7f0000001380)=""/53, 0x35}, {&(0x7f00000013c0)=""/209, 0xd1}, {&(0x7f00000014c0)=""/65, 0x41}, {&(0x7f0000001540)=""/221, 0xdd}, {&(0x7f0000001640)=""/222, 0xde}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)}], 0x9}, 0x43c}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002840)=""/165, 0xa5}, {&(0x7f0000002900)=""/30, 0x1e}, {&(0x7f0000002940)=""/14, 0xe}, {&(0x7f0000002980)=""/176, 0xb0}, {&(0x7f0000002a40)=""/141, 0x8d}, {&(0x7f0000002b00)=""/160, 0xa0}], 0x6}}, {{&(0x7f0000002c40)=@alg, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002cc0)=""/66, 0x42}, {&(0x7f0000002d40)=""/144, 0x90}, {&(0x7f0000002e00)=""/94, 0x5e}, {&(0x7f0000002e80)=""/10, 0xa}, {&(0x7f0000002ec0)=""/57, 0x39}], 0x5, &(0x7f0000002f80)=""/129, 0x81}, 0x9}], 0x6, 0x101, &(0x7f00000031c0)) setsockopt$ax25_int(r13, 0x101, 0x0, &(0x7f0000003200)=0x40, 0x4) 00:36:48 executing program 4 (fault-call:1 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1415.965836] FAULT_INJECTION: forcing a failure. [ 1415.965836] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1415.977681] CPU: 0 PID: 26601 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1415.985572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1415.994959] Call Trace: [ 1415.997564] dump_stack+0x13e/0x194 [ 1416.001221] should_fail.cold+0x10a/0x14b [ 1416.005441] __alloc_pages_nodemask+0x1bf/0x700 [ 1416.010125] ? __alloc_pages_slowpath+0x26c0/0x26c0 00:36:48 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0xf05a, @remote, 0x3}, @in6={0xa, 0x4e24, 0xbbc2, @loopback, 0x2}, @in6={0xa, 0x4e23, 0x63, @mcast2, 0x1}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x1000, @rand_addr="727b14766c1e393967532e1e80f57c4c", 0x101}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x4, @local, 0xffffffce}], 0xac) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) fcntl$dupfd(r2, 0x0, r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc10c5541, &(0x7f0000000140)={0x0, 0x80000}) [ 1416.015169] ? find_held_lock+0x2d/0x110 [ 1416.019251] cache_grow_begin+0x7b/0x410 [ 1416.023406] kmem_cache_alloc_trace+0x6cf/0x7b0 [ 1416.028103] kvm_dev_ioctl+0x15b/0x1480 [ 1416.032098] ? kvm_put_kvm+0xa90/0xa90 [ 1416.036007] ? kvm_put_kvm+0xa90/0xa90 [ 1416.039907] do_vfs_ioctl+0x75a/0xfe0 [ 1416.043713] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1416.048578] ? ioctl_preallocate+0x1a0/0x1a0 [ 1416.053010] ? security_file_ioctl+0x76/0xb0 [ 1416.057432] ? security_file_ioctl+0x83/0xb0 [ 1416.061853] SyS_ioctl+0x7f/0xb0 00:36:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) prctl$PR_GET_THP_DISABLE(0x2a) socketpair(0x21, 0x5, 0xe3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000380)={0x9255, 0x3, 0x1}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') socketpair(0xb, 0x5a27fef72e130757, 0x6, &(0x7f0000000400)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x250, r8, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x11}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6eec}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x33e6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x45}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffbff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x44cc}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x14008800}, 0x41) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x40, 0x0) fallocate(r9, 0x64, 0x869c, 0x2) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="13070002ebffffff0000002721fb"], 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000008f01000000e780b41700000067aae63f37ede5433a7d43c21014468c2b109b158c84751a2e6a9dfe60e450033e536694c509bbb29c8d5e8b7de93498d8f551371592656e7311498718a2a59487af84d65330b9df0e8d5b16538568fded", @ANYRES16=r6, @ANYBLOB="100026bd7000ffdbdf251200000006001401060000000a000600ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x60000010}, 0x24008041) [ 1416.065230] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1416.069330] do_syscall_64+0x1d5/0x640 [ 1416.073351] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1416.078551] RIP: 0033:0x45c479 [ 1416.081749] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1416.089469] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1416.096760] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1416.104040] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 00:36:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={0x0, 0x80000}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"/267, @ANYRES16=r3, @ANYBLOB="20002dbd7000fbdbdf250e000000060028000000000005002d000100000008000b00ff7f000005002d0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x18000) ioctl$NBD_DISCONNECT(r2, 0xab08) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)={0xb284, 0x3, 0x4, 0x80000, 0x6, {0x77359400}, {0x5, 0xc, 0x4, 0x1f, 0x8, 0xf9, "72e36fff"}, 0x8000, 0x2, @userptr=0x1, 0x9, 0x0, r6}) getsockopt$IPT_SO_GET_ENTRIES(r7, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000022000000908e2e777313f60bd42188f90fb968e790b9221ab35ec667860c453401392a046aa9faa79d62291ebce9df616752bc3c12c37f510b91b2ee41046814247ca6cf7bcc65a149a94a80b325ef59631e248b0b76b04cafbcef5fe602aaa427cff4a044ca5b4f07000000000000005b4b1728cdccf73fc189b2585845ec3a78b6229d5900"/181], &(0x7f00000000c0)=0x46) [ 1416.111317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1416.118599] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000001 00:36:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x20000000, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_int(r3, 0x0, 0xe, &(0x7f00000001c0)=0x6, 0x4) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$cgroup_subtree(r7, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) 00:36:49 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) 00:36:49 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r6, 0xc0585604, &(0x7f00000002c0)={0x1, 0x0, {0x6, 0xfffffffd, 0x2017, 0x7, 0x6, 0x7, 0x2, 0x3}}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000040)={r10}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000340)={r10, 0x1f, 0x3, 0x80}, &(0x7f0000000380)=0x10) r11 = socket$kcm(0xa, 0x2, 0x73) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x1d) fsetxattr$security_selinux(r4, &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:default_t:s0\x00', 0x1f, 0x1) sendmmsg$inet_sctp(r11, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:51 executing program 4 (fault-call:1 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:36:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000240)) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xc) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:36:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400203) r3 = accept4(r1, &(0x7f0000001500)=@can, &(0x7f0000001580)=0x80, 0xc0800) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000001680)={&(0x7f00000015c0), 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xff, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x2}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x3c}}, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000040)={0x401, 0x9, 0x4, 0x1, 0xc, 0x401}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) 00:36:51 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000280)={0x0, 0x7, 0xfffffffc, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x990a1b, 0x80000001, [], @p_u8=&(0x7f00000001c0)=0x4}}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(r11, 0xc0585611, &(0x7f0000000440)={0x7, 0x7, 0x4, 0x40, 0x0, {0x0, 0x2710}, {0x2, 0x0, 0xe1, 0x9, 0x0, 0x25, ' rX{'}, 0x2, 0x3, @offset=0xfffffff8}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9]) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r9, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe57}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r12, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$TIOCGDEV(r14, 0x80045432, &(0x7f00000003c0)) 00:36:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000840)=""/243, 0xf3}, {&(0x7f0000000940)=""/26, 0x1a}, {&(0x7f0000000980)=""/187, 0xbb}], 0x3, &(0x7f0000000a80)=""/199, 0xc7}, 0x40000040) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000bc0)={r3, 0x1, 0x6, @local}, 0x10) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r7}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x100, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000007f000031225b35545feca0e2174bd76d", @ANYRES32=r16, @ANYBLOB="1300000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e37b4599c9b7cbbeeea8be34a"], 0x48}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x23, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r16, @ANYBLOB="e5ffffff0000000008001c00ef000000"], 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r18 = socket$netlink(0x10, 0x3, 0x0) r19 = socket$netlink(0x10, 0x3, 0x0) r20 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r19, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r21, @ANYBLOB="1300000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e37b4599c9b7cbbeeea8be34a"], 0x48}}, 0x0) sendmsg$nl_route(r18, &(0x7f0000000080)={0x0, 0x23, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r21, @ANYBLOB="e5ffffff0000000008001c00ef000000"], 0x28}}, 0x0) r22 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r23 = dup(r22) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) getsockopt$PNPIPE_IFINDEX(r23, 0x113, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000c00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000c40)={0x2ec, r12, 0x6, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7ffffffd}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xffffffc0}}, {0x8}}}]}}, {{0x8, 0x1, r21}, {0x110, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xbe}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r3}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x2, 0xa, 0x1, 0x3}, {0x1ff, 0x5, 0xff, 0x4}, {0x1, 0x0, 0x81, 0x5}, {0x8, 0x3f, 0x80, 0xffffffff}]}}}]}}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$FBIO_WAITFORVSYNC(r9, 0x40044620, 0x0) dup2(r8, r0) select(0x40, &(0x7f0000000080)={0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x7}, &(0x7f0000000100)={0x1ff, 0x0, 0x200, 0x0, 0xfffffffffffffffd, 0x0, 0x1a5ab070, 0x8}, 0x0, 0x0) r24 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r25 = dup(r24) ioctl$PERF_EVENT_IOC_ENABLE(r25, 0x8912, 0x400200) ioctl$TUNGETIFF(r25, 0x800454d2, &(0x7f0000000240)) [ 1419.012072] FAULT_INJECTION: forcing a failure. [ 1419.012072] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1419.023922] CPU: 1 PID: 26643 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1419.026357] selinux_nlmsg_perm: 20 callbacks suppressed [ 1419.026366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=127 sclass=netlink_route_socket pig=26649 comm=syz-executor.1 [ 1419.031933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1419.031939] Call Trace: [ 1419.031962] dump_stack+0x13e/0x194 [ 1419.031981] should_fail.cold+0x10a/0x14b [ 1419.031999] __alloc_pages_nodemask+0x1bf/0x700 [ 1419.032013] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1419.032027] ? ____cache_alloc_node+0x153/0x1c0 [ 1419.032045] ? lock_acquire+0x170/0x3f0 [ 1419.062507] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1419.065191] cache_grow_begin+0x7b/0x410 [ 1419.065207] ? do_raw_spin_unlock+0x164/0x250 [ 1419.065222] ____cache_alloc_node+0x16d/0x1c0 [ 1419.086821] IPv6: ADDRCONF(NETDEV_UP): veth63: link is not ready [ 1419.087691] ? check_preemption_disabled+0x35/0x240 [ 1419.087711] kmem_cache_alloc_trace+0x20f/0x7b0 [ 1419.087737] kvm_dev_ioctl+0x15b/0x1480 [ 1419.129231] ? kvm_put_kvm+0xa90/0xa90 [ 1419.133124] ? kvm_put_kvm+0xa90/0xa90 [ 1419.137014] do_vfs_ioctl+0x75a/0xfe0 [ 1419.140819] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1419.145588] ? ioctl_preallocate+0x1a0/0x1a0 [ 1419.150065] ? security_file_ioctl+0x76/0xb0 [ 1419.154493] ? security_file_ioctl+0x83/0xb0 [ 1419.158912] SyS_ioctl+0x7f/0xb0 [ 1419.162280] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1419.166266] do_syscall_64+0x1d5/0x640 [ 1419.170159] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1419.175343] RIP: 0033:0x45c479 [ 1419.178568] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1419.186315] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1419.193573] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1419.200858] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 00:36:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) r5 = gettid() r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ADDFB(r7, 0xc01c64ae, &(0x7f00000001c0)={0xfffffffb, 0x1, 0x1, 0xb7, 0x7, 0x4, 0x5}) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, r5, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r8, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080)={0x2, 0x0, 0xffffffffffffffff}, &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1419.208191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1419.215476] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000002 00:36:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) 00:36:52 executing program 4 (fault-call:1 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:36:52 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r9, 0xc0105303, &(0x7f00000002c0)={0x3f, 0x9, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f00000001c0)={0x4, &(0x7f0000000240)=[{}, {}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) bind$vsock_stream(r11, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x0}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r12, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf59a, 0x8}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000001c0)=[@sack_perm, @window={0x3, 0xffff, 0x6}, @timestamp, @window={0x3, 0x8, 0x100}, @sack_perm, @sack_perm, @sack_perm, @mss={0x2, 0xd01f}], 0x8) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setsig(0x4203, r1, 0x0, &(0x7f0000000040)={0xc, 0xff, 0x401}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) [ 1419.412641] FAULT_INJECTION: forcing a failure. [ 1419.412641] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:36:52 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r8, 0xffffff00, 0x3, 0xb1}, 0x10) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1419.490167] CPU: 1 PID: 26677 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1419.498097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1419.507463] Call Trace: [ 1419.510071] dump_stack+0x13e/0x194 [ 1419.513716] should_fail.cold+0x10a/0x14b [ 1419.517910] __alloc_pages_nodemask+0x1bf/0x700 [ 1419.522601] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1419.527628] ? find_held_lock+0x2d/0x110 [ 1419.531709] ? cache_grow_begin+0x32d/0x410 [ 1419.536045] cache_grow_begin+0x7b/0x410 [ 1419.540189] ? __cpuset_node_allowed+0xfa/0x450 [ 1419.544889] fallback_alloc+0x205/0x2b0 [ 1419.548876] kmem_cache_alloc_trace+0x20f/0x7b0 [ 1419.553565] kvm_dev_ioctl+0x15b/0x1480 [ 1419.557662] ? kvm_put_kvm+0xa90/0xa90 [ 1419.561566] ? kvm_put_kvm+0xa90/0xa90 [ 1419.565462] do_vfs_ioctl+0x75a/0xfe0 [ 1419.569271] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1419.574043] ? ioctl_preallocate+0x1a0/0x1a0 [ 1419.578475] ? security_file_ioctl+0x76/0xb0 [ 1419.582895] ? security_file_ioctl+0x83/0xb0 [ 1419.587310] SyS_ioctl+0x7f/0xb0 [ 1419.590670] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1419.594639] do_syscall_64+0x1d5/0x640 [ 1419.598529] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1419.603708] RIP: 0033:0x45c479 [ 1419.606885] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1419.614693] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1419.621954] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1419.629221] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1419.636495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1419.643767] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000003 00:36:54 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:54 executing program 4 (fault-call:1 fault-nth:4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1422.150810] FAULT_INJECTION: forcing a failure. [ 1422.150810] name failslab, interval 1, probability 0, space 0, times 0 [ 1422.164569] CPU: 1 PID: 26701 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1422.172482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1422.181843] Call Trace: [ 1422.184448] dump_stack+0x13e/0x194 [ 1422.188102] should_fail.cold+0x10a/0x14b [ 1422.192269] should_failslab+0xd6/0x130 [ 1422.196259] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 1422.201386] ? lock_acquire+0x170/0x3f0 [ 1422.205378] __kmalloc_node+0x38/0x70 [ 1422.209197] kvmalloc_node+0x88/0xd0 [ 1422.212925] kvm_dev_ioctl+0x6bf/0x1480 [ 1422.216921] ? kvm_put_kvm+0xa90/0xa90 [ 1422.220829] ? kvm_put_kvm+0xa90/0xa90 [ 1422.224736] do_vfs_ioctl+0x75a/0xfe0 [ 1422.228563] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1422.233341] ? ioctl_preallocate+0x1a0/0x1a0 [ 1422.237775] ? security_file_ioctl+0x76/0xb0 [ 1422.242196] ? security_file_ioctl+0x83/0xb0 [ 1422.246620] SyS_ioctl+0x7f/0xb0 [ 1422.249996] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1422.253981] do_syscall_64+0x1d5/0x640 [ 1422.257898] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1422.263099] RIP: 0033:0x45c479 [ 1422.266289] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1422.274016] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1422.281292] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1422.288572] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1422.295856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1422.303140] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000004 00:36:55 executing program 4 (fault-call:1 fault-nth:5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:36:55 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x7, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1422.438349] FAULT_INJECTION: forcing a failure. [ 1422.438349] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1422.450191] CPU: 1 PID: 26710 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1422.458081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1422.467448] Call Trace: [ 1422.470057] dump_stack+0x13e/0x194 [ 1422.473704] should_fail.cold+0x10a/0x14b [ 1422.477870] __alloc_pages_nodemask+0x1bf/0x700 [ 1422.482559] ? __alloc_pages_slowpath+0x26c0/0x26c0 00:36:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/arp\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x20500, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x4000, 0xfff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r2, &(0x7f0000000640)='./file0\x00', 0x0, 0x800, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="8d00000008010000006e000400008000000102000000b1ae77fb00a0b8beed003000050000000000000000030073797a20005e6d643573756d766d6e657431252773656c696e75785e76626f786e6574312f0a012f6465762f7a65726f000e006e65742f6d6366696c74657236000a006e49742f726f75746500575ac0c8cdc2c032f812c3513b42963ce6671839d5c0a1000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32], 0x8d) write$FUSE_ENTRY(r1, &(0x7f00000001c0)={0x90, 0x0, 0x6, {0x4, 0x3, 0xd4b, 0x848e, 0x1, 0x4000, {0x0, 0x7fffffff, 0x9, 0x1, 0x3, 0x3, 0x7, 0x4, 0x1ff, 0x24a, 0xffffff80, 0xee01, r5, 0x9, 0x8}}}, 0x90) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x6000) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040)={r9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000000c0)={r9, 0x5, 0x6, 0x7, 0x6, 0x1}, &(0x7f0000000100)=0x14) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1422.487597] ? find_held_lock+0x2d/0x110 [ 1422.491695] cache_grow_begin+0x7b/0x410 [ 1422.495780] kmem_cache_alloc_node_trace+0x6ca/0x7b0 [ 1422.500992] ? lock_acquire+0x170/0x3f0 [ 1422.505007] __kmalloc_node+0x38/0x70 [ 1422.508863] kvmalloc_node+0x88/0xd0 [ 1422.512591] kvm_dev_ioctl+0x6bf/0x1480 [ 1422.516583] ? kvm_put_kvm+0xa90/0xa90 [ 1422.520484] ? kvm_put_kvm+0xa90/0xa90 [ 1422.524386] do_vfs_ioctl+0x75a/0xfe0 [ 1422.528197] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1422.532966] ? ioctl_preallocate+0x1a0/0x1a0 [ 1422.537403] ? security_file_ioctl+0x76/0xb0 [ 1422.541932] ? security_file_ioctl+0x83/0xb0 [ 1422.546354] SyS_ioctl+0x7f/0xb0 [ 1422.549729] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1422.553711] do_syscall_64+0x1d5/0x640 [ 1422.557618] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1422.562813] RIP: 0033:0x45c479 [ 1422.566004] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1422.573722] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1422.581002] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1422.588281] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1422.595564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1422.602840] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000005 00:36:55 executing program 4 (fault-call:1 fault-nth:6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1422.714283] FAULT_INJECTION: forcing a failure. [ 1422.714283] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1422.726128] CPU: 0 PID: 26724 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1422.734023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1422.743388] Call Trace: [ 1422.746005] dump_stack+0x13e/0x194 [ 1422.749663] should_fail.cold+0x10a/0x14b [ 1422.753831] __alloc_pages_nodemask+0x1bf/0x700 [ 1422.758526] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1422.763567] ? ____cache_alloc_node+0x153/0x1c0 [ 1422.768259] ? lock_acquire+0x170/0x3f0 [ 1422.772255] cache_grow_begin+0x7b/0x410 [ 1422.776341] ? do_raw_spin_unlock+0x164/0x250 [ 1422.780852] ____cache_alloc_node+0x16d/0x1c0 [ 1422.785355] ? check_preemption_disabled+0x35/0x240 [ 1422.790387] kmem_cache_alloc_node_trace+0xf2/0x7b0 [ 1422.795421] ? lock_acquire+0x170/0x3f0 [ 1422.799409] __kmalloc_node+0x38/0x70 [ 1422.803223] kvmalloc_node+0x88/0xd0 [ 1422.806953] kvm_dev_ioctl+0x6bf/0x1480 [ 1422.810945] ? kvm_put_kvm+0xa90/0xa90 [ 1422.814844] ? kvm_put_kvm+0xa90/0xa90 [ 1422.818742] do_vfs_ioctl+0x75a/0xfe0 [ 1422.822549] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1422.827319] ? ioctl_preallocate+0x1a0/0x1a0 [ 1422.831754] ? security_file_ioctl+0x76/0xb0 [ 1422.836171] ? security_file_ioctl+0x83/0xb0 [ 1422.840598] SyS_ioctl+0x7f/0xb0 [ 1422.843977] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1422.847968] do_syscall_64+0x1d5/0x640 [ 1422.851874] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1422.857067] RIP: 0033:0x45c479 00:36:55 executing program 5: r0 = accept(0xffffffffffffffff, &(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000600)=0x80) bind$inet6(r0, &(0x7f0000000640)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffff}, 0x1c) r1 = socket(0x10, 0x803, 0x20) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000240)={0x100, [[0x3ff, 0x80, 0x40, 0x8, 0x9, 0x6, 0x40, 0x6], [0xb6c00000, 0x9, 0x3baaefbc, 0x7, 0x6, 0x7fffffff, 0xffffffff, 0x40], [0xfffffffc, 0x1000, 0x10000, 0x10000, 0x80000001, 0x80000001, 0x800, 0x9]], [], [{0x10000, 0xac78, 0x1, 0x1, 0x0, 0x1}, {0x951, 0x2, 0x0, 0x1, 0x1}, {0x5, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x3ff, 0x0, 0x1}, {0xfc, 0xd6, 0x0, 0x0, 0x1, 0x1}, {0x4, 0x10001}, {0xe, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x90, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x74bf, 0x10000000, 0x0, 0x0, 0x1}, {0x0, 0x24000, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x9f13, 0x0, 0x0, 0x1, 0x1}], [], 0x8f}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r7}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r9 = accept$unix(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000001c0)=0x6e) fcntl$F_SET_FILE_RW_HINT(r9, 0x40e, &(0x7f0000000540)=0x5) [ 1422.860257] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1422.868060] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1422.875335] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1422.882611] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1422.889889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1422.897252] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000006 00:36:55 executing program 4 (fault-call:1 fault-nth:7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:36:55 executing program 5: r0 = socket(0x10, 0x803, 0x20) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000001c0)={0x0, 0x7530}, 0x10) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1423.068876] FAULT_INJECTION: forcing a failure. [ 1423.068876] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1423.098039] CPU: 0 PID: 26741 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1423.105966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1423.115329] Call Trace: [ 1423.117938] dump_stack+0x13e/0x194 [ 1423.121590] should_fail.cold+0x10a/0x14b [ 1423.125753] __alloc_pages_nodemask+0x1bf/0x700 [ 1423.130443] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1423.135467] ? find_held_lock+0x2d/0x110 [ 1423.139550] ? cache_grow_begin+0x32d/0x410 [ 1423.143889] cache_grow_begin+0x7b/0x410 [ 1423.147969] ? __cpuset_node_allowed+0xfa/0x450 [ 1423.152658] fallback_alloc+0x205/0x2b0 [ 1423.156654] kmem_cache_alloc_node_trace+0xf2/0x7b0 [ 1423.161691] ? lock_acquire+0x170/0x3f0 [ 1423.165689] __kmalloc_node+0x38/0x70 [ 1423.169548] kvmalloc_node+0x88/0xd0 [ 1423.173315] kvm_dev_ioctl+0x6bf/0x1480 [ 1423.177315] ? kvm_put_kvm+0xa90/0xa90 [ 1423.181222] ? kvm_put_kvm+0xa90/0xa90 [ 1423.185126] do_vfs_ioctl+0x75a/0xfe0 [ 1423.188957] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1423.193820] ? ioctl_preallocate+0x1a0/0x1a0 [ 1423.198258] ? security_file_ioctl+0x76/0xb0 [ 1423.202684] ? security_file_ioctl+0x83/0xb0 [ 1423.207107] SyS_ioctl+0x7f/0xb0 [ 1423.210488] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1423.214480] do_syscall_64+0x1d5/0x640 [ 1423.218388] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1423.223590] RIP: 0033:0x45c479 [ 1423.226781] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1423.234501] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1423.241781] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1423.249062] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1423.256340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1423.263627] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000007 00:36:56 executing program 5: r0 = socket(0x10, 0x803, 0x20) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000280)={0x4, 0x7}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$RNDZAPENTCNT(r9, 0x5204, &(0x7f0000000240)=0x5) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) connect$rxrpc(r1, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) 00:36:56 executing program 4 (fault-call:1 fault-nth:8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1423.416385] FAULT_INJECTION: forcing a failure. [ 1423.416385] name failslab, interval 1, probability 0, space 0, times 0 [ 1423.434962] CPU: 0 PID: 26750 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1423.443025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1423.452392] Call Trace: [ 1423.455094] dump_stack+0x13e/0x194 [ 1423.458747] should_fail.cold+0x10a/0x14b [ 1423.462913] should_failslab+0xd6/0x130 [ 1423.466900] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 1423.472109] ? kasan_kmalloc+0xbf/0xe0 [ 1423.476013] __kmalloc_node+0x38/0x70 [ 1423.479833] kvmalloc_node+0x88/0xd0 [ 1423.483567] kvm_dev_ioctl+0x7cb/0x1480 [ 1423.487559] ? kvm_put_kvm+0xa90/0xa90 [ 1423.491466] ? kvm_put_kvm+0xa90/0xa90 [ 1423.495365] do_vfs_ioctl+0x75a/0xfe0 [ 1423.499175] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1423.503940] ? ioctl_preallocate+0x1a0/0x1a0 [ 1423.508368] ? security_file_ioctl+0x76/0xb0 [ 1423.512786] ? security_file_ioctl+0x83/0xb0 [ 1423.517322] SyS_ioctl+0x7f/0xb0 [ 1423.520698] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1423.524688] do_syscall_64+0x1d5/0x640 [ 1423.528598] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1423.533794] RIP: 0033:0x45c479 [ 1423.536986] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1423.544707] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1423.551984] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1423.559271] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 00:36:56 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000580)={0x0, 0x8}, &(0x7f00000005c0)=0x8) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000600)={0x0, 0x401}, &(0x7f0000000640)=0x8) sendmmsg$inet_sctp(r6, &(0x7f0000000740)=[{&(0x7f0000000400)=@in6={0xa, 0x4e20, 0x8001, @remote, 0x9db}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000004c0)="6b93df2e86e076f7", 0x8}, {&(0x7f0000000500)="6f2c8c5ae9c5fc006eb4ff0d949b7d124eeced95a65c0ee3a06d63fb0825e06855797f0e034e61e40ee4e41f6f7018028919a7ab4053acd6e1594c70", 0x3c}], 0x2, &(0x7f0000000680)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x8207, 0x3, 0x80000001, r8}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x40}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0xfffa, 0x0, 0x9f, 0x2, 0x1, 0x8, 0x3, r9}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x20d, 0x8, 0x1, r12}}, @authinfo={0x18, 0x84, 0x6, {0xcbc}}], 0xb8, 0x41c0}], 0x1, 0x934) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000240)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000340)=0xe8) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000001c0)='./file0\x00', r15, r16) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1423.566550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1423.573832] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000008 00:36:56 executing program 4 (fault-call:1 fault-nth:9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1423.707860] FAULT_INJECTION: forcing a failure. [ 1423.707860] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1423.719695] CPU: 1 PID: 26759 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1423.727583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1423.736967] Call Trace: [ 1423.739573] dump_stack+0x13e/0x194 [ 1423.743220] should_fail.cold+0x10a/0x14b [ 1423.747388] __alloc_pages_nodemask+0x1bf/0x700 [ 1423.752078] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1423.757105] ? find_held_lock+0x2d/0x110 [ 1423.761191] cache_grow_begin+0x7b/0x410 [ 1423.765265] kmem_cache_alloc_node_trace+0x6ca/0x7b0 [ 1423.770383] ? kasan_kmalloc+0xbf/0xe0 [ 1423.774284] __kmalloc_node+0x38/0x70 [ 1423.778096] kvmalloc_node+0x88/0xd0 [ 1423.781833] kvm_dev_ioctl+0x7cb/0x1480 [ 1423.785823] ? kvm_put_kvm+0xa90/0xa90 [ 1423.789727] ? kvm_put_kvm+0xa90/0xa90 [ 1423.793626] do_vfs_ioctl+0x75a/0xfe0 [ 1423.797441] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1423.802218] ? ioctl_preallocate+0x1a0/0x1a0 [ 1423.806660] ? security_file_ioctl+0x76/0xb0 [ 1423.811186] ? security_file_ioctl+0x83/0xb0 [ 1423.815611] SyS_ioctl+0x7f/0xb0 [ 1423.818984] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1423.822973] do_syscall_64+0x1d5/0x640 [ 1423.826875] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1423.832071] RIP: 0033:0x45c479 [ 1423.835262] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1423.842976] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1423.850252] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 00:36:56 executing program 4 (fault-call:1 fault-nth:10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1423.857529] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1423.864805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1423.872129] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000009 [ 1423.932121] FAULT_INJECTION: forcing a failure. [ 1423.932121] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1423.943967] CPU: 1 PID: 26764 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1423.951855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1423.961221] Call Trace: [ 1423.963831] dump_stack+0x13e/0x194 [ 1423.967568] should_fail.cold+0x10a/0x14b [ 1423.971742] __alloc_pages_nodemask+0x1bf/0x700 [ 1423.976430] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1423.981462] ? ____cache_alloc_node+0x153/0x1c0 [ 1423.986148] ? lock_acquire+0x170/0x3f0 [ 1423.990138] cache_grow_begin+0x7b/0x410 [ 1423.994212] ? do_raw_spin_unlock+0x164/0x250 [ 1423.998719] ____cache_alloc_node+0x16d/0x1c0 [ 1424.003226] ? check_preemption_disabled+0x35/0x240 [ 1424.008252] kmem_cache_alloc_node_trace+0xf2/0x7b0 [ 1424.013280] ? kasan_kmalloc+0xbf/0xe0 [ 1424.017180] __kmalloc_node+0x38/0x70 [ 1424.020995] kvmalloc_node+0x88/0xd0 [ 1424.024724] kvm_dev_ioctl+0x7cb/0x1480 [ 1424.028718] ? kvm_put_kvm+0xa90/0xa90 [ 1424.032624] ? kvm_put_kvm+0xa90/0xa90 [ 1424.036546] do_vfs_ioctl+0x75a/0xfe0 [ 1424.040359] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1424.045125] ? ioctl_preallocate+0x1a0/0x1a0 [ 1424.049553] ? security_file_ioctl+0x76/0xb0 [ 1424.053974] ? security_file_ioctl+0x83/0xb0 [ 1424.058397] SyS_ioctl+0x7f/0xb0 [ 1424.061775] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1424.065767] do_syscall_64+0x1d5/0x640 [ 1424.069674] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1424.074881] RIP: 0033:0x45c479 [ 1424.078089] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1424.085814] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1424.093096] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1424.100373] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1424.107656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1424.115032] R13: 0000000000000390 R14: 00000000004c5c71 R15: 000000000000000a 00:36:57 executing program 4 (fault-call:1 fault-nth:11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1424.264109] FAULT_INJECTION: forcing a failure. [ 1424.264109] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1424.289564] CPU: 0 PID: 26768 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1424.297495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1424.306953] Call Trace: [ 1424.309563] dump_stack+0x13e/0x194 [ 1424.313218] should_fail.cold+0x10a/0x14b [ 1424.317385] __alloc_pages_nodemask+0x1bf/0x700 [ 1424.322073] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1424.327103] ? find_held_lock+0x2d/0x110 [ 1424.331189] ? cache_grow_begin+0x32d/0x410 [ 1424.335529] cache_grow_begin+0x7b/0x410 [ 1424.339607] ? __cpuset_node_allowed+0xfa/0x450 [ 1424.344301] fallback_alloc+0x205/0x2b0 [ 1424.348437] kmem_cache_alloc_node_trace+0xf2/0x7b0 [ 1424.353473] ? kasan_kmalloc+0xbf/0xe0 [ 1424.357377] __kmalloc_node+0x38/0x70 [ 1424.361203] kvmalloc_node+0x88/0xd0 [ 1424.364934] kvm_dev_ioctl+0x7cb/0x1480 [ 1424.368933] ? kvm_put_kvm+0xa90/0xa90 [ 1424.372840] ? kvm_put_kvm+0xa90/0xa90 [ 1424.376745] do_vfs_ioctl+0x75a/0xfe0 [ 1424.380562] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1424.385333] ? ioctl_preallocate+0x1a0/0x1a0 [ 1424.389768] ? security_file_ioctl+0x76/0xb0 [ 1424.394184] ? security_file_ioctl+0x83/0xb0 [ 1424.398608] SyS_ioctl+0x7f/0xb0 [ 1424.401990] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1424.405980] do_syscall_64+0x1d5/0x640 [ 1424.409888] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1424.415083] RIP: 0033:0x45c479 [ 1424.418272] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1424.425988] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1424.433271] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1424.440540] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1424.447812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1424.455080] R13: 0000000000000390 R14: 00000000004c5c71 R15: 000000000000000b 00:36:57 executing program 4 (fault-call:1 fault-nth:12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1424.608369] FAULT_INJECTION: forcing a failure. [ 1424.608369] name failslab, interval 1, probability 0, space 0, times 0 [ 1424.637770] CPU: 1 PID: 26774 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1424.645702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1424.655066] Call Trace: [ 1424.657674] dump_stack+0x13e/0x194 [ 1424.661322] should_fail.cold+0x10a/0x14b [ 1424.665492] should_failslab+0xd6/0x130 [ 1424.669479] kmem_cache_alloc_trace+0x2db/0x7b0 [ 1424.674229] ? cleanup_srcu_struct+0x270/0x270 [ 1424.678821] ? __raw_spin_lock_init+0x28/0x100 [ 1424.683429] kvm_dev_ioctl+0x963/0x1480 [ 1424.687431] ? kvm_put_kvm+0xa90/0xa90 [ 1424.691339] ? kvm_put_kvm+0xa90/0xa90 [ 1424.695243] do_vfs_ioctl+0x75a/0xfe0 [ 1424.699058] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1424.703834] ? ioctl_preallocate+0x1a0/0x1a0 [ 1424.708266] ? security_file_ioctl+0x76/0xb0 [ 1424.712689] ? security_file_ioctl+0x83/0xb0 [ 1424.717111] SyS_ioctl+0x7f/0xb0 [ 1424.720490] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1424.724473] do_syscall_64+0x1d5/0x640 [ 1424.728376] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1424.733568] RIP: 0033:0x45c479 [ 1424.736759] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1424.744475] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1424.751754] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1424.759033] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1424.766312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1424.773590] R13: 0000000000000390 R14: 00000000004c5c71 R15: 000000000000000c 00:36:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r0, r1, 0x0) dup2(r3, r2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee6dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r4, 0x0, 0x0) 00:36:58 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x408600, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) r2 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:58 executing program 4 (fault-call:1 fault-nth:13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:36:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) process_vm_writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f00000000c0)=""/169, 0xa9}, {&(0x7f0000000180)=""/83, 0x53}, {&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000340)=""/77, 0x4d}], 0x6, &(0x7f0000000480)=[{&(0x7f0000000440)=""/61, 0x3d}], 0x1, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) [ 1425.758291] FAULT_INJECTION: forcing a failure. [ 1425.758291] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.814094] CPU: 1 PID: 26783 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1425.822025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1425.831389] Call Trace: [ 1425.833990] dump_stack+0x13e/0x194 [ 1425.837648] should_fail.cold+0x10a/0x14b [ 1425.841818] should_failslab+0xd6/0x130 [ 1425.845806] kmem_cache_alloc_trace+0x2db/0x7b0 [ 1425.850531] ? cleanup_srcu_struct+0x270/0x270 [ 1425.855133] ? __raw_spin_lock_init+0x28/0x100 [ 1425.859728] kvm_dev_ioctl+0x963/0x1480 [ 1425.863721] ? kvm_put_kvm+0xa90/0xa90 [ 1425.867623] ? kvm_put_kvm+0xa90/0xa90 [ 1425.871520] do_vfs_ioctl+0x75a/0xfe0 [ 1425.875331] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1425.880145] ? ioctl_preallocate+0x1a0/0x1a0 [ 1425.884580] ? security_file_ioctl+0x76/0xb0 [ 1425.888998] ? security_file_ioctl+0x83/0xb0 [ 1425.893419] SyS_ioctl+0x7f/0xb0 [ 1425.896799] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1425.900787] do_syscall_64+0x1d5/0x640 [ 1425.904690] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1425.909885] RIP: 0033:0x45c479 [ 1425.913078] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1425.920792] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1425.928091] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1425.935371] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1425.942654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1425.949931] R13: 0000000000000390 R14: 00000000004c5c71 R15: 000000000000000d 00:36:58 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000340)={0x7f, "ca57e4a786b68d019e9e494e8d3a1c2e45b49b5951bbe864d7ce0c6d7d4dbc8d", 0x3, 0x1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7968f172, 0x7}}, r6, 0x80, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000240)={0x9c0000, 0xe74, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x990a60, 0x9}}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_RESET(r10, 0x2403, 0x2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300)='NLBL_UNLBL\x00') fcntl$notify(r7, 0x402, 0x4) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000000280)=""/116) r11 = socket$kcm(0xa, 0x0, 0x73) sendmmsg$inet_sctp(r11, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:58 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) dup(r2) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:59 executing program 4 (fault-call:1 fault-nth:14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:36:59 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000001c0)=0x1f) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000240)={0x1, 'veth0_to_bridge\x00', {}, 0x3f}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r7}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1426.268588] FAULT_INJECTION: forcing a failure. [ 1426.268588] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.300364] CPU: 0 PID: 26806 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1426.308295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1426.317656] Call Trace: [ 1426.320257] dump_stack+0x13e/0x194 [ 1426.323899] should_fail.cold+0x10a/0x14b [ 1426.328065] should_failslab+0xd6/0x130 [ 1426.332050] kmem_cache_alloc_trace+0x2db/0x7b0 [ 1426.336747] ? cleanup_srcu_struct+0x270/0x270 [ 1426.341345] ? __raw_spin_lock_init+0x28/0x100 [ 1426.345944] kvm_dev_ioctl+0x963/0x1480 [ 1426.349943] ? kvm_put_kvm+0xa90/0xa90 [ 1426.353874] ? kvm_put_kvm+0xa90/0xa90 [ 1426.357774] do_vfs_ioctl+0x75a/0xfe0 [ 1426.361584] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1426.366349] ? ioctl_preallocate+0x1a0/0x1a0 [ 1426.370875] ? security_file_ioctl+0x76/0xb0 [ 1426.375289] ? security_file_ioctl+0x83/0xb0 [ 1426.379706] SyS_ioctl+0x7f/0xb0 [ 1426.383076] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1426.387061] do_syscall_64+0x1d5/0x640 [ 1426.390967] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1426.396158] RIP: 0033:0x45c479 [ 1426.399351] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1426.407065] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 00:36:59 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1426.414340] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1426.421615] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1426.428894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1426.436399] R13: 0000000000000390 R14: 00000000004c5c71 R15: 000000000000000e 00:36:59 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x7ffff}}, 0x10, &(0x7f0000000100), 0x60, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80389}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9}}], 0x48}, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000001c0)=0x1, 0x4) r1 = socket(0x10, 0x803, 0x20) dup(r1) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$EVIOCGABS0(r9, 0x80184540, &(0x7f0000000240)=""/111) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:59 executing program 4 (fault-call:1 fault-nth:15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:36:59 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1426.556131] rdma_op ffff8881fa2312d8 conn xmit_rdma (null) [ 1426.603487] FAULT_INJECTION: forcing a failure. [ 1426.603487] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.630597] CPU: 1 PID: 26821 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1426.638547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1426.647907] Call Trace: [ 1426.650515] dump_stack+0x13e/0x194 [ 1426.654165] should_fail.cold+0x10a/0x14b [ 1426.658338] should_failslab+0xd6/0x130 [ 1426.662335] kmem_cache_alloc_trace+0x2db/0x7b0 [ 1426.667029] ? cleanup_srcu_struct+0x270/0x270 [ 1426.671625] ? __raw_spin_lock_init+0x28/0x100 [ 1426.676232] kvm_dev_ioctl+0x963/0x1480 [ 1426.680233] ? kvm_put_kvm+0xa90/0xa90 [ 1426.684136] ? kvm_put_kvm+0xa90/0xa90 [ 1426.688038] do_vfs_ioctl+0x75a/0xfe0 [ 1426.691859] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1426.696628] ? ioctl_preallocate+0x1a0/0x1a0 [ 1426.701068] ? security_file_ioctl+0x76/0xb0 [ 1426.705488] ? security_file_ioctl+0x83/0xb0 [ 1426.709912] SyS_ioctl+0x7f/0xb0 [ 1426.713292] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1426.717394] do_syscall_64+0x1d5/0x640 [ 1426.721300] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1426.726499] RIP: 0033:0x45c479 [ 1426.729703] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1426.737420] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1426.744703] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1426.751983] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1426.759267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1426.766549] R13: 0000000000000390 R14: 00000000004c5c71 R15: 000000000000000f 00:36:59 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x1ff) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x38, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fff}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x4040) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SG_SET_COMMAND_Q(r9, 0x2271, &(0x7f00000001c0)=0x12f) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x41, &(0x7f0000000300)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:59 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000240)={0x81, 0x1, 0x5, 0x3, [], [], [], 0xfff, 0x2784faca, 0x7, 0x1ff, "7a30a92de3d4639d9dbc67b7cf2d2e04"}) r1 = socket(0x10, 0x803, 0x20) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r7, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r9, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r8}) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:36:59 executing program 4 (fault-call:1 fault-nth:16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1426.984971] FAULT_INJECTION: forcing a failure. [ 1426.984971] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.002041] CPU: 0 PID: 26831 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1427.009965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1427.019336] Call Trace: [ 1427.021947] dump_stack+0x13e/0x194 [ 1427.025602] should_fail.cold+0x10a/0x14b [ 1427.029774] should_failslab+0xd6/0x130 [ 1427.033772] kmem_cache_alloc_trace+0x2db/0x7b0 [ 1427.038459] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1427.043928] ? kvm_dev_ioctl+0x963/0x1480 [ 1427.048091] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1427.053134] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 1427.057996] do_mmu_notifier_register+0x8f/0x450 [ 1427.062765] ? __raw_spin_lock_init+0x28/0x100 [ 1427.067375] kvm_dev_ioctl+0xa14/0x1480 [ 1427.071371] ? kvm_put_kvm+0xa90/0xa90 [ 1427.075276] ? kvm_put_kvm+0xa90/0xa90 [ 1427.079181] do_vfs_ioctl+0x75a/0xfe0 [ 1427.083002] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1427.087779] ? ioctl_preallocate+0x1a0/0x1a0 [ 1427.092222] ? security_file_ioctl+0x76/0xb0 [ 1427.096659] ? security_file_ioctl+0x83/0xb0 [ 1427.101087] SyS_ioctl+0x7f/0xb0 [ 1427.104468] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1427.108459] do_syscall_64+0x1d5/0x640 [ 1427.112367] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1427.117567] RIP: 0033:0x45c479 [ 1427.120787] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1427.128503] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1427.135779] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1427.143075] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1427.150352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1427.157630] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000010 00:37:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x1, r0}) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:37:01 executing program 4 (fault-call:1 fault-nth:17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:01 executing program 5: r0 = socket(0x10, 0x803, 0x20) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x5, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast]}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:01 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1428.878372] FAULT_INJECTION: forcing a failure. [ 1428.878372] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.917844] CPU: 1 PID: 26842 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 00:37:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000100)={0x350, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1152c9a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13b81776}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x135ed1d4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a2294e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf76fbf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b94ccfa}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x448efbdf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56d2f8f7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41323b3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b0a476a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77255a71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x397b8ab9}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5de59696}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51272ce7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}]}, {0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xc0, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24b3e887}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23d0ae86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf196}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61193459}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f41d7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x76d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe432}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac25}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec3a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe1fc1db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11df100c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19d623c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d509ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x129eca90}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75a8ad2e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x317e86ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe579}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bae9a89}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed73}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf4, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37e4fa75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e2e722d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7723ca60}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x587e190c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x752a4829}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x393b8d1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5329326c}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12f12b6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3746257}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7edd1cad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa267}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb27}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a80}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde1d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6562}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a88}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x80}, 0x40) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() r4 = accept4$bt_l2cap(r1, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, &(0x7f0000001b40)=0xe, 0x80800) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000001b80)='wg0\x00', 0x4) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x44}}, 0x20040000) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") syz_init_net_socket$llc(0x1a, 0x0, 0x0) ptrace$cont(0x7, r3, 0x0, 0x0) [ 1428.925771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1428.935139] Call Trace: [ 1428.937749] dump_stack+0x13e/0x194 [ 1428.941399] should_fail.cold+0x10a/0x14b [ 1428.945565] ? kvm_exit+0x80/0x80 [ 1428.949029] should_failslab+0xd6/0x130 [ 1428.953017] kmem_cache_alloc_trace+0x2db/0x7b0 [ 1428.957702] ? __lockdep_init_map+0x100/0x560 [ 1428.962205] ? __lockdep_init_map+0x100/0x560 [ 1428.966712] ? kvm_exit+0x80/0x80 [ 1428.970240] __kthread_create_on_node+0xbe/0x3a0 [ 1428.975005] ? kthread_park+0x130/0x130 [ 1428.978985] ? trace_hardirqs_on+0x10/0x10 [ 1428.983237] ? trace_hardirqs_on+0x10/0x10 [ 1428.987477] ? check_preemption_disabled+0x35/0x240 [ 1428.992507] ? kvm_exit+0x80/0x80 [ 1428.995973] kthread_create_on_node+0xa8/0xd0 [ 1429.000595] ? __kthread_create_on_node+0x3a0/0x3a0 [ 1429.005634] ? __lockdep_init_map+0x100/0x560 [ 1429.010143] ? __lockdep_init_map+0x100/0x560 [ 1429.014657] ? kvm_mmu_reset_context+0x70/0x70 [ 1429.019255] kvm_vm_create_worker_thread+0x123/0x1ec [ 1429.024378] ? kvm_io_bus_unregister_dev+0x300/0x300 [ 1429.029505] ? kvm_mmu_reset_context+0x70/0x70 [ 1429.034099] ? kfree+0x205/0x260 [ 1429.037483] kvm_mmu_post_init_vm+0x2e/0x90 [ 1429.041828] kvm_dev_ioctl+0xfca/0x1480 [ 1429.045825] ? kvm_put_kvm+0xa90/0xa90 [ 1429.049742] ? kvm_put_kvm+0xa90/0xa90 [ 1429.053646] do_vfs_ioctl+0x75a/0xfe0 [ 1429.057461] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1429.062233] ? ioctl_preallocate+0x1a0/0x1a0 [ 1429.066671] ? security_file_ioctl+0x76/0xb0 [ 1429.071097] ? security_file_ioctl+0x83/0xb0 [ 1429.075529] SyS_ioctl+0x7f/0xb0 00:37:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x10400, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0xc0, &(0x7f00000000c0)=""/151, &(0x7f0000000180)=0x97) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000001c0)=0x1) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) [ 1429.078909] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1429.082896] do_syscall_64+0x1d5/0x640 [ 1429.086799] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1429.091993] RIP: 0033:0x45c479 [ 1429.095248] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1429.102976] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1429.110256] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1429.117535] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 00:37:01 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x22000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r5, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1429.124813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1429.132093] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000011 00:37:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x1, &(0x7f0000000080)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5aa6f91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b518fa023f6e2a6acae7417f389d0f161ece45b2f64c17dca27bc1521a47142229df0364443a357ac207861dd160887ec9d83de5242f55f9a5cbe3895bde26abdc600edf56c3ea7fe26e3cbde7af6823aa482ab74ae3fbfd1a5940bde127f679f6f1d1edb89d39752a6e93a4eab700c018c16bfa0064f852dc2d36cd635ce7f36") ptrace$cont(0x7, r0, 0x0, 0x0) 00:37:02 executing program 4 (fault-call:1 fault-nth:18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:02 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000240)=""/68) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x40400, 0x80000, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1429.314043] FAULT_INJECTION: forcing a failure. [ 1429.314043] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:37:02 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x440, 0xfffffffffffffffc}, &(0x7f0000000100)={0x1ff, 0xfffffffffffffffe, 0x20080000}, 0x0, 0x0) [ 1429.354577] CPU: 1 PID: 26874 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1429.362503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1429.372049] Call Trace: [ 1429.374656] dump_stack+0x13e/0x194 [ 1429.378312] should_fail.cold+0x10a/0x14b [ 1429.382488] __alloc_pages_nodemask+0x1bf/0x700 [ 1429.387178] ? save_trace+0x290/0x290 [ 1429.390991] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1429.396036] alloc_pages_current+0xe7/0x1e0 [ 1429.400384] kvm_coalesced_mmio_init+0x18/0x110 [ 1429.405081] kvm_dev_ioctl+0x4d1/0x1480 [ 1429.409082] ? kvm_put_kvm+0xa90/0xa90 [ 1429.412991] ? kvm_put_kvm+0xa90/0xa90 [ 1429.416894] do_vfs_ioctl+0x75a/0xfe0 [ 1429.420708] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1429.425483] ? ioctl_preallocate+0x1a0/0x1a0 [ 1429.429921] ? security_file_ioctl+0x76/0xb0 [ 1429.434343] ? security_file_ioctl+0x83/0xb0 [ 1429.438767] SyS_ioctl+0x7f/0xb0 [ 1429.442145] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1429.446160] do_syscall_64+0x1d5/0x640 [ 1429.450070] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1429.455268] RIP: 0033:0x45c479 [ 1429.458463] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1429.466187] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1429.473466] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1429.480745] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1429.488022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1429.495303] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000012 00:37:02 executing program 4 (fault-call:1 fault-nth:19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:02 executing program 5: r0 = socket(0x10, 0x803, 0x20) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0xa, &(0x7f0000000240)=[{0x0, 0x4, 0x2, 0x8}, {0x8, 0x40, 0x4, 0x1}, {0x5, 0xd5, 0xd4, 0x3}, {0xfff, 0x8, 0x64, 0xfba8}, {0x0, 0x0, 0xe9, 0xff}, {0xe3, 0x7, 0x0, 0x96c}, {0xfff, 0x1, 0x1, 0x7}, {0x4, 0x99, 0x80, 0x2}, {0x195, 0x5, 0x7, 0x20d5}, {0x4, 0x40, 0x2, 0x5}]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x3c) tkill(r7, 0xa) [ 1429.577787] FAULT_INJECTION: forcing a failure. [ 1429.577787] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.596341] CPU: 1 PID: 26885 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1429.604260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1429.613627] Call Trace: [ 1429.616265] dump_stack+0x13e/0x194 [ 1429.619935] should_fail.cold+0x10a/0x14b [ 1429.624103] should_failslab+0xd6/0x130 [ 1429.628086] kmem_cache_alloc+0x2b5/0x770 [ 1429.632252] ? __alloc_fd+0x1bf/0x490 [ 1429.636066] __d_alloc+0x2a/0x9b0 [ 1429.639599] anon_inode_getfile+0x101/0x2f0 [ 1429.643935] ? reverse_path_check_proc.cold+0x1a/0x1a [ 1429.649131] ? __alloc_fd+0x1bf/0x490 [ 1429.652952] kvm_dev_ioctl+0x517/0x1480 [ 1429.656944] ? kvm_put_kvm+0xa90/0xa90 [ 1429.660902] ? kvm_put_kvm+0xa90/0xa90 [ 1429.664813] do_vfs_ioctl+0x75a/0xfe0 [ 1429.668638] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1429.673414] ? ioctl_preallocate+0x1a0/0x1a0 [ 1429.677865] ? security_file_ioctl+0x76/0xb0 [ 1429.682286] ? security_file_ioctl+0x83/0xb0 [ 1429.686710] SyS_ioctl+0x7f/0xb0 [ 1429.690081] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1429.694064] do_syscall_64+0x1d5/0x640 [ 1429.697972] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1429.703167] RIP: 0033:0x45c479 [ 1429.706361] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1429.714076] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1429.721352] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1429.728630] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1429.735907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1429.743191] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000013 00:37:02 executing program 4 (fault-call:1 fault-nth:20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1429.890899] FAULT_INJECTION: forcing a failure. [ 1429.890899] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.910426] CPU: 0 PID: 26893 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1429.918355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1429.927717] Call Trace: [ 1429.930323] dump_stack+0x13e/0x194 [ 1429.933977] should_fail.cold+0x10a/0x14b [ 1429.938148] should_failslab+0xd6/0x130 [ 1429.942147] kmem_cache_alloc+0x2b5/0x770 [ 1429.946319] get_empty_filp+0x86/0x3e0 [ 1429.950220] alloc_file+0x23/0x440 [ 1429.953779] anon_inode_getfile+0x163/0x2f0 [ 1429.958117] ? reverse_path_check_proc.cold+0x1a/0x1a [ 1429.963407] ? __alloc_fd+0x1bf/0x490 [ 1429.967231] kvm_dev_ioctl+0x517/0x1480 [ 1429.971224] ? kvm_put_kvm+0xa90/0xa90 [ 1429.975127] ? kvm_put_kvm+0xa90/0xa90 [ 1429.979026] do_vfs_ioctl+0x75a/0xfe0 [ 1429.982837] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1429.987609] ? ioctl_preallocate+0x1a0/0x1a0 [ 1429.992045] ? security_file_ioctl+0x76/0xb0 [ 1429.996468] ? security_file_ioctl+0x83/0xb0 [ 1430.000895] SyS_ioctl+0x7f/0xb0 [ 1430.004273] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1430.008257] do_syscall_64+0x1d5/0x640 [ 1430.012164] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1430.017361] RIP: 0033:0x45c479 [ 1430.020553] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1430.028271] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1430.035551] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1430.042917] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1430.050200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1430.057479] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000014 00:37:02 executing program 4 (fault-call:1 fault-nth:21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1430.196765] FAULT_INJECTION: forcing a failure. [ 1430.196765] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.218251] CPU: 0 PID: 26897 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1430.226179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1430.235543] Call Trace: [ 1430.238149] dump_stack+0x13e/0x194 [ 1430.241800] should_fail.cold+0x10a/0x14b [ 1430.245971] should_failslab+0xd6/0x130 [ 1430.249960] kmem_cache_alloc+0x2b5/0x770 [ 1430.254119] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1430.259589] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1430.264623] selinux_file_alloc_security+0xaf/0x190 [ 1430.269660] security_file_alloc+0x66/0xa0 [ 1430.273976] ? selinux_is_enabled+0x5/0x50 [ 1430.278228] get_empty_filp+0x15c/0x3e0 [ 1430.282236] alloc_file+0x23/0x440 [ 1430.285816] anon_inode_getfile+0x163/0x2f0 [ 1430.290153] ? reverse_path_check_proc.cold+0x1a/0x1a [ 1430.295358] ? __alloc_fd+0x1bf/0x490 [ 1430.299181] kvm_dev_ioctl+0x517/0x1480 [ 1430.303174] ? kvm_put_kvm+0xa90/0xa90 [ 1430.307077] ? kvm_put_kvm+0xa90/0xa90 [ 1430.310976] do_vfs_ioctl+0x75a/0xfe0 [ 1430.314785] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1430.319554] ? ioctl_preallocate+0x1a0/0x1a0 [ 1430.323990] ? security_file_ioctl+0x76/0xb0 [ 1430.328427] ? security_file_ioctl+0x83/0xb0 [ 1430.332855] SyS_ioctl+0x7f/0xb0 [ 1430.336235] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1430.340224] do_syscall_64+0x1d5/0x640 [ 1430.344135] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1430.349331] RIP: 0033:0x45c479 [ 1430.352537] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1430.360359] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1430.367641] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1430.374924] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1430.382204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1430.389487] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000015 00:37:03 executing program 5: r0 = socket(0x10, 0x803, 0x20) r1 = dup(r0) getsockopt$inet6_buf(r1, 0x29, 0x3d, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x3, @ipv4={[], [], @multicast2}, 0x1}, @in={0x2, 0x4e20, @empty}], 0x2c) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000280)=@generic={0x2, 0x100000000, 0x7}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r4, 0xb84f22b}, &(0x7f0000000240)=0x8) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r7 = dup(r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r8}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r9, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:03 executing program 4 (fault-call:1 fault-nth:22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:03 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x189000) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1430.720580] FAULT_INJECTION: forcing a failure. [ 1430.720580] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.740385] CPU: 0 PID: 26905 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1430.748309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1430.757678] Call Trace: [ 1430.760283] dump_stack+0x13e/0x194 [ 1430.763931] should_fail.cold+0x10a/0x14b [ 1430.768095] should_failslab+0xd6/0x130 [ 1430.772078] kmem_cache_alloc+0x2b5/0x770 [ 1430.776236] ? __d_lookup+0x3b4/0x670 [ 1430.780045] ? mark_held_locks+0xa6/0xf0 [ 1430.784114] __d_alloc+0x2a/0x9b0 [ 1430.787593] d_alloc+0x46/0x250 [ 1430.790880] __lookup_hash+0x51/0x180 [ 1430.794688] lookup_one_len+0x27c/0x3a0 [ 1430.798669] ? __lookup_hash+0x180/0x180 [ 1430.802794] start_creating+0xa1/0x1c0 [ 1430.806695] debugfs_create_dir+0x1f/0x3a0 [ 1430.810939] kvm_dev_ioctl+0xadd/0x1480 [ 1430.814925] ? kvm_put_kvm+0xa90/0xa90 [ 1430.818828] ? kvm_put_kvm+0xa90/0xa90 [ 1430.822724] do_vfs_ioctl+0x75a/0xfe0 [ 1430.826534] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1430.831300] ? ioctl_preallocate+0x1a0/0x1a0 [ 1430.835732] ? security_file_ioctl+0x76/0xb0 [ 1430.840265] ? security_file_ioctl+0x83/0xb0 [ 1430.844699] SyS_ioctl+0x7f/0xb0 [ 1430.848088] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1430.852078] do_syscall_64+0x1d5/0x640 [ 1430.855985] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1430.861186] RIP: 0033:0x45c479 [ 1430.864379] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1430.872095] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1430.879372] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1430.886646] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1430.893918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1430.901196] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000016 00:37:03 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000001c0)={0x5, 0x5, 0xcc1, 0x1, 0xff}, 0x14) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x100, 0x70bd27, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'wg1\x00'}, 0x18) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@assoc={0x18, 0x117, 0x4, 0x3f}], 0x18}], 0x1, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc080661a, &(0x7f00000000c0)={{0x0, 0x0, @descriptor="8b44b56e2d714fff"}}) recvmsg(r6, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) tkill(r9, 0x3c) sendmsg$nl_netfilter(r8, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x2e8, 0x1, 0x8, 0x801, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x3}, [@typed={0x8, 0x55, 0x0, 0x0, @pid=r9}, @generic="92616f9474ed0503d548755d44721903a12cf7e41fd0afa5cf509af66d6e4132976029c4c96213865cedf4877246ccb29bd6ba41451e7dccb84769cefff482e4d8d32f453ae65146902c513177ce3c0f8e098a9b972f3b73d13446564c07c1e675e602504da268509ae9e9663c151475806abda7928794b8c051f49c0470246eee31ca272d0910f15b10471ab7b41378f38ae1a19976372bf487de9fb02a4c8adc825b93e5ea7bf1ad5a31", @nested={0x38, 0x88, 0x0, 0x1, [@typed={0x8, 0x8e, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x8c, 0x0, 0x0, @ipv4=@multicast1}, @typed={0xc, 0x3d, 0x0, 0x0, @u64=0x8}, @typed={0x4, 0x5e}, @typed={0x14, 0x30, 0x0, 0x0, @ipv6=@local}]}, @generic="d602e3d2bbf8722d6effefacc270839b245e59b55e64e5ec86469d3ceb1820ca818b110951173523458e3dcb0a9eeaf95cbae571450e307a52406de6100472fdd434a4044669107854b1f0dad94f76ffabf5f11a301cdb7391a922f679a277596b51ae60e13342db68ed8335e0368856a00e909578927cf832f2f3c8d6fede3f439efc942ad10be9632dab0d3b2549df5f8560f7b5d17b275b90f72801eca305fa28b7da3caf02b64fc14eb54f45ff0688387704c7698b3d610ec11574d026c91085b93e6e0255a07b6c331a7745a6be0d5955eec45fc6bfcaf4bc0dcc1ad25357f393cc7c3592e9d9f715ab7f2bbeb7c6", @typed={0xc, 0xc, 0x0, 0x0, @u64=0x5}, @generic="db3e7ee4a47f324e80968fb4bb7928afd763861dbfeb282b5ae3e9c5c2f915c6f62cf11945f220cc878c08e19284fd4d5a209e0a0aed3cda02129c11955dbd69d31d4bf22eab338619dc656e65ff185518fc69f6279b74d09c6c3bbe0a7399fbf4f0799238b704c32698a5995c783b01533031cd3848d72fb5cd405f4c1f022217f26587036b79bea664adb91f84611bc94d713bd9e858b090e60e548f1a46d7a788e123ad9f2acc07b60b773e9c2a632aac71f559025682352a35484f532ba1c79fb152f17a77223696de8dce5b971a71febff6f1a4ec91a109a90fcdec1769474ad5a7e1777f07340057"]}, 0x2e8}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) readv(r10, &(0x7f0000000480)=[{&(0x7f00000005c0)=""/213, 0xd5}, {0x0}, {&(0x7f00000000c0)=""/30, 0x1e}], 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') 00:37:05 executing program 5: socket(0x10, 0x803, 0x20) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r5 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) connect$tipc(r5, &(0x7f0000000240)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x5}}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:05 executing program 4 (fault-call:1 fault-nth:23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x402002, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) sendmsg$nl_netfilter(r0, &(0x7f0000001240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f0000000100)=ANY=[@ANYBLOB="f81000000509010425bd7000fedbdf25010000029ed04f98275601e8b1eac25b869b78de9d2cfd564467e2eb10106f9665268b21930defd6e369cc4e5958d565187f5540ae3eb9701be78a45536b655512c786a239548900758008003300", @ANYRES32=r1, @ANYBLOB="f179a14ec029a6bc779056ae18b00d36e3b419f9d0458cdd626bb7a49a3fc8bed48b41973e66fb995558681f2d8ae6fa0831c01264543767a7059785bcb2ccab03bd68e8086358c38bb632afea684471ccabc05f5c3e82d1683f0ddef8fb85946a67d303f136ba8157f4f69ecb4265aefa50c239f5a27a330b57c689d2000000141058800c002400ae9800000000000004108800ee1ced8a0e50bf71199577076037dd3d114f7e5ee84cfe1afb489d4ec23a67491ef3f78e1d0adf186a36e57a4d6209129bef02683c1787046056edde258aa1e7b2d0c54e06e243f3b3c53dccdc5310e37b056d2ff1e0df5c4c9ca249f8b2223b25e469acf72f93f3357bbea604c40d3fbbf0bf72aab29aedc7fa9b66bc824a8130fbd972675e0a8954aca724503daa056f8013ac709bb7255093909e75a391bb31d32e3d2399ae8a6354794a640ebe8d8f117849dea59fd3925992180934c629911f1393d30401aeb47692344e898577f96ad4331d04dfd081bf671b0bfefb8b5ce4850e400174a9e4b443b2471d58a5c0ba86f7967fe6d1342d3be4c6d27305375889b6dc479b5cb315674e91955e3e6e1dec83de2e3245f81595a5ffe470845d6ef85dd11f9920566940f7f63eeaa08604279651a438976d90eb05754f98093cf0f2606044cf3cc66fc620aa1bb78a7f009fc2322778cfa5dc6dc750f554e07a9924bf959db2dd1a45cb8f2e45900b77bc7e20455cc817a3065b4653511caa0e4e65d7109a00a0d177104cbfb352d2b222827658111a370d9201c1903371c52969517cc0b1304214a210e20ba5dd9e8e5fb6c53ca08b272bb215a2f120854fe43d292856158954ed8c2ad7a5e69631e135ba525c92d98cef4bb5f92fe7dedee019985e19180d10919424bb5373a50022e2a138dbeb053212cdbca70a0aa90ed870a5ee3c074b9292948a7967973ab2121651843b70b1032fb6069d0813ec52340de82fe88d288207320a382033efc84be6415d7a867a543c5a68396c1c34795a996742d85258181c1cd1cd97b4c6f775f03ff6b2ccf78e6738b7e1f29991641ce4ceff2e33663015f70c0c94b8ad25b7938dca968faefe6e4b9c2b2575334e8981a8a95d64b89a11b7a2ef979f60f7be5535d7619a05a2787089599c05cefc4a5fde14a116ecca9699435d9f0e7cdfb6ec09942de00383f70badf4d094c0a3ea581966ff60413fa3b0d3dbf103504f88f3e759ef68c72dbaa822b0661c2d39976f0536d9ed4e5ef3c508fad13e5ea421339a5fe42fd7d4511fc4d1897568868b1820b6c998381f50ba8493dbdbdeec24ad93ad2ec1ccd126a924893c1e657ac2eb55268e8be6bd09400634c85daa416e4d16361cbf4cacd0f5815eef2f5f08800caf57c5c1f434e091fec1be248d455701989f0abafe50fea71c3e4e28aaa3ce87487685e648c293f06adc443792a7fac2e3b26fb390d52957c92ca6b40e1665af8accb43615b325059c4164bde2c4398ef6f74166a1a88d7117e7bfd465d0bedeff508eeb1a05413aa3b1d16babaa6a12afd469819186ee552ee00f7c29c1aa461b4e253858c00118510abde837c7fe30ac6a83a96f90a57bc06edb91d4c75fd4b29aacc11be9b0310134cb9e29c03b580038a79f16b8b07085ba2a145200b4033e403d83bd368b175b645db1a11a9b2d09413b187c764979109a1c30c86b16fc527a4460a2018c7905b662c90eb02fbb1b3d056c6bff55685a1f41d8ee3e662aa189db1de12e4e08d16d6421422cc52817ba00d39965d9cfcd050d50b621d0d16830dabccd14a183e28def525861aa6b905c63d81b55abc3d9f704c63fc4b232e217a237fe771786d14fa6faf1687e9e1ba6002d91af1b68ddef997cd9ff960726aabe39dc92e88324e3de4d3b9e879f06a82a34928690ee4c964b62d0c78e3812dd07d0b28a7dfb62c298bda1e1553810b1ddd437c60b9e43777ff036c048a6d909cf3b448047476a580d3c88931c94ab1435b164935a398a9d3a999b741f196da14f9469ac51f3cd25c9a7f309edbd986c214006b542380c2cf81e548c73b49408a17d5720261c55029e6c7f505ffd5541e20c8d5daaae2a6cd38f03a52035f1f52a53cb5ec55e622b5d9f7d1072008a85b8b2f1334d12da5ae3cca7cd44e6dee05239f3ea1f5e62a9e0ec3ddace647f96f1a68ef4bdc60c1fab55cd1a4d00921ee74a952596b1f7a155af08ad12c868fed6eee4cf6d98e5c17f060372752ef6e067f561724019299c1326c230002ea63065bc89db3905c2730c89f10926cf158b8f72f72677fbcb91cddd09ca8972eb819098a5dbe146270877a7d30790e004c4e8f3875dcba8dfa83462b4704f3e9e1b7070e4d1f25e2e2a2c730c46721ce53aff4fb7a5cefeeb5b08e5440686ceedd723e11a580280d4dda1f2699e4f080cbda5790008cd9443c91430e553bc201f17b2100dfd9be68a31937333de2412980203fef63d8eabe3f50bfc503efe206e9994410c7bcf4a198d3fafa03113b040c70976e97c4aa977370c85e742fb4e271af8cfaf3c6430f87fd9a95753d621dec3f693a81a6dc37d6fe8ba06fdd6683d978b5249eb8df0d0397a43ee6ed8b351441cb81c32d73e0649e2c132c99a8ce8f6b4015a3b410e1f37ecc9489302685e80ed33d02b5e1b92b2c564eb9b75b62b7963abc7a2ea50f2cf570da1bcfd6c8a8db98f10bc61b396ce03690f52a6ac8605f279a3a2c5a99779240e614b7775e95d544c02cd5517420d77671293e678c40f6e91d647941b9436bed8acd33e98acf5a7d66c985465426d9a43d3bfd65fb9ea91dc400ca7110bc2b94af12ef99629ee53f6915445063e986d1c065073d026cdb36792507718481d8fa6706f586cc2be2efeed5d6f9c70e23533b88defac1c6207102b2cb556d56f5661115bf78f56c99750efd659b93296eb59f9b7512c62c1d084f152c9973050feec5f2632c85e68eb57b10e49ef1c2ed8f753606f62390af70dec6945b299e9168a8f77af786c3b30a8ec7a99a4b7002329a416f781ff50277c278ef16b3a3d07937e389b07d512c3f9d05e54e1f2477f5fbbb484666b607b9e5e7d55477416d407db84819c8ceefb53ece3bcef45ab9fe73f61791ea64f19de283cd2178a4e9768713863fc03538265b84d435fac6213c8a336462a1a3d8d4db14edf7b6dba146e4a649fdb24a1de183a0bb486b940256eba406c98b29a5e38c883b374306b0b7a63786d590b251c6a0d604f63745102d4acf73e4543e59f4857f0de437a12d59ed10895fc69c2db0819f9c0f920e9a03bb4ce7b16a609daa44d8abce4eac60a1f381ec9e92e66bfc6c27ffeac8d3b4c4f2a5e47a161f2a9f7d28059627d5cdd78296711b0294381e18a3612bceaa66efecd8ac5d792650adfe550aa922391a97b7d7a37d545f6e4cf9694526eda23f80e9055a1d99f61650de45d4f251b6d8b6ece9368d6aa871998d036bc5b9057d807d07510699341ef568f2df1dc273275e77a41cad89f9482ea09865764c950b28204e6ef8f7567fe4a08a29e352f036fb584a0a2d0b7d4cc9d091301764a712324c1f01025e1161b81bbffb54cffde4e86ba32b656f506e661061d9af581a8d21e0e4af131687ab7f3b2a27be4993229afa7eb90eb3bebbb0be1ab5521b01555a85da8674ee6fa9f1b14c00bccbcda339169ae64a504fa006bf89291fb7d58e31070acefefb6e2ce51173a9846ca1ce2bcbe83ca095f8ff19755411dc945b290960519132e123153ac0d408de72c40078059c41a1ca02ab5fab53e09dc290feaa332cea69a96157bd522602b82bed90f5834c31dff428ab8161b2e4d6b53f365dfcf3df6a2e1a295050116e85545a6e2677f7fed7da5c3e9dbd028d2a9dd4a5c19fe71c3ca28c610a979faf292a2d1e331bba0edc5a23961cfa85c84917daf632a6a08060d3133722a1b5f5a768c1f78fea9428d9d13dc6a076578effaf79fc58ee833505da50fe50e9dd8342544191143567146f585eadf6f40f5022846adfacce5ee15aa28c8386d59c026c3dbc584a00dfc848befc413d927c846c50de149eed1d646163f6332c8efac06c16688d24689dd05fa15d34cdcb2669d0c98cdf18eb3fdc90eefffd84887348497db1a51619e9a157df0ed396ca6ce39add1cc7cbc4ed4dac1267bce03857223f4a2332f22c1fbb8d50055db3d54200db8be0a283ab67c647ef2eb828b967591cac8306c8e46e0ee1fe562841f3c14d2d3fbb4a4aff2455680e2b0a2cf2c7abbf63a86c6d994364708c10c95a73dcb69cdb69adf73875c7a8c260746452cf7819ffe081d31bed2dfb1944acb4260d7bbebce64274874baac20de0333f9355754162c6d8740cfb20beff128f9ee95f53dfe75f79b162a4601bc5c8434e812df2b322bb6627f6d87becc7ef46642815b367134ffe945911d2265a20b46cfd9dc1546a35c670320882d3c1d25c538e58aa1886a39a7e1917b0f6d74ccc6ff7e2d4a373ec17c997a44e804faaa0bb9f4dd5535ad31c3af0a06e9fb788f094e2cb19bf688045de56ab379dfbb27e6c796166ea04c85449fceb0eb6eb7cfa7f278ec67d7d5a0c7e7be8185c40ee483d8ccb33fd67d58c772a85a0e0051380e9160cafcfe140334fe730c62f7ab98aa580e3657e4052429f8a83bd0dd1e3ce1b807694e27a6c6f31436a45cbc17df1e62747963d49363e8ec6fb474c054294fcc58492d0092b0cca6c8623751e3c8df032207003161888785b1937c33b502d172e98888e0d0582957b6170ba4f6be53dd449670a8e18fe1cc877395effff01f82a2dcd2c390adfe92881eba36420d12ab48c8d70de669ea4f3670e5d34b023462111aafe5a27b7dfe53d7709458543c07f5815591e4398e62878fee11cc3318657a1aa031fb31d1d0ab8f92d9c08c6830177376a8d7d1f22fbcb1c9b843eeefd6739dd8d5291fccce7cd4ab004204ab595915f9ffa4c62f7be5879074c3e72c0b0c514b1af1ceba660cbdd8ffee8ba5b5609a78cdcb90bf83d24ecd89727a9c2fcb312af9183447ebf46010d133fa7a35d815210d32cf01a9909b234ea89a6ab5d805442b05fff22fcd5dd45a22d8498ce12b1c28b43760bfec1fe3190186970c7edefd3ab827621bbbf89c3d3f4ba90f3e52553e7bafcbb0b331a432ab3c0380d4c6356eb1ffc1a09f67242a39cb337f595dc7a128b7f6724d343e9939750647039ddf047a6da9ba02425fd7fb45f1ca584f1924dc3d91a7445494cd198d3c4ee620b3814746b8fbea455c6d05337599c0b08cd530e47763edcef535e4065b420d2cba1a043fd412b8e9ede7de0827d5611526420fd0005d498b4120cd09032987a34c38c12160a9bfcd8b8a1fcfa120e86287f84cb47ec56df6b9508ef7d9d266fb9000d1297629364c2d89b05941324639d2777f5dd3169ce0cfc7a0daedf22240ecf7adf9b7bf2b165f32322b73366817dcc284cd719a89db5e26933169aa56dd29302be935d4cb4e178eb2acdea542d5c2035fe2200a568cd6ba7a2103b1788d79fb046ec4025410edbc11ca9f77fa379ac8d299ec31541427785489988cc8865d5952f45ebed4848522611979294f03cf418d01f35b4d7e7615dacdb8db52e02fe97d069548bf4ff88a8b6d6a81e457c995112813406f7f355c5e24b5177593731c832e77ff81a8043842f7b2a40ae439a083ee8e0a839ebc39ea136b38f010fbc8be8cce5335b9209a750911f8abdd3430725083e738aede57bd37341b3b8893822a1e852954ffcf7adcf728f145dda368d1c45932db000570779f30b5d01e0efb974c2b50ea47e011cb4b3347081c3f91bedc749c46bb8b23195f368088b432cd913f337e5762da4cb138e6ca45ceabf5c1ea6c082299d789084edca9d76dcfdb37a6cd156a665d09b5f457dcc6999aaccb0618549d785e96577b7f777d3f63a0c8c4c8b98e296e49519d1579b7e5af1290b2b44adeb79e87a8f925f7070000"], 0x10f8}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001280)='/dev/nvme-fabrics\x00', 0x101000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000012c0)={0x1}, 0x1) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r2, 0x0, 0x0) [ 1432.348388] FAULT_INJECTION: forcing a failure. [ 1432.348388] name failslab, interval 1, probability 0, space 0, times 0 [ 1432.394451] CPU: 0 PID: 26925 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1432.402361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1432.411932] Call Trace: [ 1432.414544] dump_stack+0x13e/0x194 [ 1432.418192] should_fail.cold+0x10a/0x14b [ 1432.422361] should_failslab+0xd6/0x130 [ 1432.426346] kmem_cache_alloc+0x2b5/0x770 [ 1432.430504] ? lookup_one_len+0x284/0x3a0 [ 1432.434668] alloc_inode+0xa0/0x170 [ 1432.438300] new_inode_pseudo+0x14/0xe0 [ 1432.442289] new_inode+0x1b/0x40 [ 1432.445665] debugfs_get_inode+0x1a/0x130 [ 1432.449825] debugfs_create_dir+0x63/0x3a0 [ 1432.454069] kvm_dev_ioctl+0xadd/0x1480 [ 1432.458054] ? kvm_put_kvm+0xa90/0xa90 [ 1432.461952] ? kvm_put_kvm+0xa90/0xa90 [ 1432.465844] do_vfs_ioctl+0x75a/0xfe0 [ 1432.469652] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1432.474414] ? ioctl_preallocate+0x1a0/0x1a0 [ 1432.478842] ? security_file_ioctl+0x76/0xb0 [ 1432.483259] ? security_file_ioctl+0x83/0xb0 [ 1432.487688] SyS_ioctl+0x7f/0xb0 [ 1432.491061] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1432.495045] do_syscall_64+0x1d5/0x640 [ 1432.498951] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1432.504151] RIP: 0033:0x45c479 [ 1432.507439] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1432.515153] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1432.522515] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1432.529793] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1432.537069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 00:37:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)={0x3b, 0x401, 0x1, "2a807fe0daf824d4c2e3b014a947fad0198e03b8c11dc6c989d61ca6d5bbdd83f43959e899f64161bd15e209ccb1b522931d08809446e4939becef"}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001340)='/dev/nvram\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000001380)={{0x1f, 0x40}, 'port1\x00', 0x48, 0x8, 0x3, 0x3, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x49, @buffer={0x0, 0x8e, &(0x7f0000000100)=""/142}, 0xfffffffffffffffe, &(0x7f00000001c0)=""/52, 0x1f, 0x15, 0x2, &(0x7f0000000200)}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSSERIAL(r7, 0x541e, &(0x7f00000012c0)={0x5bb, 0x1, 0x0, 0xffffffff, 0x8, 0x7, 0x3f, 0xa6, 0x326e, 0x80, 0x49, 0x90d, 0x3, 0x800, &(0x7f00000002c0)=""/4096, 0x3, 0x1000, 0x1f}) [ 1432.544342] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000017 00:37:05 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040)={r9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={r9, 0x68, "d5a10c22936d06f7a6112668c9aa356035d185dc4a6f98b3618a6794757989522f2d77e653199089bc54e5f4536090843a9a6a730829e43e0080c7088ac2983daa71878e520a944abfc5772f3e659f8dd15c4d4567b752847769497118921075d1b66ab9652ba242"}, &(0x7f00000001c0)=0x70) getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r10, &(0x7f0000000300)=0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r11, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000001c0)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc10c5541, &(0x7f0000000340)={r4, 0x80000}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000200)) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x185803, 0x0) ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x7fffffff}) ioctl$EVIOCGKEYCODE(r10, 0x80084504, &(0x7f0000000240)=""/195) dup2(r8, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) connect$x25(0xffffffffffffffff, &(0x7f00000001c0)={0x9, @null=' \x00'}, 0x12) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000340)=@v2={0x2, @adiantum, 0x3, [], "fa9ee177ba9cb1757f889b0ed2feb9ff"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x100}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000300)={r6, 0xd5}, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x2}, 0x0, 0x4000000000, 0x7}, 0x0, 0x0, r3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r7, r0) select(0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1ffffffff}, &(0x7f0000000100)={0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) 00:37:05 executing program 4 (fault-call:1 fault-nth:24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xed5, 0x0, 0x400, 0x4, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f00000001c0)={0x2a, 0xfffffff8, 0xc, 0x6, 0xfffffffa}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x6c, 0x3, 0x8, 0xffff, r1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x7f}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSBRK(r5, 0x5427) [ 1432.953879] FAULT_INJECTION: forcing a failure. [ 1432.953879] name failslab, interval 1, probability 0, space 0, times 0 [ 1432.966557] CPU: 0 PID: 26950 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1432.974464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1432.983823] Call Trace: [ 1432.986427] dump_stack+0x13e/0x194 [ 1432.990072] should_fail.cold+0x10a/0x14b [ 1432.994236] should_failslab+0xd6/0x130 [ 1432.998224] kmem_cache_alloc+0x2b5/0x770 [ 1433.002388] ? alloc_inode+0xa0/0x170 [ 1433.006200] selinux_inode_alloc_security+0xb1/0x2a0 [ 1433.011344] security_inode_alloc+0x8f/0xd0 [ 1433.015783] inode_init_always+0x549/0xaf0 [ 1433.020031] alloc_inode+0x7a/0x170 [ 1433.023665] new_inode_pseudo+0x14/0xe0 [ 1433.027681] new_inode+0x1b/0x40 [ 1433.031063] debugfs_get_inode+0x1a/0x130 [ 1433.035238] debugfs_create_dir+0x63/0x3a0 [ 1433.039488] kvm_dev_ioctl+0xadd/0x1480 [ 1433.043481] ? kvm_put_kvm+0xa90/0xa90 [ 1433.047385] ? kvm_put_kvm+0xa90/0xa90 [ 1433.051286] do_vfs_ioctl+0x75a/0xfe0 [ 1433.055098] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1433.059870] ? ioctl_preallocate+0x1a0/0x1a0 [ 1433.064298] ? security_file_ioctl+0x76/0xb0 [ 1433.068724] ? security_file_ioctl+0x83/0xb0 [ 1433.073167] SyS_ioctl+0x7f/0xb0 [ 1433.076549] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1433.080535] do_syscall_64+0x1d5/0x640 [ 1433.084435] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1433.089637] RIP: 0033:0x45c479 [ 1433.092827] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:37:05 executing program 4 (fault-call:1 fault-nth:25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1433.100545] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1433.107822] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1433.115101] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1433.122386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1433.129668] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000018 00:37:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x5d}, r1, 0x4, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) [ 1433.225438] FAULT_INJECTION: forcing a failure. [ 1433.225438] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1433.239651] CPU: 0 PID: 26958 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1433.247563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1433.256927] Call Trace: [ 1433.259536] dump_stack+0x13e/0x194 [ 1433.263193] should_fail.cold+0x10a/0x14b [ 1433.267359] __alloc_pages_nodemask+0x1bf/0x700 [ 1433.272049] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1433.277083] ? inode_doinit_with_dentry+0x735/0xe30 [ 1433.282170] ? lockref_get+0x11/0x50 [ 1433.285898] alloc_pages_current+0xe7/0x1e0 [ 1433.290299] __get_free_pages+0xb/0x40 [ 1433.294197] inode_doinit_with_dentry+0x7b6/0xe30 [ 1433.299060] ? selinux_cred_free+0x70/0x70 [ 1433.303308] ? put_itimerspec64+0x190/0x190 [ 1433.307648] selinux_d_instantiate+0x23/0x30 [ 1433.312072] security_d_instantiate+0x54/0xd0 [ 1433.316682] d_instantiate+0x5a/0x90 [ 1433.320411] debugfs_create_dir+0x10a/0x3a0 00:37:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readlinkat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=""/88, 0x58) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001300)='/selinux/enforce\x00', 0x101001, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000016c0)={0x6, {{0x2, 0x4e20, @multicast1}}, 0x0, 0x5, [{{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e23, @remote}}]}, 0x310) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000001340)=ANY=[@ANYRES32=r7, @ANYBLOB="0500070076006d6a92c5fe14e62308000000"], &(0x7f00000015c0)=0x16) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000013c0)=@assoc_id=r8, &(0x7f0000001400)=0x4) r9 = openat$random(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/urandom\x00', 0x900, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r5, 0x400443c9, &(0x7f00000014c0)={@none, 0xe30e}) read(r9, &(0x7f0000000300)=""/4096, 0x1000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001380)='/proc/self/net/pfkey\x00', 0x300, 0x0) ioctl$RTC_SET_TIME(r11, 0x4024700a, &(0x7f0000001480)={0xa, 0x11, 0xe, 0x1d, 0x5, 0x36df, 0x0, 0xc7}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001540)={&(0x7f0000001600)=ANY=[@ANYBLOB="a0000000020103000000000000000000000000047000068014000400a88285c8688b0d41ef1b48384e3b4e7c14000380060002004e210000060001004e200000140005006b1d0e05b9cc6b642ced3d2c0dca3dcd080001000000ffff7f000001140004007073e6b2de42a713505366ff51bcc08f1c0002010100008009000000000000000c00027af76258000000000000000000150000000000000000000000262fbcd87b4426b8a963efd869ca594fafd9"], 0xa0}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4040011) r12 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r12}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r13}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r14, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1433.324745] kvm_dev_ioctl+0xadd/0x1480 [ 1433.328736] ? kvm_put_kvm+0xa90/0xa90 [ 1433.332648] ? kvm_put_kvm+0xa90/0xa90 [ 1433.336553] do_vfs_ioctl+0x75a/0xfe0 [ 1433.340375] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1433.345147] ? ioctl_preallocate+0x1a0/0x1a0 [ 1433.349585] ? security_file_ioctl+0x76/0xb0 [ 1433.354009] ? security_file_ioctl+0x83/0xb0 [ 1433.358434] SyS_ioctl+0x7f/0xb0 [ 1433.361814] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1433.365802] do_syscall_64+0x1d5/0x640 [ 1433.369711] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1433.374906] RIP: 0033:0x45c479 [ 1433.378101] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1433.385824] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1433.393132] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1433.400416] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1433.407700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1433.414980] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000019 00:37:06 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3a5dbbbc, 0x6e85}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:06 executing program 4 (fault-call:1 fault-nth:26): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:06 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x44482) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x301a40, 0x0) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000240)={0x1, 0xff, "04ba38", 0x4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1433.601465] FAULT_INJECTION: forcing a failure. [ 1433.601465] name failslab, interval 1, probability 0, space 0, times 0 [ 1433.627764] CPU: 0 PID: 26975 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1433.635698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1433.645061] Call Trace: [ 1433.647670] dump_stack+0x13e/0x194 [ 1433.651320] should_fail.cold+0x10a/0x14b [ 1433.655493] should_failslab+0xd6/0x130 [ 1433.659491] __kmalloc+0x2e9/0x7c0 [ 1433.663045] ? do_raw_spin_unlock+0x164/0x250 [ 1433.667552] ? kvm_dev_ioctl+0xb47/0x1480 [ 1433.671717] ? up_write+0x17/0x60 [ 1433.675199] kvm_dev_ioctl+0xb47/0x1480 [ 1433.679199] ? kvm_put_kvm+0xa90/0xa90 [ 1433.683112] ? kvm_put_kvm+0xa90/0xa90 [ 1433.687014] do_vfs_ioctl+0x75a/0xfe0 [ 1433.690823] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1433.695594] ? ioctl_preallocate+0x1a0/0x1a0 [ 1433.700026] ? security_file_ioctl+0x76/0xb0 [ 1433.704444] ? security_file_ioctl+0x83/0xb0 [ 1433.708868] SyS_ioctl+0x7f/0xb0 [ 1433.712249] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1433.716244] do_syscall_64+0x1d5/0x640 [ 1433.720153] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1433.725346] RIP: 0033:0x45c479 [ 1433.728542] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1433.736260] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1433.743539] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1433.750819] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1433.758100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1433.765382] R13: 0000000000000390 R14: 00000000004c5c71 R15: 000000000000001a 00:37:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000080)={0xbc37, 0x4, 0x4, 0x4000000, 0xffff, {0x77359400}, {0x5, 0x0, 0x2, 0x1f, 0x0, 0x1f, "a8e753cd"}, 0x100, 0x2, @offset=0x2, 0x20, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x2a, "cd469d335c44e8073ea5529c25b5f40a9f62330937a50d5235dbbe8cf2a416aeba105aa88f29efad0b8d"}, &(0x7f0000000140)=0x32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e23, 0x3f, @rand_addr="b7db8b6efad8f468f882c3b392401838", 0x5}}, 0x100, 0x235}, &(0x7f0000000240)=0x90) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x2000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x181) 00:37:08 executing program 5: r0 = socket(0x10, 0x803, 0x20) socket$tipc(0x1e, 0x2, 0x0) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080)={0x100000001}, &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:08 executing program 4 (fault-call:1 fault-nth:27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x2, 0x3, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xbba, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2e}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x23}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x23}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x18}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0xc880) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$cgroup_subtree(r6, &(0x7f0000000380)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r7}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r8) ioctl$sock_inet_SIOCGARP(r8, 0x8954, &(0x7f00000003c0)={{0x2, 0x4e24, @local}, {0x6, @multicast}, 0x6, {0x2, 0x4e21, @remote}, 'geneve1\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r9, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1435.676744] FAULT_INJECTION: forcing a failure. [ 1435.676744] name failslab, interval 1, probability 0, space 0, times 0 00:37:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xbe}, &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1435.718088] CPU: 0 PID: 26995 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1435.726020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1435.735387] Call Trace: [ 1435.738005] dump_stack+0x13e/0x194 [ 1435.741658] should_fail.cold+0x10a/0x14b [ 1435.745830] should_failslab+0xd6/0x130 [ 1435.749828] kmem_cache_alloc_trace+0x2db/0x7b0 [ 1435.754508] ? kvm_dev_ioctl+0xb47/0x1480 [ 1435.758675] ? up_write+0x17/0x60 [ 1435.762158] kvm_dev_ioctl+0xdc4/0x1480 [ 1435.766152] ? kvm_put_kvm+0xa90/0xa90 [ 1435.770057] ? kvm_put_kvm+0xa90/0xa90 [ 1435.773973] do_vfs_ioctl+0x75a/0xfe0 [ 1435.777900] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1435.782678] ? ioctl_preallocate+0x1a0/0x1a0 [ 1435.787117] ? security_file_ioctl+0x76/0xb0 [ 1435.791653] ? security_file_ioctl+0x83/0xb0 [ 1435.796079] SyS_ioctl+0x7f/0xb0 [ 1435.799464] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1435.803462] do_syscall_64+0x1d5/0x640 [ 1435.807372] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1435.812669] RIP: 0033:0x45c479 [ 1435.815860] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1435.823594] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1435.830875] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1435.838156] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1435.845524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1435.852893] R13: 0000000000000390 R14: 00000000004c5c71 R15: 000000000000001b 00:37:08 executing program 4 (fault-call:1 fault-nth:28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc080661a, &(0x7f00000002c0)={{0x3, 0x0, @descriptor="e82097b847a3931b"}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='/dev/ion\x00') ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r8, r0) select(0x40, &(0x7f0000000080)={0x187e, 0x60c, 0x0, 0x0, 0x1, 0x3}, &(0x7f0000000100)={0x1000, 0x0, 0x1, 0x0, 0x7fff, 0x3, 0x0, 0x1}, 0x0, 0x0) 00:37:08 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) waitid(0x2, r1, &(0x7f0000000240), 0x1000000, 0xfffffffffffffffe) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1435.964071] FAULT_INJECTION: forcing a failure. [ 1435.964071] name failslab, interval 1, probability 0, space 0, times 0 [ 1435.975559] CPU: 0 PID: 27007 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1435.983471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1435.992833] Call Trace: [ 1435.995443] dump_stack+0x13e/0x194 [ 1435.999091] should_fail.cold+0x10a/0x14b [ 1436.003256] should_failslab+0xd6/0x130 [ 1436.007245] kmem_cache_alloc+0x2b5/0x770 [ 1436.011407] ? __d_lookup+0x3b4/0x670 [ 1436.015222] ? mark_held_locks+0xa6/0xf0 [ 1436.019293] __d_alloc+0x2a/0x9b0 [ 1436.022758] d_alloc+0x46/0x250 [ 1436.026048] __lookup_hash+0x51/0x180 [ 1436.029859] lookup_one_len+0x27c/0x3a0 [ 1436.033840] ? __lookup_hash+0x180/0x180 [ 1436.037917] start_creating+0xa1/0x1c0 [ 1436.041957] __debugfs_create_file+0x4f/0x3c0 [ 1436.046469] ? debugfs_create_file+0x37/0x60 [ 1436.050901] kvm_dev_ioctl+0xd71/0x1480 [ 1436.054911] ? kvm_put_kvm+0xa90/0xa90 [ 1436.058819] ? kvm_put_kvm+0xa90/0xa90 [ 1436.062722] do_vfs_ioctl+0x75a/0xfe0 [ 1436.066535] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1436.071305] ? ioctl_preallocate+0x1a0/0x1a0 [ 1436.075745] ? security_file_ioctl+0x76/0xb0 [ 1436.080192] ? security_file_ioctl+0x83/0xb0 [ 1436.084609] SyS_ioctl+0x7f/0xb0 [ 1436.087986] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1436.091978] do_syscall_64+0x1d5/0x640 [ 1436.095900] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1436.101096] RIP: 0033:0x45c479 [ 1436.104286] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1436.112002] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1436.119287] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1436.126567] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1436.133846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1436.141132] R13: 0000000000000390 R14: 00000000004c5c71 R15: 000000000000001c 00:37:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(0xffffffffffffffff) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'io'}, {0x2b, 'io'}, {0x2d, 'cpu'}, {0x2d, 'cpu'}]}, 0x12) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r6, r0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x200000000001, 0x0, 0x800}, 0x0, 0x0) 00:37:09 executing program 5: r0 = socket(0x10, 0x803, 0x20) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) iopl(0x2) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)={0x20000000, 0x3, 0x4, 0x2000, 0x0, {}, {0x3, 0x1, 0x4, 0x40, 0x77, 0x6, "0e01178b"}, 0x800, 0x3, @planes=&(0x7f0000000240)={0x1a, 0x4, @mem_offset=0x2, 0x20}, 0xd1, 0x0, r1}) sendmsg$AUDIT_ADD_RULE(r8, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000340)=ANY=[@ANYBLOB="a4040000f30300082dbd7000fbdbdf25020000000000000018000000e8020000000000809d0500000900000004000000000000000000000000000000f78cffff09000000e900000000020000feffffff09000000050000000500000000800000000000000800000003000000030000000004000008000000fa0d0000bc0a00009209000002000000b6090000c90700002c000000080000000008000000000000ff0f00000080000005000000e1ddffff060000000000000007000000090000000100000009000000aa00000062000000f4000000200000003f00000001000080acf0ffff000000004b070000060000000200000005000000010000000500000006000000400000000100000007000000e6f0ffffb7000000ffffff7f008000000500000003000000fcffffff755300000500000008000000060000005bbf0000af000000080000000400000006000000ff7f000007000000000000000900000001000080001000000100000000000000090000000400000008000000070000002f000000da09000004000000010100000000f80f3f0000000004000005000000000000000900000074e5000007000000020000000900000001000000fbffffff080000007f000000010000000001000001000000030000001f000000ff030000d30000008f000000ff7f00000200000040000000010000005a090000a503000005000000c0ffffffbf00000067ed0000a5820000b90000000400000002000000ff03000003000000f9ffffff2a0e00000400000000000000018000000600000001000100020000001000000000020000010001000800000008000000ff03000007000000000100008100000009000000f10200000200000003000000ff0f0000010000000000ec00050000008c070000d1000000050000000800000001000000010000000080000008000000008000000800000004000000050000000100000007000000070000000100000002000000cf0600001f0000000400000008000000060000000800000008000000ff0100001f000000020000000100000007000000020000005647ffff0700000081ffffff05000000040000000300000005000000f600000000000100feffffff0600000001000080ff0f00000100000000000080765a00000002000003000000f5000000460000004a01000002000000000100001e000000eeb50000070000000500000020000000060000000300000000010000ffff000003000000ff0700000100000006000000000000000100000001800000ff010000008000000600000001000000ff00000008000000460f0000040000006c00000006000000a7ffffff000000000800000008000000000000800100000004000000070000000000010008000000040000008707000003000000f3030000a3ea0000050000000800000003000000030000000100000001000000830000002f6465762f6472692f6361726423003a7b2b002f6465762f6472692f636172642300002447504c2c002f6465762f6472692f6361726423002f6465762f6472692f6361726474656d6c00a9706f7369785f61636c5f6163636573732e5b2e706f7369785f61636c5f61636365737373656c696e757876626f786e6574310000"], 0x4a4}, 0x1, 0x0, 0x0, 0x80}, 0x48800) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$VHOST_VSOCK_SET_GUEST_CID(r10, 0x4008af60, &(0x7f00000001c0)={@host}) 00:37:09 executing program 4 (fault-call:1 fault-nth:29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1436.290769] FAULT_INJECTION: forcing a failure. [ 1436.290769] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.308024] CPU: 0 PID: 27020 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1436.315952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1436.325314] Call Trace: [ 1436.327914] dump_stack+0x13e/0x194 [ 1436.331568] should_fail.cold+0x10a/0x14b [ 1436.335739] should_failslab+0xd6/0x130 [ 1436.339729] kmem_cache_alloc+0x2b5/0x770 [ 1436.343895] ? lookup_one_len+0x284/0x3a0 [ 1436.348059] alloc_inode+0xa0/0x170 [ 1436.351699] new_inode_pseudo+0x14/0xe0 [ 1436.355690] new_inode+0x1b/0x40 [ 1436.359066] debugfs_get_inode+0x1a/0x130 [ 1436.363228] __debugfs_create_file+0x93/0x3c0 [ 1436.367740] ? debugfs_create_file+0x37/0x60 [ 1436.372163] kvm_dev_ioctl+0xd71/0x1480 [ 1436.376158] ? kvm_put_kvm+0xa90/0xa90 [ 1436.380064] ? kvm_put_kvm+0xa90/0xa90 [ 1436.383961] do_vfs_ioctl+0x75a/0xfe0 [ 1436.387771] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1436.392543] ? ioctl_preallocate+0x1a0/0x1a0 [ 1436.396975] ? security_file_ioctl+0x76/0xb0 [ 1436.401398] ? security_file_ioctl+0x83/0xb0 [ 1436.405859] SyS_ioctl+0x7f/0xb0 [ 1436.409240] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1436.413229] do_syscall_64+0x1d5/0x640 [ 1436.417143] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1436.422343] RIP: 0033:0x45c479 [ 1436.425539] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1436.433256] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1436.440535] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1436.447812] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1436.455098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1436.462379] R13: 0000000000000390 R14: 00000000004c5c71 R15: 000000000000001d 00:37:11 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000080)=0x401, 0x4) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:37:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) 00:37:11 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x40440) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @default, @rose={'rose', 0x0}, 0x0, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}) 00:37:11 executing program 4 (fault-call:1 fault-nth:30): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1438.697779] FAULT_INJECTION: forcing a failure. [ 1438.697779] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.731804] CPU: 0 PID: 27042 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1438.739736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1438.749093] Call Trace: [ 1438.751694] dump_stack+0x13e/0x194 [ 1438.755338] should_fail.cold+0x10a/0x14b [ 1438.759501] should_failslab+0xd6/0x130 [ 1438.763484] kmem_cache_alloc+0x2b5/0x770 [ 1438.767644] ? alloc_inode+0xa0/0x170 [ 1438.771460] selinux_inode_alloc_security+0xb1/0x2a0 [ 1438.776579] security_inode_alloc+0x8f/0xd0 [ 1438.780915] inode_init_always+0x549/0xaf0 [ 1438.785168] alloc_inode+0x7a/0x170 [ 1438.788812] new_inode_pseudo+0x14/0xe0 [ 1438.792800] new_inode+0x1b/0x40 [ 1438.796177] debugfs_get_inode+0x1a/0x130 [ 1438.800340] __debugfs_create_file+0x93/0x3c0 [ 1438.805466] ? debugfs_create_file+0x37/0x60 [ 1438.809891] kvm_dev_ioctl+0xd71/0x1480 [ 1438.813892] ? kvm_put_kvm+0xa90/0xa90 [ 1438.817801] ? kvm_put_kvm+0xa90/0xa90 [ 1438.821709] do_vfs_ioctl+0x75a/0xfe0 [ 1438.825527] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1438.830298] ? ioctl_preallocate+0x1a0/0x1a0 [ 1438.834731] ? security_file_ioctl+0x76/0xb0 [ 1438.839156] ? security_file_ioctl+0x83/0xb0 [ 1438.843584] SyS_ioctl+0x7f/0xb0 [ 1438.846964] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1438.850956] do_syscall_64+0x1d5/0x640 [ 1438.854859] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1438.860060] RIP: 0033:0x45c479 [ 1438.863255] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1438.870975] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1438.878258] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1438.885537] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1438.892815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1438.900094] R13: 0000000000000390 R14: 00000000004c5c71 R15: 000000000000001e 00:37:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:11 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r7 = accept4(r6, &(0x7f00000007c0)=@isdn, &(0x7f0000000840)=0x80, 0x80000) sendmsg$AUDIT_TRIM(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x10, 0x3f6, 0x800, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x41000}, 0x40a0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r10 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000240)=r10, 0x4) 00:37:11 executing program 4 (fault-call:1 fault-nth:31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:11 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000240)={0x8, 0x5, 0x8, 0x3, [], [], [], 0x2, 0x1, 0x20, 0x3, "94f667925f07b57a0a2ed9890f1136b3"}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1439.058535] FAULT_INJECTION: forcing a failure. [ 1439.058535] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1439.086577] CPU: 0 PID: 27064 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1439.094504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1439.103871] Call Trace: [ 1439.106647] dump_stack+0x13e/0x194 [ 1439.110309] should_fail.cold+0x10a/0x14b [ 1439.114476] __alloc_pages_nodemask+0x1bf/0x700 [ 1439.119162] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1439.124192] ? inode_doinit_with_dentry+0x735/0xe30 [ 1439.129225] ? lockref_get+0x11/0x50 [ 1439.132956] alloc_pages_current+0xe7/0x1e0 [ 1439.137312] __get_free_pages+0xb/0x40 [ 1439.141216] inode_doinit_with_dentry+0x7b6/0xe30 [ 1439.146078] ? selinux_cred_free+0x70/0x70 [ 1439.150329] ? put_itimerspec64+0x190/0x190 [ 1439.154668] selinux_d_instantiate+0x23/0x30 [ 1439.159113] security_d_instantiate+0x54/0xd0 [ 1439.163628] d_instantiate+0x5a/0x90 [ 1439.167358] __debugfs_create_file+0x15b/0x3c0 [ 1439.171953] ? debugfs_create_file+0x37/0x60 [ 1439.176380] kvm_dev_ioctl+0xd71/0x1480 [ 1439.180377] ? kvm_put_kvm+0xa90/0xa90 [ 1439.184280] ? kvm_put_kvm+0xa90/0xa90 [ 1439.188186] do_vfs_ioctl+0x75a/0xfe0 [ 1439.192004] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1439.196781] ? ioctl_preallocate+0x1a0/0x1a0 [ 1439.201215] ? security_file_ioctl+0x76/0xb0 [ 1439.205639] ? security_file_ioctl+0x83/0xb0 [ 1439.210066] SyS_ioctl+0x7f/0xb0 [ 1439.213444] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1439.217437] do_syscall_64+0x1d5/0x640 [ 1439.221344] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1439.226542] RIP: 0033:0x45c479 [ 1439.229731] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1439.237552] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1439.244830] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1439.252110] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1439.259391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1439.266671] R13: 0000000000000390 R14: 00000000004c5c71 R15: 000000000000001f 00:37:12 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$llc(r2, &(0x7f00000001c0), &(0x7f0000000240)=0x10) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r7}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000480)={0x1, 0x5, 0xffffff81, 0x2583d59, 0x1, 0x80, 0x8}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup2(r7, r0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000440)={'wg0\x00', 0x200}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = gettid() ptrace$setopts(0x4206, r11, 0x0, 0x0) tkill(r11, 0x3c) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r13) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000280)={0xffffff81, 0x0, {r11}, {r13}, 0x1, 0x6}) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x85, &(0x7f00000002c0)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0xe00}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@uid_eq={'uid', 0x3d, r14}}, {@audit='audit'}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:12 executing program 5: r0 = socket(0x10, 0x803, 0x20) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, 0x3, 0x4, 0x2, &(0x7f0000ffa000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:14 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x7, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)={0xa, {0x3, 0x6, 0x9}}, 0xa) 00:37:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x2, 0x0, 0x0, 0x3, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000004c0)={0x2000000, r3, 0x10003, 0x8}) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0xb6080, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="00022cd7700050affe5a08000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f0000000180)={0x8, &(0x7f0000000080)=[{}, {0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000002c0)={r8, &(0x7f00000001c0)=""/197}) 00:37:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000001c0)={0x40, 0xff94, 0x9292}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5a}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:14 executing program 4 (fault-call:1 fault-nth:32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000003c0)='/dev/dri/card#\x00', 0xa70, 0xc2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000640)={0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000440)={r7, 0x0, 0x3b50000000000000}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000480)={r4, r8}) exit(0x9) r9 = socket$kcm(0x29, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000002070103000000000000000000000000412ee96c6c15c41402078008000140000000000800024000000000"], 0x28}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000280)={0x5fffff, 0x9, 0x8, r10, 0x0, &(0x7f0000000240)={0x9c090c, 0x0, [], @p_u32=&(0x7f00000001c0)=0xaa}}) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f00000002c0)={r11, r3}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x20, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x39}]}]}, 0x20}}, 0x0) sendto(r12, &(0x7f00000004c0)="334c090aeb76ad398e2ed506ffd07b828b949131a56313c608554d92bbba56fcfea0cadad98ae28a98451dfbfe9d53e8859eab33b12043d3c1b379a7bdb22529758233751b6e67e2920669dcffe0668f8c0084a91c0f9644294f307704460534c2aee740182cb6cdaf6ff99bd0e8617af91b5b15e6da38a09ad29dac102cdfc0d834d109a8a5b62a46fc50be0d4b19ff8699ae95102e72f5ebf6ebc1e604e2893903273f7e3cf427607863350ce960e42a84384c67aff93967a35cafa5e1c3446489855d2f83ef3fab7d507ff77078a2", 0xd0, 0x50, &(0x7f00000005c0)=@generic={0x0, "eb9b51064668bdbccc2ce28d8cca6a6d60798d6f4dcce2419a70f30a5aeb0100a9a4e4bb80c6e5a46b770ca8c30e33f48c307e4eb096297049f8ea41111ed4a3e53d580bfab243b541bfdd8fc7840621e222314021c5f6d920687842160951b0bbf4a79132a0f97bb96ea0115e368db40dadd529eda3bca67e8636bd0342"}, 0x80) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$SOUND_MIXER_WRITE_VOLUME(r14, 0xc0044d15, &(0x7f0000000400)=0x3a) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000380)=0x6, 0x4) dup2(r15, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:14 executing program 5: r0 = socket(0x10, 0x803, 0x20) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000240)={0x5, 0x101, 0xdd71, 0x3, 0x6}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f00000001c0)={0x0, 0x0, {0x6, 0xb, 0xa, 0xc, 0x2, 0xaa0f, 0x5, 0x4c}}) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4, 0x80000}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000001c0)={r3}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r7, r0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x8000, 0x0, 0x3}, &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:14 executing program 5: r0 = socket(0x10, 0x803, 0x20) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) socket(0x5, 0x4, 0x37) ioctl$KDENABIO(r1, 0x4b36) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000280)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000240)=""/40, 0x28}) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1441.714783] FAULT_INJECTION: forcing a failure. [ 1441.714783] name failslab, interval 1, probability 0, space 0, times 0 00:37:14 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000080)={0x2, 0x1, [0x1, 0x3, 0x401, 0xff, 0x8, 0x3, 0x4, 0xb3]}) ptrace$cont(0x7, r0, 0x0, 0x0) 00:37:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="3100000012000900690006342fc56aef40c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000002300210000000092a53bc5b0ac60167d0000000000000000007de91df04cd96341e36609841c7cec9abaffef786936076d33fc1f8dcb052612855d6bb93950ae2dc1f1b161e3b0fdf1102033627291d596ba0f001b2ec9f836f56ff0e0180e8a7e2579235ff20de436d930c37bbccaca76430912f98a2ff147f4ecf642df793410ec30"], 0x14}, 0x8}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) [ 1441.789498] CPU: 1 PID: 27095 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1441.797438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1441.806803] Call Trace: [ 1441.809409] dump_stack+0x13e/0x194 [ 1441.813061] should_fail.cold+0x10a/0x14b [ 1441.817247] should_failslab+0xd6/0x130 [ 1441.821237] kmem_cache_alloc_trace+0x2db/0x7b0 [ 1441.825929] ? up_write+0x17/0x60 [ 1441.829396] ? __debugfs_create_file+0x2c6/0x3c0 [ 1441.834165] ? debugfs_create_file+0x37/0x60 [ 1441.838595] kvm_dev_ioctl+0xdc4/0x1480 [ 1441.842591] ? kvm_put_kvm+0xa90/0xa90 [ 1441.846501] ? kvm_put_kvm+0xa90/0xa90 [ 1441.850405] do_vfs_ioctl+0x75a/0xfe0 [ 1441.854223] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1441.858998] ? ioctl_preallocate+0x1a0/0x1a0 [ 1441.863430] ? security_file_ioctl+0x76/0xb0 [ 1441.867856] ? security_file_ioctl+0x83/0xb0 [ 1441.872281] SyS_ioctl+0x7f/0xb0 [ 1441.875657] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1441.879648] do_syscall_64+0x1d5/0x640 00:37:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000100)={0x1fd, 0x7, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) [ 1441.880987] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1441.883648] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1441.883658] RIP: 0033:0x45c479 [ 1441.883664] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1441.883676] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1441.883681] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1441.883686] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1441.883695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 00:37:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1441.915286] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1441.915523] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000020 00:37:14 executing program 4 (fault-call:1 fault-nth:33): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r7 = fcntl$dupfd(r0, 0x406, r6) setsockopt$inet_tcp_int(r7, 0x6, 0x17, &(0x7f0000000240)=0x2, 0x4) r8 = dup2(r5, r0) ioctl$sock_SIOCGIFBR(r8, 0x8940, &(0x7f00000001c0)=@generic={0x2, 0x3ff, 0x7}) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)) [ 1442.063562] FAULT_INJECTION: forcing a failure. [ 1442.063562] name failslab, interval 1, probability 0, space 0, times 0 00:37:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, r5}) r7 = dup(r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r8}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r9, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:14 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1442.166213] CPU: 0 PID: 27143 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1442.174251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1442.183615] Call Trace: [ 1442.186219] dump_stack+0x13e/0x194 [ 1442.189864] should_fail.cold+0x10a/0x14b [ 1442.194042] should_failslab+0xd6/0x130 [ 1442.198030] kmem_cache_alloc+0x2b5/0x770 [ 1442.202190] ? __d_lookup+0x3b4/0x670 [ 1442.206002] ? mark_held_locks+0xa6/0xf0 [ 1442.210072] __d_alloc+0x2a/0x9b0 [ 1442.213535] d_alloc+0x46/0x250 [ 1442.216823] __lookup_hash+0x51/0x180 [ 1442.220721] lookup_one_len+0x27c/0x3a0 [ 1442.224703] ? __lookup_hash+0x180/0x180 [ 1442.228777] start_creating+0xa1/0x1c0 [ 1442.232676] __debugfs_create_file+0x4f/0x3c0 [ 1442.237179] ? debugfs_create_file+0x37/0x60 [ 1442.241601] kvm_dev_ioctl+0xd71/0x1480 [ 1442.245592] ? kvm_put_kvm+0xa90/0xa90 [ 1442.249490] ? kvm_put_kvm+0xa90/0xa90 [ 1442.253515] do_vfs_ioctl+0x75a/0xfe0 [ 1442.257326] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1442.262094] ? ioctl_preallocate+0x1a0/0x1a0 [ 1442.266526] ? security_file_ioctl+0x76/0xb0 [ 1442.270942] ? security_file_ioctl+0x83/0xb0 [ 1442.275361] SyS_ioctl+0x7f/0xb0 [ 1442.278740] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1442.282727] do_syscall_64+0x1d5/0x640 [ 1442.286621] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1442.291825] RIP: 0033:0x45c479 [ 1442.295007] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1442.302709] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 00:37:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1442.309981] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1442.317333] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1442.324609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1442.331882] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000021 00:37:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x204003, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000e80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f0000000480)={0x9c0, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4}}, @NL80211_ATTR_SSID={0x20, 0x34, "7d4741f96fe11dedaddd0a4f9e8f3e748314c4321357414e877b0e6e"}, @NL80211_ATTR_TX_RATES={0xf8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4f, 0x2, "64f2349891d5f9725cfaf43f1b849d17dc186c7cf04a0b1f701496aa9389e01a9c823f427eaa73514202e446cc141813e83710018ef393179be72eb8832f407c3958f8e5ab330dd509e608"}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, "60e64519c4b188a9c142ab356b65fa872802d268955f5a82"}, @NL80211_TXRATE_HT={0x50, 0x2, "4a736a5b0afc9c6f324bd64b5201f93127c18cbaf25bf751877d68d548b7f2f85a7e3ef11167648b2a32d47a202ff0639eb9917030697e6674b354039961454029905e287e5d0edb119726dd"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x0, 0xfed1, 0x6, 0xdc, 0xa00, 0x2, 0x5]}}, @NL80211_TXRATE_HT={0x8, 0x2, "39081dd6"}]}, @NL80211_BAND_6GHZ={0xc, 0x3, [@NL80211_TXRATE_LEGACY={0x5, 0x1, '\''}]}]}, @NL80211_ATTR_IE_PROBE_RESP={0x875, 0x7f, "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"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x80}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x9c0}, 0x1, 0x0, 0x0, 0x40855}, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) accept$phonet_pipe(r7, &(0x7f00000003c0), &(0x7f0000000400)=0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r12 = dup2(r10, r11) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x80040, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r12, 0xc04064aa, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440), 0x1, 0x0, [], 0x2000000000000068, 0x4}) 00:37:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc72}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:17 executing program 4 (fault-call:1 fault-nth:34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x200000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050025bd7000fedbdf2504000000100001002a2d776c616e30707070310008000700fffffffb0a000100776c616e317b00000800020007000000130001002f0014000600"/84], 0x68}, 0x1, 0x0, 0x0, 0x408c0}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = gettid() ptrace$setopts(0x4206, r11, 0x0, 0x0) tkill(r11, 0x3c) write$cgroup_pid(r10, &(0x7f00000001c0)=r11, 0x12) dup2(r8, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000180)={0xa20000, 0x20, 0x1d462c44, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990a71, 0x9, [], @string=&(0x7f0000000040)=0x3}}) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000001c0)=0x5, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000240)={0x0, 0x47a7}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$alg(r3, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) [ 1444.913531] FAULT_INJECTION: forcing a failure. [ 1444.913531] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.941561] CPU: 0 PID: 27186 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1444.949491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1444.958854] Call Trace: [ 1444.961459] dump_stack+0x13e/0x194 [ 1444.965108] should_fail.cold+0x10a/0x14b [ 1444.969285] should_failslab+0xd6/0x130 [ 1444.973275] kmem_cache_alloc+0x2b5/0x770 [ 1444.977440] ? lookup_one_len+0x284/0x3a0 [ 1444.981604] alloc_inode+0xa0/0x170 [ 1444.985244] new_inode_pseudo+0x14/0xe0 [ 1444.989228] new_inode+0x1b/0x40 [ 1444.992602] debugfs_get_inode+0x1a/0x130 [ 1444.996759] __debugfs_create_file+0x93/0x3c0 [ 1445.001271] ? debugfs_create_file+0x37/0x60 [ 1445.005703] kvm_dev_ioctl+0xd71/0x1480 [ 1445.009697] ? kvm_put_kvm+0xa90/0xa90 [ 1445.013604] ? kvm_put_kvm+0xa90/0xa90 [ 1445.017503] do_vfs_ioctl+0x75a/0xfe0 [ 1445.021315] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1445.026113] ? ioctl_preallocate+0x1a0/0x1a0 [ 1445.030545] ? security_file_ioctl+0x76/0xb0 [ 1445.034964] ? security_file_ioctl+0x83/0xb0 [ 1445.039386] SyS_ioctl+0x7f/0xb0 [ 1445.042759] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1445.046745] do_syscall_64+0x1d5/0x640 [ 1445.050762] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1445.055959] RIP: 0033:0x45c479 [ 1445.059158] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1445.066876] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1445.074165] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1445.081552] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1445.088830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1445.096115] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000022 00:37:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x208003, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:18 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)={0x5, 0x2, 0x4, 0x2000, 0x1, {0x0, 0x2710}, {0x2, 0x3, 0x6, 0x2, 0xe8, 0x7, "af1f3822"}, 0xfffffbff, 0x0, @planes=&(0x7f0000000080)={0x5e, 0x8a800000, @userptr=0xffffffffffff8001, 0x7fffffff}, 0x9d9, 0x0, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r4, 0x3}, 0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r5, 0x0, 0x0) 00:37:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x40, r3, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}]}, 0x40}}, 0x40041) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r7}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r8, r0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f0000000380)={0x0, @rand_addr, @broadcast}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000400)={'team0\x00', r12}) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:18 executing program 4 (fault-call:1 fault-nth:35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x54, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x40050, 0x0, 0x8b, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000200)={r4, 0x6}, 0x8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0xa}}, 0x20) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$P9_RLCREATE(r8, &(0x7f00000001c0)={0x18, 0xf, 0x2, {{0x2, 0x3, 0x4}, 0x341}}, 0x18) socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) 00:37:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) bind$nfc_llcp(r3, &(0x7f0000000240)={0x27, 0x0, 0x1, 0x4, 0xd0, 0x7, "1a07e69d05e933b8bf69ec9b1f3607e62cc1e09b16e45129ffd895dad9b6a8f4c00c69e08f9040aa6bbcef5ccf868ef442ac59a8cfd74d9ab11eef77b2d477", 0x36}, 0x60) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={r8, 0xc4cb}, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r9, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1445.612464] FAULT_INJECTION: forcing a failure. [ 1445.612464] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.638818] CPU: 0 PID: 27214 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1445.646746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1445.656225] Call Trace: [ 1445.658829] dump_stack+0x13e/0x194 [ 1445.662484] should_fail.cold+0x10a/0x14b [ 1445.666667] should_failslab+0xd6/0x130 [ 1445.670656] kmem_cache_alloc+0x2b5/0x770 [ 1445.674823] ? alloc_inode+0xa0/0x170 [ 1445.678643] selinux_inode_alloc_security+0xb1/0x2a0 [ 1445.683767] security_inode_alloc+0x8f/0xd0 [ 1445.688106] inode_init_always+0x549/0xaf0 [ 1445.692356] alloc_inode+0x7a/0x170 [ 1445.695998] new_inode_pseudo+0x14/0xe0 [ 1445.699992] new_inode+0x1b/0x40 [ 1445.703373] debugfs_get_inode+0x1a/0x130 [ 1445.707527] __debugfs_create_file+0x93/0x3c0 [ 1445.712032] ? debugfs_create_file+0x37/0x60 [ 1445.716477] kvm_dev_ioctl+0xd71/0x1480 [ 1445.720473] ? kvm_put_kvm+0xa90/0xa90 [ 1445.724380] ? kvm_put_kvm+0xa90/0xa90 [ 1445.728284] do_vfs_ioctl+0x75a/0xfe0 [ 1445.732101] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1445.736876] ? ioctl_preallocate+0x1a0/0x1a0 [ 1445.741411] ? security_file_ioctl+0x76/0xb0 [ 1445.745848] ? security_file_ioctl+0x83/0xb0 [ 1445.750281] SyS_ioctl+0x7f/0xb0 [ 1445.753683] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1445.757673] do_syscall_64+0x1d5/0x640 00:37:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="01e1af7910da022417bda4f7fdd09c41c6ba83ff6c1412a5e524cdbc38930bd3fdaf8c06ea7f6c9abdad4cd1da72a31349ec343f57631a43946661e7146c0368d151c38a0c5071c0337eeb4a00c9552dd24b1067e53b", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={r8, @in6={{0xa, 0x4e23, 0x3b, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x21}}, 0x3ff}}, 0x7be8, 0x7f, 0xfffffffb, 0x4, 0x3}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000300)={r9, 0x3}, 0x8) [ 1445.761583] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1445.766782] RIP: 0033:0x45c479 [ 1445.769979] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1445.777698] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1445.784978] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1445.792265] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1445.799564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1445.806845] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000023 00:37:18 executing program 4 (fault-call:1 fault-nth:36): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:18 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000080)={0x401, 0x1000, 0x4, 0x0, 0x7, 0x1f, 0x22, "9217990d36ce3bd7c2f139da63358467d879f540", "a11e189f801f482a4ab9d3dbabd2dec16a144ba8"}) [ 1446.100348] FAULT_INJECTION: forcing a failure. [ 1446.100348] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1446.125018] CPU: 1 PID: 27228 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1446.133148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1446.142510] Call Trace: [ 1446.145116] dump_stack+0x13e/0x194 [ 1446.148763] should_fail.cold+0x10a/0x14b [ 1446.152930] __alloc_pages_nodemask+0x1bf/0x700 [ 1446.157625] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1446.162663] ? inode_doinit_with_dentry+0x735/0xe30 [ 1446.167701] ? lockref_get+0x11/0x50 [ 1446.171438] alloc_pages_current+0xe7/0x1e0 [ 1446.175788] __get_free_pages+0xb/0x40 [ 1446.179696] inode_doinit_with_dentry+0x7b6/0xe30 [ 1446.184560] ? selinux_cred_free+0x70/0x70 [ 1446.188811] ? put_itimerspec64+0x190/0x190 [ 1446.193145] selinux_d_instantiate+0x23/0x30 [ 1446.197564] security_d_instantiate+0x54/0xd0 [ 1446.198605] ptrace attach of "/root/syz-executor.0"[27233] was attempted by "/root/syz-executor.0"[27234] [ 1446.202066] d_instantiate+0x5a/0x90 [ 1446.202152] __debugfs_create_file+0x15b/0x3c0 [ 1446.220262] ? debugfs_create_file+0x37/0x60 [ 1446.224697] kvm_dev_ioctl+0xd71/0x1480 [ 1446.228740] ? kvm_put_kvm+0xa90/0xa90 [ 1446.232653] ? kvm_put_kvm+0xa90/0xa90 [ 1446.236567] do_vfs_ioctl+0x75a/0xfe0 [ 1446.240408] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1446.245190] ? ioctl_preallocate+0x1a0/0x1a0 [ 1446.249628] ? security_file_ioctl+0x76/0xb0 [ 1446.254055] ? security_file_ioctl+0x83/0xb0 [ 1446.258482] SyS_ioctl+0x7f/0xb0 [ 1446.261860] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1446.265851] do_syscall_64+0x1d5/0x640 [ 1446.269764] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1446.274983] RIP: 0033:0x45c479 [ 1446.278179] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1446.285901] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1446.293192] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 00:37:19 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xf, r0, 0x6, &(0x7f0000000180)="a668acec4c22e58a1e9f56d065d6dce2e8990aa3dc564a657eb15cc1f7cfb18742ccd1f9a6ef044488cac3ffee2ca00f164b4cc112d6a7d7f08b80710b8e5b4b88663ba058953dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0000000000000001a1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4a24da40540fdd60ae077c655a1a74556a9fdd411cd31ae0d70490ceed91f77b00f1586478f21be9e3452d9a6f1cbc93e6c44934a13e44051a3de25bdd8e69930bcb9c570d6d9accb6e1772c228a9a3f3c0f3183e80a0e6304e7c") ptrace$cont(0x7, r0, 0x0, 0x0) [ 1446.300575] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1446.307854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1446.315135] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000024 00:37:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x9bb}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x100}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x2, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 00:37:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r7}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r8, r3) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:19 executing program 4 (fault-call:1 fault-nth:37): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x408282, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYRESHEX=r7, @ANYRESDEC=r2, @ANYBLOB="0000000000000000db881e37b4599c9b7cbbeeea8be34a"], 0x5}}, 0x800) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x23, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r6, @ANYBLOB="e5ffffff0000000008001c00ef000000"], 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vxcan0\x00', r6}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000440)={@rand_addr="cd6afef16537222affe6461b530daf4a", r8}, 0x14) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:37:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)) [ 1446.550946] FAULT_INJECTION: forcing a failure. [ 1446.550946] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1446.566305] CPU: 1 PID: 27258 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1446.574223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1446.583603] Call Trace: [ 1446.586217] dump_stack+0x13e/0x194 [ 1446.589874] should_fail.cold+0x10a/0x14b [ 1446.594042] __alloc_pages_nodemask+0x1bf/0x700 [ 1446.598735] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1446.603770] ? inode_doinit_with_dentry+0x735/0xe30 [ 1446.608806] ? lockref_get+0x11/0x50 [ 1446.612541] alloc_pages_current+0xe7/0x1e0 [ 1446.616880] __get_free_pages+0xb/0x40 [ 1446.620781] inode_doinit_with_dentry+0x7b6/0xe30 [ 1446.625648] ? selinux_cred_free+0x70/0x70 [ 1446.630097] ? put_itimerspec64+0x190/0x190 [ 1446.634431] selinux_d_instantiate+0x23/0x30 [ 1446.638855] security_d_instantiate+0x54/0xd0 [ 1446.643367] d_instantiate+0x5a/0x90 [ 1446.647103] __debugfs_create_file+0x15b/0x3c0 [ 1446.651701] ? debugfs_create_file+0x37/0x60 [ 1446.656128] kvm_dev_ioctl+0xd71/0x1480 [ 1446.660125] ? kvm_put_kvm+0xa90/0xa90 [ 1446.664040] ? kvm_put_kvm+0xa90/0xa90 [ 1446.667956] do_vfs_ioctl+0x75a/0xfe0 [ 1446.671780] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1446.676563] ? ioctl_preallocate+0x1a0/0x1a0 [ 1446.681012] ? security_file_ioctl+0x76/0xb0 [ 1446.685446] ? security_file_ioctl+0x83/0xb0 [ 1446.689889] SyS_ioctl+0x7f/0xb0 [ 1446.693439] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1446.697439] do_syscall_64+0x1d5/0x640 [ 1446.701353] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1446.706585] RIP: 0033:0x45c479 [ 1446.709787] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1446.717508] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1446.724794] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1446.732073] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1446.739359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 00:37:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x1, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BLKIOOPT(r7, 0x1279, &(0x7f00000001c0)) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1446.746643] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000025 00:37:19 executing program 4 (fault-call:1 fault-nth:38): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x800000000000, 0x101400) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f00000001c0)=0x8000) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r7, r2) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000007c00)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000007c40)={0x0, 0x7, 0x4, 0x400000, 0x20, {r2, r3/1000+10000}, {0x4, 0x0, 0xff, 0x4, 0x6, 0x1, "1d9d1b0b"}, 0x1, 0x4, @fd, 0x9, 0x0, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007d00)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000007e00)={&(0x7f0000007cc0), 0xc, &(0x7f0000007dc0)={&(0x7f0000007d40)={0x70, r5, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffff9}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @rand_addr=0x8}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xe0000000}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x3, 0x1, 0x8, 0x1ff]}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000007b80), &(0x7f0000007bc0)=0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8480) sendmmsg$nfc_llcp(r9, &(0x7f0000007980)=[{&(0x7f0000000180)={0x27, 0x1, 0x2, 0x2, 0xcd, 0x0, "887d958a8b7efbcf97e6d980cc3590895e0a056f488f841639fdb1f40b2a128dc96a12e5aef4abef860d81a39c015dd1e44bd84c49854b7b076ff8267dcefc", 0x2e}, 0x60, &(0x7f0000000080)=[{&(0x7f0000000200)="652ce2a9ddad2ccee74dc4efb4d8c6ddb5873bfcd6a8562cd01bd2b26aa3ee18c7921fa6efbba200dfcc6dc064ebbfe4c0de04f692d996427a176355a6bc7a8c5decbf4087b59ddda032f771b3e64a80dd0244152ae4f6976f4ff23c90648d6db59ad29789f848ec4002e9effcbbbce329afaa5c7fa9e4ff66113c5c0450be3179acac8b4689718b4eedbb132de8cb5a5d3fa204777f978ff053f5ba6aea33e095142335e5a57c849c9de4fbad3f5127b9381cc525e1196eaef9717452c38650aef4a569fba885000dd1655569f7883a01bbd08429f840f0a4e762e96f11fc0d84d345f13317e8e921f4bad2798ca4c4dc2874858bf77e9a178c580053a04fafb6f1357db43947ad603fcda846f5319fc8146b94404d3696e6c568e623351905e9058f3a8db221ebb0e010d807f754a7af368bab7235cb96963f1d93e84a8b9a440368270b3c74f220313d190ecab91ef7767c458752d1b04dfebad92d01acee416f09a08230f769d490bcc161276eaa7f856b104a59fa4c8a22964ee400db450cb5e96854b84bce79379ce1bb466c698792b178ddf995506f8c0f3799602f8c3764de8285c80003d76be12a8130a02a40f7d632baad48733834d83d5dbd39ff66cc711c85bbba2228892183f25a18279f79e90bfec11eb10c4499e804abfc96e75c66fd377ed3208b8a8f7aa7968afc98949c33660fb5d994c060fe7dd7e260f7398514824994c3960a286cb9f756c4e6eaa21c963db6dc37ecbec877dedb0b209549fc1e9e573c062e54edfd5c33cbf9f530a2c8571c34d15ed5bcc78e05d64a4c38e87c5780a3e3e0c4690eefba83c0c1d2652e4d6bafc21a9ad18854ca1f4bda205af3b321b8fe12ee6fb1f3df62767d6bdf48d85cc784a7422764503f363c9e2c5bcbed5ada18f7e2fa39a3e49c2410ac7c41eafac6e5dc8c439d36d3c95647d3392d7bd6368367fdc21ee4e00d8e7c7a08677c606f53caa7728f0e9d55c5128f5f2b039a89762123d4f919a063af1029f0c669ba213365e626d4b08b92d34c043095704c6c9ec857c7d0d00559d58a60de7dce0dc4748144fa65da771f10bbc981d9e394527679bb0e3eceff9c9913feabf69bb842bc087f7b303f4804b88c539dc41b3ec4ae9c4127c00018dcc6f11972f55e8ffc246818c3fef969b89e3ee663b9b0403e288b304e486c53e1febfd1c3e0fbf197303be1180a5e9f7075f63e869e76facbef90c3e1c6b9f49333b76e60a72a4a077e66f911a5cbf8c86806b7f9926ac40da7957f491eb8f7ef6dc7499e919684f119368acb45c43e28a08c38b7b9b5dd1bf723f69b0d5755ca3fd38c5a8bfe2c24343e402bc3cad3227c971cfc385fe634ff0f8b0999feb81dda3123d9b9254f24ab0c7008d4d55eac1899797da812373358d046a26c401a132484c4e2292bc0bcf9adfff127ff5c3cbeb30de6a77dd2e52f56acc62b0505b716e6ee842f2257cc874fb619cb78ce66690a308366b0bee0ccde8b71d54966e87ea298525fe2cc4a08478445d2bc9700392dee50f1c87e1b87b4e2bf5988f5024c3a714d736f8ad5fe898aae262bcd4a1a84d4540c75be88a258a89a0f6022865b1713d4c3545231b7ad593ac0a2c414287db38cfeff665036d254f66ed896f2bd98a88051ae9f956b7d5146d8238e423ba5b0c6f6113a67d1dea099bb0048ffea72f166042465a03692f47eefd877a0a45f2d800eacb72a3722adf21ea32d499fe87764d595266adb4236ef59d834f5bb078deec71300681b8e07a9acb97182bdc515bb68a3d81d10e513e4d83f09715bf8bef15d00614423f76f1dd6080ceab839bc746307ed25b0d7c83bd5c85acbcaa6461987c9abcdeeab23af326bdb7d7792faf7ec20d2f145b3055f2161db3a3482d22dc2ac4f6b12600e5516d8166c8b990b6c1fff8cf39dcbae489ad0a806be16bc4a3108c2014eba97c87c25c8665e182fcaf0c5b77b9021d4d8d95865db12afb5d7f0011801cef9d5193bd97e8b0542efa8eb8efc8bb94e9652f0d7913530a3fc613092ecc8219ccc9ab32b058d010d6891c1e8a96aa3b2f6aaf85b70bdf529f98fdcfff05430f974bb38e36caa5813c0d5aa59b43591303452be176b954f57e209cf99a2ce005a8c55a850c7a1bc05a51e854b04199ea6594d6eeae2110ff57cce7045bfd0400780213c2e0a4944e85249f089249582642233e8a92a8982d535f4d4493bed343be061398ee634fced80ff3fd7ed56da5eb3f8849118f316f010a30924542ac18c55729f3b75ffbff964fb5983684818125136547315d4209880b2e9f1e5bc494992d94d9f88bfecac9aeb6c88d5495004d363404a8b31708f9c957baea5845a1c92a9224040e37daa0114babc4c2149533fa8d5d2dab7b8f492e0716aa9833f9c0ef0dbe5dadd6fa2f16fd1bb67eb51ab4af2c580751f12d661750680704bc34c4d060b1ae1ccd508fdbde42f30a8028a33345dfcf895270ba0bed511aaea08e526a22b5409292df8d733b76e2e0d4c51a16478379303466ccc9c30bfb3d5f83f40144db7e9cc84005c81f2d6e6f563348570fab3ceaea8726861f6a8b45cb8305641d616f3ca72f9390b8afab4162f6a2a393a6e83a13b8adc47123f3f09e4e1085fb1f614d5b82bab7947e2416410d5702eb1a9acd0f87debc2fcbac88b3f8830283e615ece0edd0de3b9d7169593118567a2a76a526533c522b41856c3f474b406ce1bc702c46b8689b64d9feb375f7cb40bfd7b756650d8c4c109275f8157a85580eb3f6551c360b1dffe5d464feee4a8c083eb98f42bec227893bcb5a6e874c6188de7d43841a0513abefc016c9724275e70f6f37b8be0edbffd31ffa1d8a36f0edb87fed717b48b4dd19c63399e38177abc8939cc2a5a08c5a4364faa18eb558f7dc49510affd8e84d9295688eee9386fbd75dff57d903980e22a16eed7efbd54665e26c2694712baabde468cec82145842ab4322540209a42cc9b471bbbfd38a020f3fa7e1a961931659deaf3e2e774a940823cb35f91cbf06b3826b90f6ac5cbcf2f1b94ac7dc4c20504af061bc19d269ebe0a344d1e12df5c44bd07373bef588dc673fe53204f9a26e3022a86c3998e70fddf2d40e90ad0a7861778dd11cf081fd3b6ecb4b314729524071d38efdc996c060fed2764aa2c5baa78fe2c831484942d8458e1759aa4ddd0cba7a4bb411a3bf5763d5d71bffdf42561eff4146689e54739e7d9f9baa0b1e7a52e0807941e89340f369f826f6f655dcff478f13fc549af9dcbe9a2bc32c9087fbf40ab1d5059dd66b7224040ef524eda2d6f4f553518a4be8f33b7469b18a2da0220c4cba4dfb863262281c236495e62bb38ead69616bd93bf988ba78d23a15061320380a1e0556ac737ed92146ec511def537b2f33618c2428b6ecf2a5fb16b6f100f1602a6b9b6321acbe84007c097a46a3932fc6335ddadd4f5cdce20cf3b6fbadad2c792a18f11b2d454439ac53122b071e2facbdc8099e4e5673ef6f8837e8bb83c59d52f5b85a8d47ec10b592c9a2fccc5f2764ce3d0cb53021b95a4eb814496ad9b39ba80b0ab1cc710010d1816e801ad0d9a683c2ea5e8d689fcb7ab69ab44c44e314bac3764160a5d26ba0d2fb350164804ee404541bd824543da5cbe4f04f97e8ed8e25c8e012bf80e236706fbb223fbcdad6180cc35ec20af69184c7fd5265494405d6c8e1fa719ab02b0544911b28424bd29de7ee75eec0c8ce8563ca096af39b380395024d5fae22e52df268b0b6cfb41605aa0102b24b9d753f0728c339a412570ab46237cf1dbceaeea6af5457be512d04aa346769624609f5fd5bfbd5da0955b2dde6f388a6977eaf76ce37b03cb8d1fa9b7dc05c9d175c9141a351b337d088fe03ba0d5c2671db192e951740b78e0b408036da683d5aa5f485bbce364b0807120feee325e5042ac12cd33ff3b51adb8d3e0faa6ee0313379eda81802e0b69958d17a0c98e001430788b6a4cd411e82860fa8898af713dc7460f9fe9725e04db67a9fbe9ddffbcc8793163898dac1321d3c228a5f9c8d9cb0bc23cdc6fe143dabef27c33e04611591c50e66f1babde38276648c069014030b86bdd303bb823f3c950de56b449dc8161477c75d04ed77f69dc1c57aef361dd938a33eb554a51f8829ae10f7d738404c33fc7b14c4effb4b4529cbe8594a5d0cfbf369a1534484902cc758cbfe4972bc84aac45d41b4454f3a985ec6c3bc9e91cfaed855b692644578749e0649ee354ce5bdd28514c4f4b1b5efacb2583d28cd191ff542ab53f12cec3ebadbe546d5ec9719ea9469a8e2e4616bcbc632d9ba266fda00b81ece0cf6ba8353e41b33435e810cd8c5bfa9bf37a627edfb0869392bc30b7b411f36d7dc13579599408adc7e702d5826fcf41e5a6caac078f72db4e1d1feefeb3482cd3dce08948b706e0e0b31d7f4a66c82d7280a7d9063097f17af451153490575815ac4d7095e7130e6fe4188225352a08694586d3239a8e968ac06640fb04a921240d6b080465c25a78c955ae2fb8f2abe2c4c88701aee69bc084a8662c459c9c5c42c409b65998550a19e161cabed26e16b7fa1b61994cdcfd6878d15b8f979b8db5188f70de8a8ea90f98065a70acc970f467b27e9a4be2e3c74a8f776986ccea913ecbeca6e422ccf7c6e76b494d8579c6153a81d21ef3cd24792eec59ebf5bbfca54f4725db08931f4a68a3c71f0c8a7747bdff1fb77c58502d3bf0f9547a7c2f2b484146ce48267c1db4b33d02b765812eec0d2f4e57e623a3e63a32e03062d4950d0a67c22efe0b511f1a5060f100b4c797774bda3e7fbb349d9d55c06daa9a2161671654c879f66eadf946888fb90024e6101724ea447f7402048349f570133160b12347571fbc33efde9717daf4f63610f1dd3f9d664b06220e10fcdd6ae5310c6757b03fa8117b0781c813c4c3b28b9462b7a9c91d65f711ad82e2d637779640dfab65ce3e44e4eeb19a5716f569c1702e743058222343735ba4d2a55c1bd5673fe21e40b6239efbdbb6693b714d3ded51814cb4e28c2e610caf818698364b91fa76694acc17d0cf02f7ae30e9557291bb82efb4159e0cdfc40cfd635411c128228df31c3aa42d458d3d48af95cb29f66dc5294b19c86b71df786c1586296cdc9a618c9d1157b24d3cd4c10e768991417028037485fbab5ca10731306cb8fa05d92a8010269078c0e997e1c3d81d190111eda9e784aabe22cffca40650fe897e7a18b4fcd157450661c3c52fac4abf48e0240e85742f9b32a326b3eba7d58f7ed7f8be105073ba5088d63e7f5e02be473d0f593b340936afa7d91039611123217b85c619ad25f82c46c79b4c1bbe5ac9db6e41e09e9495dfe36abb8b246061d5e5f0deb92177d1733c5e40b56a2492d716267ddec55e89bb416852b57e4556e446e9d656dec3edf91fef1da84e8251bd2b374366b334f92c5e9a932be601d4f360360188c3bd94575060d67e57cbc43fb26e70d6e3753394af13fa3330c497169d51e7e642d0afd6bb2d0de5eb9b63feaeb95549b19a76ae9728ca7d0b2bd8d8674b309683d0645f23b003cbb7a466e9158096d86043cc69ca4e125df2f3555a57e025c053a26f715fc2a419878fda96adb8709b10753d7f4951f428043147c9a0b2530c90d53eb5830417c4a07f6d06baa2373ddb951157a65933e9098f74255d91d7c33192b73fe62068c94995f74348a0601a892137fcaf90cd0b6f4d2f0bed22c551acc28474770b35b0715a7163a3159e34f437a9ef84293bbb9", 0x1000}], 0x1}, {&(0x7f0000001200)={0x27, 0x0, 0x2, 0x3, 0x2, 0x8, "fe4c33158910581ab9823aab6a5b19885b7820367a09e33bc0730fffc2316328a2d330411d0af26fa72610f4b185f6b707ea1f897ea16ca626141bc764ca39", 0x17}, 0x60, &(0x7f0000001340)=[{&(0x7f0000001280)="9a64559b3d28dbd845b570f463490b0386c212367ed78cc897718acd18c8d9959a702eda8292ce9c31f712b4f98cf243ee9cbe82a32f45c64f82a5591f2d2b27a441a607ab19572c7f1b436d8f84c21efccc444847d9a7536314ab25dce54560aff882d1bf61290861307796c7defb5772c9a36b9b7c304616bfd9d3161de37a9c064c069462e860f2feba839814805279b3af6ed8600c94", 0x98}], 0x1, &(0x7f0000001380)={0x98, 0x113, 0x6, "9ce58e26e0988019a3f26dffdf4939e9e37ab2b554f720a5019b4f22c63075ed0f36aae9e9faa719426416817157230d5f8f78d68043659bfbb8d7a6d4e4ce870571d04592a9faf7475842da277adcdddb0d762e8d27e30e59e506a61ab93e4f2187de45885a87ea7565abeb82439614fc5b7712dba6cefd2f3c8e800a9429f8b23b1a88ee7e7ff8"}, 0x98, 0x40000}, {&(0x7f0000001440)={0x27, 0x1, 0x2, 0x1, 0x7, 0xe0, "68a7dea03225acab95c9b55afc09ffc28d4839ac6d82322a19ace104901e6201f5b7ce86638c7dd0edd511539d0a3be399259a229dc98ada6af5d80fbb49cc", 0x1e}, 0x60, &(0x7f0000001700)=[{&(0x7f00000014c0)="bb2ff975cf30783fb838f0173ca162e9bf99ba219328e3fffd14b333ce656c62e5d6cd8242eee73f5af8c838151b191bd3012be2e22768bc1550c2e66aab5ef225b22a2207a5b207da27b4de7557cfe867a08831b7817332f80c59fa4dbafa117a4c445d78a810ed98561fdbb73fbd66460d904d6ebbf4cf99b3a2a3f79f5756dd5d1f", 0x83}, {&(0x7f0000001580)="ad8ce48a0abda34b8e433bf7519b866b5ca5f971ef9f2b7df7d50cd0cb69d1eb8cb613bd1d9df61f51c2c1f8dcdfaf2f54813126ed5a995f3279efcc269e9540ec94112788f5b69850776c3287d64f56dfaa373a9bfa03ae4651336aa0f4cf92e9c699188609c331c4ae1120ae6a285f751dc7f7e8b806919919b5", 0x7b}, {&(0x7f0000001600)="a1d55e9faf85be08530afca5c70376d31d23938cebde15d55c9c505b6b90591c4a9c89137793dc922f26d7350550724ab38905a7182e0fe61c8fb72068d9968dcb4219677699e8d666bc2511a1938b8a2f9c3b781a38123fc7f9832b12f03c6ebfdd620cb312af4c684d99444a632fbf102dfd080d3e57bb2ad905eedb341dc6f758a4ee76b2f507ba7911ae79eabcafe84afcf1f18085c295491f7212c2fcc36bcbfe06a0f0b847e205a471b2e9abd8dfff79b399221603a49c3a0a01101964bdf5b8af091b9b520584e1761003c88115a71b93620f57c48337a2e4a165e5c2f1d7445d2a", 0xe5}], 0x3, &(0x7f0000001740)={0x50, 0x115, 0xb41, "3c10fa8a93212783282e5c08d8581059f5086aaf501b2bcb022c7c5c8d807690c45c3153d20964f8afc6c5031b57d0000e1d092e813da1e079"}, 0x50, 0x40}, {&(0x7f00000017c0)={0x27, 0x0, 0x1, 0x7, 0x9, 0xa8, "4faf3196fb29d5d73f40e0409a095bbba7dbf3b10b504ee02ae242c5cd12d096a2dc5f2167457eb1d5af7e1b18e671adf76c5701d6776dd644f5d8ef0616ff", 0x3f}, 0x60, &(0x7f00000018c0)=[{&(0x7f0000001840)="3661a40dc4549a52d618a65ffb1a653287129bf3b445dffdf612faeb0601dd171ebdf6472481f0ed1209b9fece4262028018915e881fb1c45162abbf93f25ddabed32f733dfcc334001d6cccfa0f127adddbf2006b2e4d7d3ece19cf6985f4fc42f131ff215984be18f65a", 0x6b}], 0x1, &(0x7f0000001900)={0x1010, 0x10b, 0x3ff, "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"}, 0x1010, 0x8000}, {&(0x7f0000002940)={0x27, 0x0, 0x0, 0x5, 0x8, 0x0, "5ec8eef10e3dab2627e7ffd5e9af56fdf2d04043e72ba6991a8d63a71dca7af86c5b10ac0be7436c839acb3c53134c24f51ed43f2c8b01656108ef29ffce2b", 0x3e}, 0x60, &(0x7f0000002a80)=[{&(0x7f00000029c0)="08762e0441ae64f9f109874c3de90f0f097cd14b4bac7294e65742dd6c60ae427bd6b084006ad7e0f085e0de3d253b4bb7f743e295e52a286eb144eb2241275b1931bab29250fae5551b0b3c059ad0aa6a2bbd6fbfc0d883bf5a9e9c39c1b5f966bec1138cae047ca445482d6e8a91", 0x6f}, {&(0x7f0000002a40)="070a4b0907a52b20787ab3aa0e58238db5a94f4c1945b80251e51d5e8cd8c93fc752", 0x22}], 0x2, &(0x7f0000002ac0)={0x1010, 0x1, 0x630d, "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"}, 0x1010, 0x20000010}, {&(0x7f0000003b00)={0x27, 0x0, 0x1, 0x7, 0xff, 0x3f, "9c3d9a3fc3e8d6b0f0687876b98d4f641b76536beac1dc3161f8e9ce7f82cbf3286659c4d4bdb33ed29814373f4cd12d4fca5acd695a2642ee8f596595334d", 0xf}, 0x60, &(0x7f0000004b80)=[{&(0x7f0000003b80)="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", 0x1000}], 0x1, &(0x7f0000004bc0)={0x60, 0x112, 0x0, "03ad8cf141f06e68297ec95efca10597a22973e2b72c7b92e6cfb1c14a47f404d2a2b807ad126f815ae1ca131abc5cd9712db7cf19b5eb74820f17b025922833f5d16a54c72fc23c2346bf169c8f"}, 0x60, 0x20000000}, {&(0x7f0000004c40)={0x27, 0x1, 0x2, 0x5, 0x9, 0x3f, "e5d9345124aeb2449a11aaf558b9c2d40628b111dec661d9e041bcdeabf401a815701aca709c56921cdcd57f10f30ab33b202134540e503dbf8babe2245e52", 0x35}, 0x60, &(0x7f00000060c0)=[{&(0x7f0000004cc0)="192e2d1ec0500f11fd4f056e12cba4a97253d0f009744dcfa8557d43e2cee6dda5cf0925143ef2f1ad211372f8c9a2ce88e94c2c393d489c9c5991d6ccb858caa8d2f60d15dda9177e7d8a56f87008221fbe79134f39a954604b709cb56cc10e8de21fb0b577459af3657b97cd74a8b0d1e0d2b45983cb800f2fc205ed350b64c70eed4a2302f334e6a4980e12c25594b46a2008dd9fdc674cd34e073205abbe4e245210c9c3f7a80b234ef0fc7a44ed34b32cae5f8287f4264b68325cc32f251d14ec1ede30eccc44fca877045eb745cbc52079b0f753360ed6902638", 0xdd}, {&(0x7f0000004dc0)="dfa16487efe91560834fd94ba637d5ee41ebb09b2ef70aa9b387be3b6e3fa79e65f073e9b449a54a7599288002b1cfaf79abf45c77de448c479636d6ac7803dd0d57f5d991919bc8d57e73d37a39598d867c85eca03693a91f7317d2f7be2411e150a915302bd39f4ef353292965deb2a09cb8ada1566a9dd980561d3753fed2be588ed9afb17d0380196388c54642d6479dcd570405e1d6765a54b8b437f127077119db97fb4538ce12dc4ff62e2579", 0xb0}, {&(0x7f0000004e80)="b6a920a4f8cb89ce0bf1caeed0279a3ad2c928e6d06c1f76060fe0171a40a8061c23e38053817c5106c015303061b7c2435f8514b0271c1dd38723f3f262415bac347ac018d376a6fd1c6a9eaf7eaec26c30b815d51a15e5668a2c7f52c4c25e0023c13e4ef393e7ff135b75fdc9e7be20a7ceb6ef3da951b3d89ae7a5dd539180bf9922da9c9948dac59dc279", 0x8d}, {&(0x7f0000004f40)="b7307e06f59d265d97b08db9bfbbb94cf782a701b592461bca6597162f0d967090a0db57b5de7482670fb64acff406affc0175b641fdc1dac511f142f8e0ceba79fdb16868ecdeee69e9dbfc70268f48974dfd812659fe5c4656ab24e8a650c3e296f6f6", 0x64}, {&(0x7f0000004fc0)="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", 0x1000}, {&(0x7f0000005fc0)="4ed21c26a0caf52ceeb912ab774abbea", 0x10}, {&(0x7f0000006000)="5d5d06e479e63c131d1ad733920e5607de2e1904274a3d72201847f5fb20758f278a34b37b3e13ac9da9cd964a4c50d10ed47c492da4bafbfa2d91a4cf837c0b1072b374bbb3f7ad98c8df1abee39f2d4014c0b87801943bdf75f8580f800088a27b7ee077d4660a31e5b766a64a270e8c37820ca9844559bb26b064ef2ef09dfcbb148deaf2340131a92a1203f7c304a87cf0c93d6e6042", 0x98}], 0x7, &(0x7f0000006140)={0x98, 0x10b, 0x3, "1008dc5540c1756d4b2f28af09e51b8ff97180a88fc6397c3bb938454cf7897577bef140a5ab459ca4d14431778241b04052efd1cbc9dfe2062570332c5b7cea2f8b8e3def4200946a333db32ae72bfe4b8d35129c426df5ffac062db0b39cfce95d98130601ee857a89331d3b2f266572f160475abc746260ade0f31ecb94069356dd7358"}, 0x98, 0x20000000}, {&(0x7f0000006200)={0x27, 0x1, 0x2, 0x1, 0x0, 0x4f, "6ad21b3f6292c8607b41345be515d68769cee2ecb4ba3264259ea6df4e111aadb1ef953fceb63d04222ba89374ec12a2b0ca6ef2324d0afb170cce953195e3", 0x9}, 0x60, &(0x7f00000075c0)=[{&(0x7f0000006280)="56b59de4b88de5e1213f6aad2ee78226ba6f0bfd687c190d61b2a4a49194309c3c07369d7854c92b091be690b137196d0adee8dab3bd2a56314b147e144001d33ce12081361b7c80e790b57597634a7fb1c4d7a7bd47fd1cb396792e9ea027fdcfe5a7458f0d511729b954c2562eb34dde6caf8b0c3ba530856b1cccd10b90a8e217c6eb238c866e792087e2", 0x8c}, {&(0x7f0000006340)="2e074e722bf68d0757d7e372d6788a29b1902b23a321032d28786672b8c22378fdf3b83469ca387939072eda11c6f74ddea54563dc4e85aa4ed170e8d03fa95b39832f5249a78215d7e8d52fc18cafd3595a8d24c74b5bbc2b8a1b070e12f7a8f2c019a70e9ddd5c12c1b6ca150c89bf4251e58d90867b3f9cda94c1c3289cdbc304584ad8c32e853ef1a140f34faa66639d8ed6162f4d347fb4acd9b230c8173d45c14d8f589f042e1a380b848c6c4ba758fd12e90c5ce73c5a290f19279131cb10ab4162e5c84beb2830a98a4b54d9b8fbec4ae7b0999d3ede2804c55ec74f30e3eb75a0b60fb6e1dd6336907c8e74ff4567e2264afd7b4bdccb07c09d163d072a24c8073d125e523859038d07b8b714898338a2b785caf699d778dd09b63d5498bb296f315716ca6ae55b7164c85128b190b51ec7634c803bf5b4549afa15880dcbaad6cdaecd040b46d3487d1f9d79041736e69f85f56ee9d872167de94123ac16519cc5a0c3d4cb25b78abc1abf726d1737683e1bfaff343a1f645c05b51f691b15f863a1baa12fa2f53c055cf8c1d8dbdfb3a7a51a3af824066592f589b474b73c8705c58d0336f1b0fcded95b8b2a5863fd5ac791377c253322905a027d3c3cebc5498e78995ef0119634321d8780ad8ffaf0cbaa6c2a93ded871ce7a932807eab264c9a7fff082cd955a8f638c381988edf4803bc0fcc4f3e7c796fc7fde2d4295e47454ad97f1491b019fe979e84ba5fe22b99345e2edcf9af1513868d9612bf6eab4a17d8d1306167d31b30d393f00b97c826e3f83bfa8b1a017152f95601cc2596c93d2eb57c186602aa2f89fd3b7ce62541c472492281bcc654da4c877432d73a7dccd525caeeba1a69ad14fd0b9729ff3c83b3a3ddd79ae3518b32ba28002a1b855022d0f4be55ba9e35b64ccf7637e0df08c12177234e661967bf12b248735bc7d020f28e59215654fe442997e87e3c2f1171e3d00c3f386cb1ca4d26700dbb7da52ed463b3fac509d5362cacd7140892a522e20b4393210f622e0ca86532875099c0e6a872e82d7311722fe1d19ff99495babca35fd5e71cca94d85a9e18cf9ae56f807487f53133d557cf1164ef1ccb0afd6a60b71ad326afa252aae8bc76ea5bc758b771aefcb0a33552348db8f88f380a692d864decd6196f8afe0b7c933634ba3ba50244014175b97778766c0d4b8709df2185e9c9d31cd1c68daf4e0c0a654a0271f2fd38479d7280019fab23e9e76a5ca39b8a1dffa338d793febcab6bd332195ae4241ff5dc943e1c04765ee3890f7e263e5df7132f1260fa2c5124b12fbd2e660f05384da9b922711c30d2b2b66da823f627c5689fbfa93354428a696bc3dd5c8bcdeb2f93933dc3aa51cd6b60f8c0caa9745626f076f78c23013fa2b5af5235cba962bd1cefdbf7e2df842b002c014d019240c8ca6cf5f8623de8d9c7f4c5cc614d7bafdf702b18303a91e302b7c2c2ad8da56917a9167b660dc6a650fa0e83d3fa4cab9eba8b4249e5672dad0505464e9e96a5f323b3fd5ada53687e402732833f3415999b0819cd53705f35f1096a118bb3d93f588d90d6cda15814f61e70e19fd86171a18c266fdae730689426fc211810bed523854f604af53bb2c8aabe1b7e955ec34738e32bb6e38f640f3c9474e5a572ff32a5fa319b4f8c023e8b968c3108269d1c4dddd051a2f93378efb012c55a128a212d655856beaf87dc3896ee0081728d8cbb406d537f0e2d1fa1b4e76f1f66524dbb3dedc5d71d8e31ed7f2064129bdd3d366dc403e03863d716857431b2ca6c2f92147b4ea7645c02aa6a7e67f73f0ce3f4ee669e5d0a4babd4c20b99aa3d6a1c969b25ebb83701d71b76cd72878aaf4445ed9f6e907bd932f55216f509aec99b62e084c14600ee93bd782e6c01b8281315859d546ee9133ae387186a4c0eba71f5a6229cee65ceb675816f52cf8920fe69e27fe388bc458f66c58bb4b68803c44c74d2d6b53307c15ba8ab2dc8b3f4275812f868ca3d462be6210bf844bece4e35345fceed28499fa43ee876371b2c76ab2c663ed6c695d1601180460425086399fd2bdc5c184335eae2ad5b1cf7851a32cd007c309609e48fd420fbf034bb5520a9fd08bf4240367a95d90764fc0a9069cfb43ca9602d0c681bdd178731ae4e2762cee8c50ff5924d158aac7f6c739ea0be554df15dc20426908233c086fea6175930e107c8ce2908509fe6c94dc0a7e040ece347192fd2a1c4eb2399780196c078fecf11561b3b68c0fb79b2168ea59345c008fc562cffd0bf1a6f24dc151e0b77c3862e26ede90744c4941a2b7ed59a25e0c47fe11d8189231f14bbd7323779dfe04699e9b654033acfc86055328f16965a49f462380d079a4741c3cbe7b824b2ed5bd1487d6d6e6950301dee49c6580287c01e23294309c5caac4f6673aa0781ea0786fbcca44251a168a775c6848a09d8031cc4ac6a321bfabe19e22b1a59a30805b7f35ea4929b42b65ac37be4384c60d09823517cdaef8b8e8a642eb09a9b5af3c8abaea892e45cd54e245dfc1bf7c461e1f878d5426feae4cf099d90f3f91503ed893a0aab04a113b64e13a9e674acafff24d87fddffcfbf5d1b8b8bd5ce06c400d55b1d51c2390dbf76b53804948cdf07853d21b0ecf2be441e4620ba1e84777d5858d75a4f27019e31b01a0c7216108079d2c2ab02ee7ec174480560b001990b81c828f8469596af6b2b8825093e80b2732caba61a3fc96739f0957f9b57a05ae2f5f57525f648f9ebdefd3db2074c44e47360f486d3ac4ec8604f7c8a9f7625ece99ed479188a257064ed9c876572c3dc7b3369de0667e0bb4a12f96cd08d461485f812ed39c3721e19832d521bc232fe2f44d5ae9397651911b128981b5df8d1b305bbc355b299a6dad9ecf0da31ca5e8d0eca232a610a4687f7f937d4107a253e63b7ffcb07dc5413d06e046545a9f76dc9decc00a15861a33453e38d6bf23f6b4315b6f734ab67bbe54b8a0ab0342dd1b3292ee9b03f6db4ecaac37d41eefd177a473b89721ab7ace6df1f5c85c54f5c7f77ec82f7989ce7d7633d631dd95ea2eb133af9a7bc921c28565da358a23b5469fde36a3f1ea0f1fc0113c85fd6cdae857ca193e1dff5df83eb3fa443f677e2c6b49f852b251f09ea750148357322dd7ab5c91aedc7bd9dfa655d5f0f57436e62c1e38dd46167a7debd8cce0f5c7a308e6e299676bd233a50a953a6d4ef8e118d825a2efd8f59c63e361aaded0ab06b8dbe35eea185beef69b3b06839712224cccb766fa5291d50e25bd708613d8702df506b8bd1e6d0db01f1c14ae0e5269f607fb2bdd4ea076e7d73660a1d4908ac006521825b64c445eb80c4c4158f53bc362291358198da284680a67dd36bd2d66497860427d48d69c0d46f355f4a67d269da3210487ba858a0efe4234a0f0f4a078419003945bc46ce5c1fed5232b1de70dae2fa46c3481df1f66d11b42dfd48b62c26e129a5d3e8f6808df2dfd503ff5f726f5fd800261699926fa7119c4f5f3d15db91236cd539166c8b11c8af45f5788d9437dc621fc2feba76e65a911f6c56b9577a2d3f8cefdce7ec1d80727925e6a8adf30db0adc8a9ec00f401b7e57396b388a318e96e5703f04d56e2d18e11500491e22d69f60e5bf443269e166ab0f935e3f095159dfaed69c149dc3da8ca6cad66c37c8d20e3d47ec25e81056b1ea24db9862ff2f38a9bcf9f284d1b684d81bef8c8f77476857e73ac12ccf7325967f98853df2873b405475ad84831f8e19087c1e70e7e5c755308b88fbf8478db9a599539fc9c9f78b6a54539cd417cd928c384ba68aae8f09ab1d97bdf919df4e437d217a5be7f3d698c011d55d1ffb071d505d720975ab093ca0ddfe1ccfc8e469afbd17a9fad0cf5b8fee57c50f8cec729a8c339b044acac43cf98fb27523108b3774bf46e8e38194c6ddf9885e5895a4a139698de3178e0f0b04be45e210e92884c8fd2f38031a3e98044fa899abc282648a3c827f358cc053872ca15af08c7191f7fb9db07f063b953527dd174cd82dcb3c851fccd7ca87a37d0a6566e37289643ed809fc7719d2825974e0f16f8910c6cb70589c931b0a67d8c32fd76f60bb79daa5eb663e0392eebd593ef1bff24de592d8cec89561fdc5fbc05cf34c8420c1393cdef496e6724539964d613e95b4d177a13f40b0cfc1cbf6282d5ed8d3e5a45e01f3cf0d4716f75fefb334dd427756d53b08fd6c5be0009d48928b86447f7e93dbbbdf12b94f2ff5d1a49af665878bb445d22f85dfce9dc48f48b9af042e039e208e5f71308bc2121dbacf5c30bfbadbe0f3c8c702e866e21fd95de9ba5812b4d3c6cb727f97ee38010f84d707101e8149ff91a29d4139091e139d8d7d1f3c76c00ad6109b557270122100b27866b50fbe1c9adf6baea9fade39d4ddb76da56e0f7eeec9a549487b8531f7c54dfd699519e3e68716d9e2c275f2382adac19bf859063d0cd31fdfd505db11ec70a9da9bb0444b4cfe47c4579ec0ea0052518defe431ae776bfe1162bf9be89a175b8df8020fec31ddd3972d49edfe4c63704c3376d177e96dc9b450c8dfb237f3c27134d6495b26f582d8232e63d8cb5cdafc94c8c2433dc0d18e84216721a58fc19eef7ac182354344d82aee1932539bffda2a7e0ec9baf033223a98a7154c3c3d79a928cf1d691c4d22800c36991da0aee03537c8e79e5fc3fa3c403fd464070bb584bd4972d4af1f74ec55d1d76841b7ce362b44d061fd2d3091ce2ea0890017ac6f12c554a0d5d84f01238744113dafda7456a6ff1c74328ba2833d916a8159a70efbf2957dd9b14d07c16742e1eed1c566c552e700c5aede316a0f9dfaad3e4cd77bd93ccacd27a70c7760cb9e5e02a1d53961c35187937dec34b60dc22d1e8d120eb00878fe0f7b1bc7267f5b247b996602ff8706045f2d0b0e3b5c885d2a3bbd8c136593f4d4a1777f9f4e12f26c9c161f3c875eb8e33f32621f23cb18426dd4629057a53a86cd4fe115b3a5c550fbdacd6e5769a7887e6f784f57c7086d767c6abfbf997cbb2a4a67f780e931e19c7b9cf8dc658014ac12334113dc95f7841b3d3434437f5f6042cecbc519e3869f913f9d5c2b24de154691efc73df0cc6c13085ac9af2f9af1bfd988dea4b704b5cdfd7236842b98eb6cbbf2e475d0f88bbb681e6e0204db14aa7be0274cc2940d7ad5c6651514c7e94f16453f4af20c530f6557f48441ffb7fd45079c1a1ae9b50de151ead71f3f97b92d7712430513115ff1d3402eff308d5c250994c530d28c9d90fd7aaec2478b004dbeebcd588d11b249e8869de0e622a3fd4766364af82295c4c92038b3d4aaa652918cbfbccd084d5b6a8885a67d3bdef24c1f761da53152061007c3a34ce88debcaafcb005348fdeabaa0353d3fb6c85d769cbb3755a0ed4ee2a92c62300bf22a192e73aca21572c4f71ed1e75838db750c0c70b6918b4cde8072f5140ee482aaf07154da81761952c2d29f70fd09045fc342623ccaf7eb22d214b9e352d48a67efd41be231adde9c1bdc53d24e19f7a355108424b12dc28350bdcec5fe1754ea50442f587819cbc4479b143488b43e20eeae8001c1437f5335b8f1b17190862be5919d32c758c7d236f1bfb06e41bb41728850f3df886706f1efb5608bd3109ab773151ed7e18890267a535f0f4e4c6890a0d99e1ef3d60430e84c4bbe188cb29b41137596d09e6e0094ed5f5ae021071e30eac15da241ae1fbc0f1823696f95ff0e4c94aab840020e8906", 0x1000}, {&(0x7f0000007340)="afb46a25d4479ab94bfd71c0a4956a4ac504b9fff9e573122d00b3769d0103a88b92792c21e049b934ae4b55d7b5278a9afa99d825b32466eedd3526ad7be25dc5975e9536a5d55c4488aa2c7a28ee6c8253b78b4bd0b34762aae16b91750e9d3c81e7d905fc7ead", 0x68}, {&(0x7f00000073c0)="815c677f604d38b731a57ba8cd6bf6b7933d2e2641e620af6928b6f70959682073bff34acf462de72b9e4d6ed44bd91ce4e88ca3316a0e0a8a49a1e794563a09bb1c589bdafcae25e859497e9af18675f4f39175354ff1c10335a92c52b64ef53b8e1b485e6592a8da93e6f22d592df9b52a4b03bc5e944eb6", 0x79}, {&(0x7f0000007440)="a4b2ef59d8b32df7140e99196235fed2bd9414ef4dbc40a67f8e7829c43f1f2147493d7dbd4b4d5d20b6", 0x2a}, {&(0x7f0000007480)="7e61584d0233830ea08bb70d480c6af049f10708d7f620ec2971acaafb1d1e38e8eee997159f37d1fb54f0057de61a0ff5cae5766dffe4", 0x37}, {&(0x7f00000074c0)="636f488f4729968aeed346fe29e069b9dfb7c9f9f072c3a070a09544530dcec18101c755af5b85a812f07142f54a68b49f5ad6594527e83707f5abeb68ada84b12a8ebd6910443aa2c115b1b3ac0e3bcfd4e2e09704a68694459f61deed5c83a602d985ae2256c7a4fc63071165c8e6b71927e52beaa0c0a77401e414443b9f2a8c9209f35f15cadc3f716feea0a7017cf877e534029dc542a71808fe6ea669bdc89e74325ece82355f277e9e11888226eb35581226a5514873ac48603a5ae4714b61946ec3fe31600a9d86fb7d11c5b9baa88460f79d69d552f51331cd05a5fa444c0e44e7e65e0c2a677d78a0e4c8352cdb1194d09f94591", 0xf9}], 0x7, &(0x7f0000007640)={0xb0, 0x116, 0xd0e, "8325797c88ebcae9621324b3b51b70304339d0b8bfcd75d404a4bb83f8e95736b29da149bbf10fd16a0d934081d03cce61479fbd98ccff903f39556f326adb0c9ef5d2e01215298aa8d740496cc8aa190670990548b5e9d22980a2e694bb1a1bb0a604d7897f4bd6d79dae8033e722ea27999ca9f372c30eccbecb35846326b4d7e237d5d58171e0348ee9d0085da753b61c603771a9febbe615b5657fdf764a"}, 0xb0, 0x240000dc}, {&(0x7f0000007700)={0x27, 0x0, 0x0, 0x3, 0x8, 0x4, "46ec65b9013c3120a260c8cbaf5d4be8461c5d1b02d80f9aaa7b90847495d0af3e3b44986166cb7b8208cc03263e358217878f9f4cd9c4413486c4e7cd63f6", 0x2}, 0x60, &(0x7f0000007800)=[{&(0x7f0000007780)="c87e456d54c660592de24db1267342db5f3f8a94c235e463bb7b652ab27969bf256577e6d68f9420ef95bc206f7e2735c0830bf4b7d9dc0f8dfaf1678772035298ed4d6fc3e6b26fc889f3799258575c8bbc46eb58e55741ccd79ff25edbb99034db99dc91f45b276369a218105d6c9a2da982cea0837dcc84891f657a", 0x7d}], 0x1, &(0x7f0000007840)={0x110, 0x111, 0x8, "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"}, 0x110, 0x8001}], 0x9, 0x4000000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)) 00:37:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_WIE_OFF(r6, 0x7010) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000240)={0x3, &(0x7f00000001c0)=[0x804, 0x8, 0xe0b1]}) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000040)='syz1\x00') ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) [ 1446.957240] FAULT_INJECTION: forcing a failure. [ 1446.957240] name failslab, interval 1, probability 0, space 0, times 0 [ 1446.986504] CPU: 1 PID: 27281 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1446.994443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1447.003809] Call Trace: [ 1447.006420] dump_stack+0x13e/0x194 [ 1447.010067] should_fail.cold+0x10a/0x14b [ 1447.014244] should_failslab+0xd6/0x130 [ 1447.018241] kmem_cache_alloc_trace+0x2db/0x7b0 [ 1447.022930] ? up_write+0x17/0x60 [ 1447.026436] ? __debugfs_create_file+0x2c6/0x3c0 [ 1447.031203] ? debugfs_create_file+0x37/0x60 [ 1447.035630] kvm_dev_ioctl+0xdc4/0x1480 [ 1447.039629] ? kvm_put_kvm+0xa90/0xa90 [ 1447.043539] ? kvm_put_kvm+0xa90/0xa90 [ 1447.047441] do_vfs_ioctl+0x75a/0xfe0 [ 1447.051255] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1447.056028] ? ioctl_preallocate+0x1a0/0x1a0 [ 1447.060461] ? security_file_ioctl+0x76/0xb0 [ 1447.064886] ? security_file_ioctl+0x83/0xb0 [ 1447.069315] SyS_ioctl+0x7f/0xb0 [ 1447.072694] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1447.076689] do_syscall_64+0x1d5/0x640 [ 1447.080603] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1447.085804] RIP: 0033:0x45c479 [ 1447.088998] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1447.096721] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 00:37:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x80, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x200, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) [ 1447.104002] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1447.111285] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1447.118568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1447.125849] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000026 00:37:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000020701030000000000000000000000001400078008000140000000000000000000000008350ac734e3927f66b19a43c43d6e32a60f328c34ace8f04a9f7e9474010c2c1a4b1736b8ac8297545d7ceaa48549935999e38abca44353898f67253e160d9d1b3ce67f781f4969a178664983d847f731a459bb21828a089a2f097c170473d76349a8866adc2dd750b9ef09875e61ee8a66e6723667a807d32019320d86c987d906611bd6d0e2ff580f3e5eeb85b227b56713092f58c4852e01"], 0x28}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0xf48, 0x7}) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1447.319964] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1447.342345] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:37:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/user\x00', 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000080)=0x800) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:37:22 executing program 4 (fault-call:1 fault-nth:39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={r5}) 00:37:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0xfffff, r4) request_key(0x0, 0x0, &(0x7f0000000480)='\xf3F|$\x00\xac\xfaC\xe8{\x89\x80F\xc7G\xb7\xc0#z\xa1{\x91[\xd48+_\x1b\xb9\xd3t\x18\xd0\xe6\xfc\xb1+\r\x95\xd3HyV\b\xf5\xa2\xaa\xf2\xefz\x98\xff\xbb2\x1e\x81\x8c\xd3\xab*^\x93\xba\xe8\xe3[W\x82W', r4) keyctl$read(0xb, r4, &(0x7f0000000100)=""/50, 0x32) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, r4, r5, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f0000000340)={0x5, &(0x7f0000000240)=[{0x200, 0x8}, {0x3248, 0x5}, {0xff, 0x2}, {0x5, 0x7f}, {0xfe00, 0x2}]}) r10 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_NODELAY(r10, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r11, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r10, 0x112, 0xd, &(0x7f0000000380), 0x2) 00:37:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb95f}, &(0x7f0000000100)={0x1ff, 0x3, 0x1ff, 0x0, 0x0, 0x1ff, 0x0, 0x6}, 0x0, 0x0) 00:37:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x4000, 0x0) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000040)=[0x81], &(0x7f0000000080)=[0xbf5d, 0xfc5e, 0xfb4a, 0x6bc9, 0x8], &(0x7f0000000180)=[0xfff, 0x1000, 0x80, 0x101, 0x800, 0x3, 0x8, 0x5]}) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) [ 1449.525977] FAULT_INJECTION: forcing a failure. [ 1449.525977] name failslab, interval 1, probability 0, space 0, times 0 [ 1449.587841] CPU: 0 PID: 27314 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1449.595768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1449.605133] Call Trace: [ 1449.607852] dump_stack+0x13e/0x194 [ 1449.611500] should_fail.cold+0x10a/0x14b [ 1449.615676] should_failslab+0xd6/0x130 [ 1449.619652] kmem_cache_alloc+0x2b5/0x770 [ 1449.623814] ? lookup_one_len+0x284/0x3a0 [ 1449.627971] alloc_inode+0xa0/0x170 [ 1449.631597] new_inode_pseudo+0x14/0xe0 [ 1449.635592] new_inode+0x1b/0x40 [ 1449.638951] debugfs_get_inode+0x1a/0x130 [ 1449.643090] __debugfs_create_file+0x93/0x3c0 [ 1449.647576] ? debugfs_create_file+0x37/0x60 [ 1449.651980] kvm_dev_ioctl+0xd71/0x1480 [ 1449.656001] ? kvm_put_kvm+0xa90/0xa90 [ 1449.659905] ? kvm_put_kvm+0xa90/0xa90 [ 1449.663791] do_vfs_ioctl+0x75a/0xfe0 [ 1449.667590] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1449.672336] ? ioctl_preallocate+0x1a0/0x1a0 [ 1449.676750] ? security_file_ioctl+0x76/0xb0 [ 1449.681148] ? security_file_ioctl+0x83/0xb0 [ 1449.685564] SyS_ioctl+0x7f/0xb0 [ 1449.688921] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1449.692891] do_syscall_64+0x1d5/0x640 [ 1449.696781] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1449.701971] RIP: 0033:0x45c479 [ 1449.705153] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1449.712852] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1449.720108] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1449.727368] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 00:37:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x2, 0x8, 0x704, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x800000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x80) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1449.734627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1449.741894] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000027 00:37:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/create\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:22 executing program 4 (fault-call:1 fault-nth:40): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r7, r8/1000+30000}, {r9, r10/1000+10000}}) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1450.032443] FAULT_INJECTION: forcing a failure. [ 1450.032443] name failslab, interval 1, probability 0, space 0, times 0 [ 1450.077484] CPU: 0 PID: 27339 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1450.085417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1450.094784] Call Trace: [ 1450.097391] dump_stack+0x13e/0x194 [ 1450.101047] should_fail.cold+0x10a/0x14b [ 1450.105227] should_failslab+0xd6/0x130 [ 1450.109220] kmem_cache_alloc+0x2b5/0x770 [ 1450.113391] ? alloc_inode+0xa0/0x170 [ 1450.117211] selinux_inode_alloc_security+0xb1/0x2a0 [ 1450.122338] security_inode_alloc+0x8f/0xd0 [ 1450.126685] inode_init_always+0x549/0xaf0 [ 1450.130944] alloc_inode+0x7a/0x170 [ 1450.134591] new_inode_pseudo+0x14/0xe0 [ 1450.138583] new_inode+0x1b/0x40 [ 1450.141969] debugfs_get_inode+0x1a/0x130 [ 1450.146142] __debugfs_create_file+0x93/0x3c0 [ 1450.150684] ? debugfs_create_file+0x37/0x60 [ 1450.155110] kvm_dev_ioctl+0xd71/0x1480 [ 1450.159080] ? kvm_put_kvm+0xa90/0xa90 [ 1450.162964] ? kvm_put_kvm+0xa90/0xa90 [ 1450.166842] do_vfs_ioctl+0x75a/0xfe0 [ 1450.170663] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1450.175412] ? ioctl_preallocate+0x1a0/0x1a0 [ 1450.179826] ? security_file_ioctl+0x76/0xb0 [ 1450.184225] ? security_file_ioctl+0x83/0xb0 [ 1450.188639] SyS_ioctl+0x7f/0xb0 [ 1450.192011] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1450.195980] do_syscall_64+0x1d5/0x640 [ 1450.199868] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1450.205048] RIP: 0033:0x45c479 [ 1450.208225] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1450.215928] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 00:37:23 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x100, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000380)=@int=0x93f, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='dctcp-reno\x00', 0xb) r5 = dup(r3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$ASHMEM_GET_PIN_STATUS(r7, 0x7709, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x40) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r8}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r10, 0x40086414, &(0x7f0000000240)={0x3, 0x59e}) dup2(r9, r1) select(0x40, &(0x7f0000000080)={0x200, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0) [ 1450.223190] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1450.230454] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1450.237729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1450.244990] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000028 00:37:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) 00:37:25 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:37:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x101300, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x6, 0x4) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:25 executing program 4 (fault-call:1 fault-nth:41): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x80, 0x5, 0x9, &(0x7f0000ffb000/0x2000)=nil, 0xadb5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/90, 0x5a}], 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) 00:37:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x3}, &(0x7f0000000100)={0x1ff, 0xfffffffffffffffb}, 0x0, 0x0) 00:37:25 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) dup(r1) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) [ 1452.631535] FAULT_INJECTION: forcing a failure. [ 1452.631535] name failslab, interval 1, probability 0, space 0, times 0 [ 1452.706683] CPU: 1 PID: 27368 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1452.714729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1452.724092] Call Trace: [ 1452.726706] dump_stack+0x13e/0x194 [ 1452.730359] should_fail.cold+0x10a/0x14b [ 1452.734538] should_failslab+0xd6/0x130 [ 1452.738533] kmem_cache_alloc+0x2b5/0x770 [ 1452.742699] ? alloc_inode+0xa0/0x170 [ 1452.746520] selinux_inode_alloc_security+0xb1/0x2a0 [ 1452.751641] security_inode_alloc+0x8f/0xd0 [ 1452.755983] inode_init_always+0x549/0xaf0 [ 1452.760236] alloc_inode+0x7a/0x170 [ 1452.763883] new_inode_pseudo+0x14/0xe0 [ 1452.767872] new_inode+0x1b/0x40 [ 1452.771253] debugfs_get_inode+0x1a/0x130 [ 1452.775420] __debugfs_create_file+0x93/0x3c0 [ 1452.779939] ? debugfs_create_file+0x37/0x60 [ 1452.784376] kvm_dev_ioctl+0xd71/0x1480 [ 1452.788422] ? kvm_put_kvm+0xa90/0xa90 [ 1452.792335] ? kvm_put_kvm+0xa90/0xa90 [ 1452.796257] do_vfs_ioctl+0x75a/0xfe0 [ 1452.800183] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1452.804968] ? ioctl_preallocate+0x1a0/0x1a0 [ 1452.809483] ? security_file_ioctl+0x76/0xb0 [ 1452.813909] ? security_file_ioctl+0x83/0xb0 [ 1452.818340] SyS_ioctl+0x7f/0xb0 [ 1452.821724] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1452.825720] do_syscall_64+0x1d5/0x640 [ 1452.829632] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1452.834831] RIP: 0033:0x45c479 [ 1452.838026] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1452.845741] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 00:37:25 executing program 1: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/23, 0x17}], 0x1, &(0x7f0000000480)=""/44, 0x2c}, 0x40000102) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000600)={0x0, 0x1000}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000940)={r1, 0xef, "1581ab9ff7e34113375c635e84edf97f45535c917d88a994ae0bbfd433f11b7b1538db3c87da1e2790fb68269c89f24b594f9873812a82930d0a82dde163c809fcba1b52c240a6227abc34ba410cc5f995513a652087d684af00dc56a7e67aa9eddf1e35f97072d801af763d1266d6c61ef74d54b1de5a5f370b326182d2cba54fa5cbe520201549d71be7e6df37211b511297a4d32b4ccc8fa2d7683d54f691ca6e1ddfcc1abd976f88220ee018442fedc37fa477e669d2f12b919b7e51609fc5f39022d5a4fa97ad0b0d68fa49c91f4567b9791f202424c0a92c7afb87cdcb43a60c89a635e998c1010f0dfcc65a"}, &(0x7f0000000780)=0xf7) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r7, r2) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r8) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f0000000340), 0x41395527) r11 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x20500, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x4000, 0xfff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r10, &(0x7f0000000640)='./file0\x00', 0x0, 0x800, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r11, &(0x7f00000006c0)=ANY=[@ANYBLOB="8d00000008010000006e000400008000000102000000b1ae77fb00a0b8beed003000050000000000000000030073797a20005e6d643573756d766d6e657431252773656c696e75785e76626f786e6574312f0a012f6465762f7a65726f000e006e65742f6d6366696c74657236000a006e49742f726f75746500575ac0c8cdc2c032f812c3513b42963ce6671839d5c0a1000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32], 0x8d) fchown(0xffffffffffffffff, r9, r13) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1452.853024] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1452.860314] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1452.867599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1452.874881] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000029 00:37:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000240)=""/107) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000040027d0ff6638395030000000000000000000800024000"/40], 0x28}}, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, './cgroup/syz1\x00'}, {0x20, 'mime_type%security'}, {0x20, './cgroup/syz1\x00'}, {0x20, '/dev/dri/card#\x00'}, {0x20, './cgroup/syz1\x00'}, {}, {0x20, 'keyringlo'}, {0x20, '/dev/dri/card#\x00'}], 0xa, "69863d12f836bed906d91da025e1"}, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) 00:37:25 executing program 4 (fault-call:1 fault-nth:42): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1453.128008] FAULT_INJECTION: forcing a failure. [ 1453.128008] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1453.155391] CPU: 0 PID: 27397 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1453.163338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1453.172704] Call Trace: [ 1453.175311] dump_stack+0x13e/0x194 [ 1453.178966] should_fail.cold+0x10a/0x14b [ 1453.183143] __alloc_pages_nodemask+0x1bf/0x700 [ 1453.187916] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1453.192959] ? inode_doinit_with_dentry+0x735/0xe30 [ 1453.197995] ? lockref_get+0x11/0x50 [ 1453.201732] alloc_pages_current+0xe7/0x1e0 [ 1453.206085] __get_free_pages+0xb/0x40 [ 1453.209989] inode_doinit_with_dentry+0x7b6/0xe30 [ 1453.214853] ? selinux_cred_free+0x70/0x70 [ 1453.219322] ? put_itimerspec64+0x190/0x190 [ 1453.223908] selinux_d_instantiate+0x23/0x30 [ 1453.228336] security_d_instantiate+0x54/0xd0 [ 1453.232848] d_instantiate+0x5a/0x90 [ 1453.236585] __debugfs_create_file+0x15b/0x3c0 [ 1453.241188] ? debugfs_create_file+0x37/0x60 [ 1453.245712] kvm_dev_ioctl+0xd71/0x1480 [ 1453.249713] ? kvm_put_kvm+0xa90/0xa90 [ 1453.253621] ? kvm_put_kvm+0xa90/0xa90 [ 1453.257550] do_vfs_ioctl+0x75a/0xfe0 [ 1453.261373] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1453.266262] ? ioctl_preallocate+0x1a0/0x1a0 [ 1453.270802] ? security_file_ioctl+0x76/0xb0 00:37:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) r4 = dup2(r3, 0xffffffffffffffff) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000340)={@ethernet={0x1, @multicast}, {&(0x7f0000000040)=""/51, 0x33}, &(0x7f0000000180), 0x22}, 0xa0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x26, &(0x7f0000000240)=ANY=[@ANYBLOB="18cecfff894254000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfb, &(0x7f00001a7f05)=""/239, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x21) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r4, 0x0, 0x2, &(0x7f0000000240)=')\x00', r6}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r2, 0x0, 0x1, &(0x7f0000000080)='\x00', r6}, 0x30) sched_setattr(r7, &(0x7f0000000100)={0x38, 0x0, 0x10000021, 0x1000, 0x6, 0x4, 0x0, 0x101, 0x6, 0x40}, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1453.275235] ? security_file_ioctl+0x83/0xb0 [ 1453.279665] SyS_ioctl+0x7f/0xb0 [ 1453.283046] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1453.287167] do_syscall_64+0x1d5/0x640 [ 1453.291081] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1453.296300] RIP: 0033:0x45c479 [ 1453.299492] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1453.307227] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1453.314521] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1453.321799] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 00:37:26 executing program 4 (fault-call:1 fault-nth:43): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1453.329077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1453.336357] R13: 0000000000000390 R14: 00000000004c5c71 R15: 000000000000002a [ 1453.443894] FAULT_INJECTION: forcing a failure. [ 1453.443894] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.468068] CPU: 0 PID: 27406 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1453.475995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1453.485360] Call Trace: [ 1453.487970] dump_stack+0x13e/0x194 [ 1453.491621] should_fail.cold+0x10a/0x14b [ 1453.495791] should_failslab+0xd6/0x130 [ 1453.499784] kmem_cache_alloc_trace+0x2db/0x7b0 [ 1453.504475] ? up_write+0x17/0x60 [ 1453.507962] ? __debugfs_create_file+0x2c6/0x3c0 [ 1453.512745] ? debugfs_create_file+0x37/0x60 [ 1453.517172] kvm_dev_ioctl+0xdc4/0x1480 [ 1453.521179] ? kvm_put_kvm+0xa90/0xa90 [ 1453.525084] ? kvm_put_kvm+0xa90/0xa90 [ 1453.528988] do_vfs_ioctl+0x75a/0xfe0 [ 1453.532805] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1453.537578] ? ioctl_preallocate+0x1a0/0x1a0 [ 1453.542020] ? security_file_ioctl+0x76/0xb0 [ 1453.546444] ? security_file_ioctl+0x83/0xb0 [ 1453.550873] SyS_ioctl+0x7f/0xb0 [ 1453.554259] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1453.558254] do_syscall_64+0x1d5/0x640 [ 1453.562277] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1453.567483] RIP: 0033:0x45c479 [ 1453.570685] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1453.578406] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1453.585689] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1453.592972] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1453.600254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1453.607538] R13: 0000000000000390 R14: 00000000004c5c71 R15: 000000000000002b 00:37:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r2}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r3, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ocfs2_control\x00', 0x44100, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000480)={0x6, 0x11, 0x2, 0x8, "f7fff676798649a01cf74b9fc91a26bb44bcb4fd74cca3bcf12ae40127ac616b"}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) sendmsg$nl_generic(r6, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x160, 0x2e, 0x10, 0x70bd2b, 0x25dfdbfe, {0x14}, [@typed={0x4, 0x91}, @generic="abccb2d937e3b419b94c9466e2f48abb72dea5d174a0818b5523ac9d5c6f25f097c79da8964793feef8d51174cc4dfd21602f40f69a4d7136f90b8b12b3f16be5efbd588bb590a0cf09de9b0ab57ef042b352ed524757d2f95da1d5933621fc25b7afbd4f8b69c6d4225b2ab9da4328bdcfee98dca35e43c29596d2346feef5c779c8eae5c1567ab08475cc41ddb3bcc6d2bc0b5c9556cf8ea14b751fa691bbeaaf7befeb1571813a6e7da25e7b0a109fc8bf578f499c1f7f5b042e64856412c41382fd50537cd34895c00fcc33f03d9372312be73661c150501e62c3431dd8b138e", @generic="9434155fb8f9e5ccf08bca76c6b915310caec0bb2ec8ad79120d9c3abfd69e9c22e7b3e62048d3152af2c13053c72653fef25c38c1040f7ee63fe8f527fca9d0dec40bd9f57b5459838dc1896db7e0b6b2", @generic="158a687070795c", @nested={0xc, 0x7b, 0x0, 0x1, [@typed={0x8, 0x5d, 0x0, 0x0, @uid=r8}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x76131b2305bb0474) 00:37:26 executing program 4 (fault-call:1 fault-nth:44): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x282001, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000340)={0x3, 0x478e, 0xc8, &(0x7f0000000240)="5ddbc7d9bb2d834bdb5e1799047613a3b2750061c50ec148c45d16530892d2a915ebae3d165511a1c1a95f028bea9d1c0296a355e54eb2123657ad040f3d085a0f7badba3cc811c29d19cd77c03369f37ca0d195ae86173252bcf9a81a030389a51b72f97178213f3a34f6d0e9b9d774eac628a168bf747884f8779093a5db85df1a78fe0f75fdfdf5a6ab3be22a0fffe9a57c457d3cf230eaa87b29eacb7a99cdf758d0ba54479dc305da310c0eac91a2d2924f81c3a2f335a5469fe9d2ee035910e42c583063f1"}) r4 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r6, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000300)=0x3, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000040)={r10}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000001c0)={r10, 0x2, 0x20}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000280)={r11, 0x4}, &(0x7f00000002c0)=0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r12, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1453.798956] FAULT_INJECTION: forcing a failure. [ 1453.798956] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.810636] CPU: 1 PID: 27416 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1453.818533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1453.827904] Call Trace: [ 1453.830511] dump_stack+0x13e/0x194 [ 1453.834159] should_fail.cold+0x10a/0x14b [ 1453.838335] should_failslab+0xd6/0x130 [ 1453.842333] kmem_cache_alloc+0x2b5/0x770 [ 1453.846501] ? __d_lookup+0x3b4/0x670 [ 1453.850344] ? mark_held_locks+0xa6/0xf0 [ 1453.854433] __d_alloc+0x2a/0x9b0 [ 1453.858019] d_alloc+0x46/0x250 [ 1453.861320] __lookup_hash+0x51/0x180 [ 1453.865145] lookup_one_len+0x27c/0x3a0 [ 1453.869136] ? __lookup_hash+0x180/0x180 [ 1453.873218] start_creating+0xa1/0x1c0 [ 1453.877124] __debugfs_create_file+0x4f/0x3c0 [ 1453.881637] ? debugfs_create_file+0x37/0x60 [ 1453.886061] kvm_dev_ioctl+0xd71/0x1480 [ 1453.890056] ? kvm_put_kvm+0xa90/0xa90 [ 1453.893961] ? kvm_put_kvm+0xa90/0xa90 [ 1453.897858] do_vfs_ioctl+0x75a/0xfe0 [ 1453.901670] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1453.906435] ? ioctl_preallocate+0x1a0/0x1a0 [ 1453.910861] ? security_file_ioctl+0x76/0xb0 [ 1453.915278] ? security_file_ioctl+0x83/0xb0 [ 1453.919753] SyS_ioctl+0x7f/0xb0 [ 1453.923131] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1453.927120] do_syscall_64+0x1d5/0x640 [ 1453.931031] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1453.936227] RIP: 0033:0x45c479 [ 1453.939418] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1453.947135] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1453.954416] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1453.961697] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1453.968977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1453.976256] R13: 0000000000000390 R14: 00000000004c5c71 R15: 000000000000002c 00:37:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0xc, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=""/84, 0x54) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:26 executing program 4 (fault-call:1 fault-nth:45): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SIOCGETLINKNAME(r8, 0x89e0, &(0x7f00000002c0)={0x4, 0x3}) fcntl$setown(r0, 0x8, r6) fcntl$getownex(r5, 0x10, &(0x7f0000000240)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$BLKPBSZGET(r11, 0x127b, &(0x7f0000000280)) dup2(r9, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1, 0x0, 0x40}, 0x0, 0x0) [ 1454.154145] FAULT_INJECTION: forcing a failure. [ 1454.154145] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.173755] CPU: 0 PID: 27431 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1454.181687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1454.191053] Call Trace: [ 1454.193654] dump_stack+0x13e/0x194 [ 1454.197302] should_fail.cold+0x10a/0x14b [ 1454.201590] should_failslab+0xd6/0x130 [ 1454.205581] kmem_cache_alloc+0x2b5/0x770 [ 1454.209749] ? alloc_inode+0xa0/0x170 [ 1454.213566] selinux_inode_alloc_security+0xb1/0x2a0 [ 1454.218710] security_inode_alloc+0x8f/0xd0 [ 1454.223046] inode_init_always+0x549/0xaf0 [ 1454.227298] alloc_inode+0x7a/0x170 [ 1454.230945] new_inode_pseudo+0x14/0xe0 [ 1454.234930] new_inode+0x1b/0x40 [ 1454.238307] debugfs_get_inode+0x1a/0x130 [ 1454.242469] __debugfs_create_file+0x93/0x3c0 [ 1454.246981] ? debugfs_create_file+0x37/0x60 00:37:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x7}, &(0x7f00000001c0)={0x1ff}, 0x0, 0x0) [ 1454.251589] kvm_dev_ioctl+0xd71/0x1480 [ 1454.255591] ? kvm_put_kvm+0xa90/0xa90 [ 1454.259505] ? kvm_put_kvm+0xa90/0xa90 [ 1454.263438] do_vfs_ioctl+0x75a/0xfe0 [ 1454.267262] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1454.272058] ? ioctl_preallocate+0x1a0/0x1a0 [ 1454.276494] ? security_file_ioctl+0x76/0xb0 [ 1454.280917] ? security_file_ioctl+0x83/0xb0 [ 1454.285343] SyS_ioctl+0x7f/0xb0 [ 1454.288721] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1454.292707] do_syscall_64+0x1d5/0x640 [ 1454.296618] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1454.301813] RIP: 0033:0x45c479 [ 1454.305007] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1454.312725] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1454.320006] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1454.327290] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1454.334567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1454.341844] R13: 0000000000000390 R14: 00000000004c5c71 R15: 000000000000002d 00:37:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x5) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:29 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 00:37:29 executing program 4 (fault-call:1 fault-nth:46): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3e61729d, 0x9, 0x0, r1}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:29 executing program 2: setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc0, &(0x7f0000000240)="1b5a73f6a56fe3b2a39e15282b8549140f7e283566c3b3163d3b24006e2c748cfd233f0c88827275f978c63a2538a4ce984a7ecd1ee4980f4455635d551e854cb5ecd37f14c22a3269ef250d3a42c7c521269718a899260bcbd0ba0cabce7c71d72d89d0db4b5d185681e040acbca11ed963d28dfd9ad0fef18586f6873e4ba7f0d405b3030dfc7b12d10ea2bd57ed6a9eb86a18b0d2b513ae6b7841eb0fc6b123b8e5674a1f23e7bbe880014bb35d2378f417220ff5b4f4e1056713b4f1cfcddc3b967da8aaf7542b744d0b74d899185d9fd5ef0e95e69a3c6578339499d16d52050491a050f25f5cf80921adb8bf", 0xef) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_CONTROL(r5, 0x40086414, &(0x7f00000001c0)={0x1, 0x7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000340)={'vlan1\x00', 0xfffffffc}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r7, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1456.363844] FAULT_INJECTION: forcing a failure. [ 1456.363844] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1456.399986] CPU: 0 PID: 27458 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1456.407915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1456.417363] Call Trace: [ 1456.419969] dump_stack+0x13e/0x194 [ 1456.423612] should_fail.cold+0x10a/0x14b [ 1456.427812] __alloc_pages_nodemask+0x1bf/0x700 [ 1456.432508] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1456.437545] ? inode_doinit_with_dentry+0x735/0xe30 [ 1456.442581] ? lockref_get+0x11/0x50 [ 1456.446313] alloc_pages_current+0xe7/0x1e0 [ 1456.450651] __get_free_pages+0xb/0x40 [ 1456.454555] inode_doinit_with_dentry+0x7b6/0xe30 [ 1456.459416] ? selinux_cred_free+0x70/0x70 [ 1456.463664] ? put_itimerspec64+0x190/0x190 [ 1456.468005] selinux_d_instantiate+0x23/0x30 [ 1456.472431] security_d_instantiate+0x54/0xd0 [ 1456.476962] d_instantiate+0x5a/0x90 [ 1456.480700] __debugfs_create_file+0x15b/0x3c0 [ 1456.485307] ? debugfs_create_file+0x37/0x60 [ 1456.489741] kvm_dev_ioctl+0xd71/0x1480 [ 1456.493735] ? kvm_put_kvm+0xa90/0xa90 [ 1456.497648] ? kvm_put_kvm+0xa90/0xa90 [ 1456.501580] do_vfs_ioctl+0x75a/0xfe0 [ 1456.505402] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1456.510172] ? ioctl_preallocate+0x1a0/0x1a0 [ 1456.514615] ? security_file_ioctl+0x76/0xb0 [ 1456.519044] ? security_file_ioctl+0x83/0xb0 [ 1456.523477] SyS_ioctl+0x7f/0xb0 [ 1456.526861] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1456.530854] do_syscall_64+0x1d5/0x640 [ 1456.534766] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1456.539968] RIP: 0033:0x45c479 [ 1456.543167] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1456.550886] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1456.558164] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1456.565441] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1456.572719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1456.580006] R13: 0000000000000390 R14: 00000000004c5c71 R15: 000000000000002e 00:37:29 executing program 4 (fault-call:1 fault-nth:47): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x101242, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f00000002c0)={0x0, 0x10001, 0x2, 0x2, 0x8, 0x1, 0x92a}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000240)=""/101) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x132a5cc5919fef36, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x1, r4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r6, r0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x100000000000}, &(0x7f0000000100)={0x1ff, 0xfffffffffffffffa, 0xef, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) [ 1456.697598] FAULT_INJECTION: forcing a failure. [ 1456.697598] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1456.716837] CPU: 1 PID: 27471 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1456.724761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1456.734136] Call Trace: [ 1456.736746] dump_stack+0x13e/0x194 [ 1456.740395] should_fail.cold+0x10a/0x14b [ 1456.744573] __alloc_pages_nodemask+0x1bf/0x700 [ 1456.749264] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1456.754300] ? inode_doinit_with_dentry+0x735/0xe30 [ 1456.759340] ? lockref_get+0x11/0x50 [ 1456.763085] alloc_pages_current+0xe7/0x1e0 [ 1456.767432] __get_free_pages+0xb/0x40 [ 1456.771343] inode_doinit_with_dentry+0x7b6/0xe30 [ 1456.776223] ? selinux_cred_free+0x70/0x70 [ 1456.780479] ? put_itimerspec64+0x190/0x190 [ 1456.784824] selinux_d_instantiate+0x23/0x30 [ 1456.789254] security_d_instantiate+0x54/0xd0 [ 1456.793765] d_instantiate+0x5a/0x90 [ 1456.797511] __debugfs_create_file+0x15b/0x3c0 [ 1456.802111] ? debugfs_create_file+0x37/0x60 [ 1456.806542] kvm_dev_ioctl+0xd71/0x1480 [ 1456.810543] ? kvm_put_kvm+0xa90/0xa90 [ 1456.814453] ? kvm_put_kvm+0xa90/0xa90 [ 1456.818360] do_vfs_ioctl+0x75a/0xfe0 [ 1456.822181] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1456.826959] ? ioctl_preallocate+0x1a0/0x1a0 [ 1456.831420] ? security_file_ioctl+0x76/0xb0 [ 1456.835843] ? security_file_ioctl+0x83/0xb0 [ 1456.840267] SyS_ioctl+0x7f/0xb0 [ 1456.843651] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1456.847659] do_syscall_64+0x1d5/0x640 [ 1456.851572] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1456.856786] RIP: 0033:0x45c479 [ 1456.859980] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1456.867698] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1456.874977] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1456.882257] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1456.889540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 00:37:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) fdatasync(r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x4}]}, 0x18}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000280)={0x980000, 0x7ff, 0x7, r7, 0x0, &(0x7f0000000240)={0x9c0001, 0xffffff00, [], @string=&(0x7f00000001c0)=0x1}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000380)={r4, 0x0, r0}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r8, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:29 executing program 1: rt_sigaction(0x3c, &(0x7f0000000280)={&(0x7f00000001c0)="36c0e900c442e1f79cae00000081704ac4c3f961e676c401d173de0ac462fd17d82e660f383b8c9478000000c4a28137b8f1ffffff65b60066460f382454a726", 0xa0000004, &(0x7f0000000240)="8fe9a8010af2ab2e67672e26f2400fe6c0430f38cb3ec4425106be020000008f8810972b00c481c957a9010000006744acc40279187f006664f3e18a", {[0x4]}}, &(0x7f0000000340)={&(0x7f00000002c0)="673666470f57ecdb9200000021f20f1a692344dc904133ffff0f2effc421c5546ef10fb3540afe362e66420fdad940d34096c46165d3cb", 0x0, &(0x7f0000000300)="c4417e117800c4218912183e2ef009a33369d96718658bc4419d7dac5301000000410fa53572910000673e43d9b8f8ffffff4011a7be0000004d0fae0bf2a4"}, 0x8, &(0x7f0000000380)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f00000003c0)='/dev/dri/card#\x00', 0x0, 0xc001) r2 = dup(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000400)={0x1, 0x5, 0x5, 0x81}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000200)={r5}) fremovexattr(r3, &(0x7f0000000440)=@random={'os2.', '/dev/dri/card#\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/enforce\x00', 0x48800, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r8, 0x713}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r8, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8001) ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video(&(0x7f00000004c0)='/dev/video#\x00', 0xffffffff, 0x420200) dup2(r9, 0xffffffffffffffff) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, r1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r7 = accept(r6, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000001c0)=0x80) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x4e22, 0x4, @mcast1, 0x1f}, {0xa, 0x4e21, 0x8, @remote, 0x9}, 0x5, [0x8, 0x0, 0x8000, 0xfffffbff, 0x3, 0x101, 0x80, 0x63]}, 0x5c) [ 1456.896818] R13: 0000000000000390 R14: 00000000004c5c71 R15: 000000000000002f 00:37:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:29 executing program 4 (fault-call:1 fault-nth:48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1457.060270] FAULT_INJECTION: forcing a failure. [ 1457.060270] name failslab, interval 1, probability 0, space 0, times 0 [ 1457.104350] CPU: 1 PID: 27489 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1457.112283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1457.121654] Call Trace: [ 1457.124258] dump_stack+0x13e/0x194 [ 1457.127907] should_fail.cold+0x10a/0x14b [ 1457.132081] should_failslab+0xd6/0x130 [ 1457.136071] kmem_cache_alloc+0x2b5/0x770 [ 1457.140240] ? __d_lookup+0x3b4/0x670 [ 1457.144060] ? mark_held_locks+0xa6/0xf0 [ 1457.148140] __d_alloc+0x2a/0x9b0 [ 1457.151610] d_alloc+0x46/0x250 [ 1457.154903] __lookup_hash+0x51/0x180 [ 1457.158721] lookup_one_len+0x27c/0x3a0 [ 1457.162708] ? __lookup_hash+0x180/0x180 [ 1457.166787] start_creating+0xa1/0x1c0 [ 1457.170691] __debugfs_create_file+0x4f/0x3c0 [ 1457.175204] ? debugfs_create_file+0x37/0x60 [ 1457.179630] kvm_dev_ioctl+0xd71/0x1480 [ 1457.183624] ? kvm_put_kvm+0xa90/0xa90 [ 1457.187529] ? kvm_put_kvm+0xa90/0xa90 [ 1457.191435] do_vfs_ioctl+0x75a/0xfe0 [ 1457.195254] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1457.200053] ? ioctl_preallocate+0x1a0/0x1a0 [ 1457.204494] ? security_file_ioctl+0x76/0xb0 [ 1457.208918] ? security_file_ioctl+0x83/0xb0 [ 1457.213343] SyS_ioctl+0x7f/0xb0 [ 1457.216723] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1457.220712] do_syscall_64+0x1d5/0x640 [ 1457.224620] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1457.229818] RIP: 0033:0x45c479 [ 1457.233010] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1457.240728] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1457.248006] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 00:37:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x28002) connect$x25(r6, &(0x7f0000000240)={0x9, @remote={[], 0x2}}, 0x12) [ 1457.255287] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1457.262565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1457.269847] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000030 00:37:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000002070103000000000000e4a095399b97ea469d319a41541451000000000000140007800800014000040000080002400000000045aa73e322a1"], 0x28}}, 0x0) r2 = fcntl$getown(r1, 0x9) ptrace$cont(0x18, r2, 0x3, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:37:32 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCGETS(r1, 0x5401, &(0x7f00000001c0)) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000240)={0xb620, 0x101}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x26800, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_QUERYCTRL(r7, 0xc0445624, &(0x7f0000000340)={0x2, 0x100, "bd85e69a3906fdf1dad4e64f3da895a42f5b2cae46cb6b4320cf706251e6c9f2", 0x4, 0xffff, 0x1, 0x7, 0x124}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r8}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) symlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000300)=0x4) dup2(r9, r2) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 00:37:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf, &(0x7f00000001c0)='/dev/dri/card#\x00'}, 0x30) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r5, 0x4, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r6, r0) 00:37:32 executing program 4 (fault-call:1 fault-nth:49): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1459.387604] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1459.449356] FAULT_INJECTION: forcing a failure. [ 1459.449356] name failslab, interval 1, probability 0, space 0, times 0 00:37:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000240)={0x3, 0x4, 0x3ff, 0x1, 0x5, 0x6}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f00000001c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0xfffffffffffffeb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$RTC_VL_READ(r7, 0x80047013, &(0x7f0000000800)) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) ptrace$peeksig(0x4209, r9, &(0x7f0000000340)={0x2, 0x1, 0x9}, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]) bind$netlink(r8, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbff, 0x8000000}, 0xc) [ 1459.493068] CPU: 0 PID: 27509 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1459.500996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1459.510357] Call Trace: [ 1459.512961] dump_stack+0x13e/0x194 [ 1459.516610] should_fail.cold+0x10a/0x14b [ 1459.520780] should_failslab+0xd6/0x130 [ 1459.524792] kmem_cache_alloc+0x2b5/0x770 [ 1459.528956] ? __d_lookup+0x3b4/0x670 [ 1459.532774] ? mark_held_locks+0xa6/0xf0 [ 1459.536853] __d_alloc+0x2a/0x9b0 [ 1459.540349] d_alloc+0x46/0x250 [ 1459.543648] __lookup_hash+0x51/0x180 [ 1459.547477] lookup_one_len+0x27c/0x3a0 [ 1459.551471] ? __lookup_hash+0x180/0x180 [ 1459.555585] start_creating+0xa1/0x1c0 [ 1459.559487] __debugfs_create_file+0x4f/0x3c0 [ 1459.564004] ? debugfs_create_file+0x37/0x60 [ 1459.568537] kvm_dev_ioctl+0xd71/0x1480 [ 1459.572536] ? kvm_put_kvm+0xa90/0xa90 [ 1459.576465] ? kvm_put_kvm+0xa90/0xa90 [ 1459.580371] do_vfs_ioctl+0x75a/0xfe0 [ 1459.586282] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1459.591060] ? ioctl_preallocate+0x1a0/0x1a0 [ 1459.595500] ? security_file_ioctl+0x76/0xb0 [ 1459.599925] ? security_file_ioctl+0x83/0xb0 [ 1459.604357] SyS_ioctl+0x7f/0xb0 [ 1459.607738] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1459.611730] do_syscall_64+0x1d5/0x640 [ 1459.615639] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1459.620839] RIP: 0033:0x45c479 [ 1459.624033] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1459.631887] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1459.639168] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1459.646450] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1459.653732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1459.661018] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000031 [ 1459.685282] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 00:37:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x400000) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) quotactl(0x1, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000240)="380482c2d2399fff50bf910f89b41c6f9da9a840066244195edbcfd072c790d81a7ce7430dfb6da220d73bfa4518d70c76aed9d840c08dbbc917d4830a1dc2405c74c4e011e2cdd7a0f1a27ab4fb575e1d1be15cc8165d380f8a6a9d4a29bd013a1a3755f877640805ddc139f308df074a309651b13545e6ebb7c66a92e75844231e65a4b23e56ff770e6338f73490b887b9401471aba499af32b4123193293ab392b73d6ad4467dfac78b5a06c3b53299c980b66da3a9312945b909a9ed10cf97bee48ffba2047390b7d3ca8d50a296a0706ad983d7817388e7") r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r7, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001280)=ANY=[@ANYBLOB="73797a311606e545dbfdacab38fd0b8b6a30e30a657f1aaf893fc2ebe41ad7508bf449b8fcb60652bc08ae9cb3e772dd1f43400e448a615f94b453647b6a911e781e89fcaf9c9e5c9b5c8d27c160a49bcc98280000000080000000000000f3ffffff00"], 0x66) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$HDIO_GETGEO(r6, 0x301, &(0x7f0000001240)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r7, r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) r8 = syz_open_dev$media(&(0x7f0000001300)='/dev/media#\x00', 0x6, 0x181) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="1300000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db881e37b4599c9b7cbbeeea8be34a"], 0x48}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x23, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r12, @ANYBLOB="e5ffffff0000000008001c00ef000000"], 0x28}}, 0x0) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000001440)) setuid(r14) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000001340)={{{@in=@rand_addr=0xff, @in=@multicast1, 0x4e24, 0x100, 0x4e21, 0x0, 0x2, 0x0, 0x80, 0x2, r12, r14}, {0x9, 0x4, 0x0, 0xdb75, 0x4, 0x401, 0x4, 0xb}, {0x7c, 0x1, 0x1, 0x2}, 0xfffff045, 0x6e6bb4, 0x2, 0x1, 0x1, 0x1}, {{@in=@multicast2, 0x4d5, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x1, 0x3f, 0x1, 0x6fb, 0x81}}, 0xe8) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000240)) 00:37:32 executing program 4 (fault-call:1 fault-nth:50): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000300)='/dev/dri/card#\x00', 0x0, 0x1bf3a57ef78faba9) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r6 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x200) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, &(0x7f0000000240)={0x0, @data}) [ 1459.921993] FAULT_INJECTION: forcing a failure. [ 1459.921993] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1459.933846] CPU: 0 PID: 27531 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1459.941737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1459.951103] Call Trace: [ 1459.953712] dump_stack+0x13e/0x194 [ 1459.957360] should_fail.cold+0x10a/0x14b [ 1459.961529] __alloc_pages_nodemask+0x1bf/0x700 [ 1459.966223] ? save_trace+0x290/0x290 [ 1459.970145] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1459.975201] cache_grow_begin+0x7b/0x410 [ 1459.979284] kmem_cache_alloc+0x695/0x770 [ 1459.983457] ? lookup_one_len+0x284/0x3a0 [ 1459.987626] alloc_inode+0xa0/0x170 [ 1459.991282] new_inode_pseudo+0x14/0xe0 [ 1459.995280] new_inode+0x1b/0x40 [ 1459.998665] debugfs_get_inode+0x1a/0x130 [ 1460.002837] __debugfs_create_file+0x93/0x3c0 [ 1460.007347] ? debugfs_create_file+0x37/0x60 [ 1460.011773] kvm_dev_ioctl+0xd71/0x1480 [ 1460.015771] ? kvm_put_kvm+0xa90/0xa90 [ 1460.019678] ? kvm_put_kvm+0xa90/0xa90 [ 1460.023578] do_vfs_ioctl+0x75a/0xfe0 [ 1460.027392] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1460.032165] ? ioctl_preallocate+0x1a0/0x1a0 [ 1460.036601] ? security_file_ioctl+0x76/0xb0 [ 1460.041021] ? security_file_ioctl+0x83/0xb0 [ 1460.045451] SyS_ioctl+0x7f/0xb0 [ 1460.048951] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1460.052962] do_syscall_64+0x1d5/0x640 [ 1460.056877] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1460.062077] RIP: 0033:0x45c479 [ 1460.065273] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1460.072991] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1460.080271] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1460.087553] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1460.094833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1460.102112] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000032 00:37:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/sockcreate\x00') getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x3, 0x7f, 0x7, 0x7f7, 0x89, 0x9, 0x4, {0x0, @in6={{0xa, 0x4e22, 0xc595, @local, 0x7fff}}, 0x6, 0x3, 0x9, 0x400, 0x7fffffff}}, &(0x7f0000000300)=0xb0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000340)={r6, 0x1}, &(0x7f0000000380)=0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$UHID_CREATE(r9, &(0x7f0000000400)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000003c0)=""/36, 0x24, 0xffff, 0x9, 0xee5, 0x0, 0xff}}, 0x120) dup2(r7, r0) select(0x40, &(0x7f0000000080)={0x0, 0x10001, 0xfff, 0x0, 0x0, 0x7}, &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x3f, 0x10000000000000, 0x8}, &(0x7f00000001c0)={0x1ff, 0xfffffffffffffffd, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) 00:37:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000280)={&(0x7f00000001c0)=[0x1000, 0x7, 0x1ff, 0x7, 0xffffff88, 0x401], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x20, 0xbbbbbbbb}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:35 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x5, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = gettid() r2 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, r2) wait4(0x0, 0x0, 0x80000002, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000180)=@get={0x1, &(0x7f00000000c0)=""/135, 0xfffffffffffffffb}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000200)={0x0, @l2={0x1f, 0x7ff, @fixed={[], 0x10}, 0x0, 0x2}, @ax25={0x3, @default}, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xa68, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)='ip6tnl0\x00', 0x20, 0x100000001, 0x7}) 00:37:35 executing program 4 (fault-call:1 fault-nth:51): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2a9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x5d, "54526ca927ce22d4064f307ac5f42fae1f2519e41167914303eaaea3110edd56f5d98c8e363c85592db1f8e5c1e665ea538c987a7afb5a8a3eb911aee14dbafa5343c8a47e78e92cca9fa81d4f0dcb66a9c696c19909e64e4a843702c0"}, &(0x7f00000001c0)=0x81) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x1, 0x1, 0x1ff, 0x1, 0x5, "d73d9065b7a448488fcbc617220de7928e0251"}) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000180)={r3}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) preadv(r4, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/247, 0xf7}, {&(0x7f0000000380)=""/78, 0x4e}], 0x4, 0x3b1) 00:37:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800010000140007800800014000000000080002400000000000000000529f175d0c258744e43774da93515be263eadd10a162bdf61d4ac5b7d3e84fdd78c0e7fc7447e1f75ed33d8366d9a2a86a54f466d8b2f9b89d5ea8841161a5781328440ea04cd7591df521fc99fc252cf086abcde70968e354ca968506f86f92bcacf228d1b3c801c9d3447535911473e2f6aa2a0ed7dd2b65ab6948d47788325162fe8c47b22342dd1853116260316f9d4e371e4082eb706167bbe6283de1e473997944314e1541a59f9bc9813a33376c722e2a12a7292f441c8f149f8297c09462f301ffcc2ed36d5927820ac4cd73ad222c0a05edf6a30f214bdc57837153ca6b5b"], 0x28}}, 0x0) fcntl$setlease(r6, 0x400, 0x2) dup2(r5, r0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x101142, 0x0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1462.435860] FAULT_INJECTION: forcing a failure. [ 1462.435860] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.494382] CPU: 0 PID: 27555 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1462.502310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1462.511766] Call Trace: [ 1462.514373] dump_stack+0x13e/0x194 [ 1462.518042] should_fail.cold+0x10a/0x14b [ 1462.522993] should_failslab+0xd6/0x130 [ 1462.523005] kmem_cache_alloc+0x2b5/0x770 [ 1462.531166] ? alloc_inode+0xa0/0x170 [ 1462.534986] selinux_inode_alloc_security+0xb1/0x2a0 [ 1462.540122] security_inode_alloc+0x8f/0xd0 [ 1462.540136] inode_init_always+0x549/0xaf0 [ 1462.548692] alloc_inode+0x7a/0x170 [ 1462.552328] new_inode_pseudo+0x14/0xe0 [ 1462.556312] new_inode+0x1b/0x40 [ 1462.559693] debugfs_get_inode+0x1a/0x130 [ 1462.563958] __debugfs_create_file+0x93/0x3c0 [ 1462.568573] ? debugfs_create_file+0x37/0x60 [ 1462.573008] kvm_dev_ioctl+0xd71/0x1480 [ 1462.577004] ? kvm_put_kvm+0xa90/0xa90 [ 1462.580909] ? kvm_put_kvm+0xa90/0xa90 [ 1462.584811] do_vfs_ioctl+0x75a/0xfe0 [ 1462.588633] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1462.593405] ? ioctl_preallocate+0x1a0/0x1a0 [ 1462.597839] ? security_file_ioctl+0x76/0xb0 [ 1462.602270] ? security_file_ioctl+0x83/0xb0 [ 1462.606701] SyS_ioctl+0x7f/0xb0 [ 1462.610086] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1462.614083] do_syscall_64+0x1d5/0x640 [ 1462.618114] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1462.623315] RIP: 0033:0x45c479 [ 1462.626512] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1462.634234] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 00:37:35 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:37:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x9a59}, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x3}, 0x0, 0x0) [ 1462.641514] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1462.648821] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1462.656102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1462.663383] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000033 00:37:35 executing program 4 (fault-call:1 fault-nth:52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="00fb3e01b281a80313b9f7e3ee67754f63eb72ea1d50859cc50b9a95991224d1b051d869506883ef0a755f34a4b05d622d82c8fef048b7b382640c219d423fbbfcc7067eec4b66350d10439d117cde37d61904a6281b9199759bee90855234a94981c8b18a81b7264764bd23558a415767ba00b7dc5537778d4f927b10d1000000070000000005f9c216b19e262ba9093745ef8fd66f2351ca2f9181173ddc823b0c3355443f3ade82bb26cc6ffa09b72cc2a3ed8c31469be3ee5b5ca085015120dbfead5046a18a12d8142a7a43d33f0000009e4bb6e125ab28e4cb142822dcd250a01531c444148f796b88b85880cc66f34b19a5e7b2a62cebcf11ebb7b5f8a9a2f67d429ce3496aec783f7b2434219f44bac87e02d26f8b4b656c1df9077954bbea4579092865"], 0x3e, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) 00:37:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xff}, &(0x7f00000001c0)={0x100000000001ff, 0x0, 0x4}, 0x0, 0x0) [ 1462.863310] FAULT_INJECTION: forcing a failure. [ 1462.863310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1462.888082] CPU: 1 PID: 27582 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1462.896017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1462.905470] Call Trace: [ 1462.908080] dump_stack+0x13e/0x194 [ 1462.911737] should_fail.cold+0x10a/0x14b [ 1462.915921] __alloc_pages_nodemask+0x1bf/0x700 [ 1462.920612] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1462.925647] ? inode_doinit_with_dentry+0x735/0xe30 [ 1462.930682] ? lockref_get+0x11/0x50 [ 1462.934416] alloc_pages_current+0xe7/0x1e0 [ 1462.938767] __get_free_pages+0xb/0x40 [ 1462.942670] inode_doinit_with_dentry+0x7b6/0xe30 [ 1462.947557] ? selinux_cred_free+0x70/0x70 [ 1462.951817] ? put_itimerspec64+0x190/0x190 [ 1462.956164] selinux_d_instantiate+0x23/0x30 [ 1462.960594] security_d_instantiate+0x54/0xd0 [ 1462.965108] d_instantiate+0x5a/0x90 [ 1462.968846] __debugfs_create_file+0x15b/0x3c0 [ 1462.973448] ? debugfs_create_file+0x37/0x60 [ 1462.977879] kvm_dev_ioctl+0xd71/0x1480 [ 1462.981885] ? kvm_put_kvm+0xa90/0xa90 [ 1462.985818] ? kvm_put_kvm+0xa90/0xa90 [ 1462.989723] do_vfs_ioctl+0x75a/0xfe0 [ 1462.993563] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1462.998437] ? ioctl_preallocate+0x1a0/0x1a0 [ 1463.002871] ? security_file_ioctl+0x76/0xb0 [ 1463.007303] ? security_file_ioctl+0x83/0xb0 [ 1463.011904] SyS_ioctl+0x7f/0xb0 [ 1463.015288] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1463.019277] do_syscall_64+0x1d5/0x640 [ 1463.023187] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1463.028389] RIP: 0033:0x45c479 [ 1463.031584] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1463.039303] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1463.046585] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1463.053867] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1463.061148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1463.068431] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000034 00:37:35 executing program 3: epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}, {}], 0x3, 0x3) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x1, 0x10002) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000240)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000180)=[0x7, 0xffff]) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000020711030000000000000000000000001400078008000140000000000800024000000000"], 0x28}}, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0xb97}, 0x16, 0x0) 00:37:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x100000000, 0x9, 0x3, 0xffffffff, 0xffffffffffffffff, 0xaf0, 0x7, 0xfffffffffffffff7}, &(0x7f0000000240)={0x6, 0x5, 0x85c, 0x2, 0x6c, 0xffff, 0x2}, &(0x7f0000000280)={0x7d7bb177, 0x5, 0x1, 0x7a7a, 0xfff, 0x2, 0x8}, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={&(0x7f0000000300)={[0x41f786ea]}, 0x8}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0x9b0000, 0x4, 0xffffff81, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9a0918, 0x8, [], @p_u32=&(0x7f0000000080)=0x5}}) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000140)={0x0, @reserved}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x10) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) 00:37:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x802) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) 00:37:38 executing program 4 (fault-call:1 fault-nth:53): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:38 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000001c0)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000240)={0x0, 0x0, 0x5}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r7, 0x0, r9}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r10, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1465.462475] FAULT_INJECTION: forcing a failure. [ 1465.462475] name failslab, interval 1, probability 0, space 0, times 0 00:37:38 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r4, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) dup3(0xffffffffffffffff, r1, 0x80000) 00:37:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0) [ 1465.509195] CPU: 0 PID: 27605 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1465.517126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1465.526575] Call Trace: [ 1465.529185] dump_stack+0x13e/0x194 [ 1465.532838] should_fail.cold+0x10a/0x14b [ 1465.537008] should_failslab+0xd6/0x130 [ 1465.540996] kmem_cache_alloc+0x2b5/0x770 [ 1465.545153] ? __d_lookup+0x3b4/0x670 [ 1465.548966] ? mark_held_locks+0xa6/0xf0 [ 1465.553041] __d_alloc+0x2a/0x9b0 00:37:38 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000001c0), 0x4) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1465.556504] d_alloc+0x46/0x250 [ 1465.559795] __lookup_hash+0x51/0x180 [ 1465.563616] lookup_one_len+0x27c/0x3a0 [ 1465.567729] ? __lookup_hash+0x180/0x180 [ 1465.571842] start_creating+0xa1/0x1c0 [ 1465.575748] __debugfs_create_file+0x4f/0x3c0 [ 1465.580386] ? debugfs_create_file+0x37/0x60 [ 1465.584820] kvm_dev_ioctl+0xd71/0x1480 [ 1465.588824] ? kvm_put_kvm+0xa90/0xa90 [ 1465.592735] ? kvm_put_kvm+0xa90/0xa90 [ 1465.596637] do_vfs_ioctl+0x75a/0xfe0 [ 1465.600453] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1465.605229] ? ioctl_preallocate+0x1a0/0x1a0 00:37:38 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) r6 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r7}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r8, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x80}, &(0x7f0000000100)={0x1ff, 0x8001, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$RNDZAPENTCNT(r10, 0x5204, &(0x7f00000001c0)=0x3) [ 1465.609665] ? security_file_ioctl+0x76/0xb0 [ 1465.614089] ? security_file_ioctl+0x83/0xb0 [ 1465.618526] SyS_ioctl+0x7f/0xb0 [ 1465.621918] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1465.625929] do_syscall_64+0x1d5/0x640 [ 1465.629977] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1465.635180] RIP: 0033:0x45c479 [ 1465.638381] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1465.646099] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1465.653405] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1465.660683] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1465.667991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1465.675275] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000035 00:37:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0x0, 0x310}, &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000040)) 00:37:41 executing program 4 (fault-call:1 fault-nth:54): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:41 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/zero\x00', 0x4900, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000001c80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001a40)={0x1e4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0x1e4}}, 0x400c804) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r6}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x20000, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r9, 0x5016, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x2400, 0x7fffffff) open(&(0x7f00000001c0)='./file0\x00', 0x22ec41, 0x10) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$TIOCSBRK(r13, 0x5427) 00:37:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000080)={0x15, 0xcb, &(0x7f0000000180)="05cbec5f6aa8eaa03bbacebf887c3f9284b0ae3defb86e059e6b1a667aaa50d90c174f0dc9705c496b217afc8b36087445b9e121f9cda340a6d1f9e4987dbf194510eb40bfcc7842518bee47492714a30aee51ee303d1579ece443a26c0d505ac6352e50d5d1d251ae2b169c59f64ff44bc5e3d48e7df9d6576dcce4dea03aaa8d2c54789c613eba24292e110f6478182423a4e924136fde6274904e657878fe2e209eb98c0dd4f66d95d8a5d65f75a637075e6196482a40b642bb65fe75daeb04570dd9abde344ed3bec3"}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getpeername$tipc(r2, &(0x7f0000000340), &(0x7f0000000380)=0x10) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x7, 0x0, 0x6, 0x3, 0x0, 0x200002, 0x40000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0xe1}, 0x56480, 0x0, 0x0, 0x7, 0x85, 0x81, 0xffff}, 0x0, 0xffffffff7ffffffe, 0xffffffffffffffff, 0x1) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0x8}], 0x1) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) 00:37:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20, 0x7, 0x0, 0x5, 0xc, 0xd, "a1a4801abcf53eb501d5eb6acfc8a6a01cdb9ed6839857362f7758a80d987b332d1cf907198ea264f6787bb23186f5c102091704ffe7638dff5eb95542fcf0af", "e3680d72ef7e4c825bd5aff108c7bc336deee936699360edbf713da787d672be2ecef8a0d1be0cf5d73201af02673cc693ad0bfe90e20e668077d4817a249984", "879ebc050957ab84f1d4f5ecb49e93344089fdf3e9030635119ca6616b0b3f34", [0x291, 0x2189]}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:null_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:shadow_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={[], [], @broadcast}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:semanage_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20008810}, 0x24004810) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r8, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendto$inet6(r8, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:41 executing program 0: r0 = gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x2, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}}, 0x24000050) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r0, 0x3c) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) gettid() r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x3c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r9, 0x0, 0x0) tkill(r9, 0x3c) ptrace$cont(0x18, r9, 0x0, 0x0) r10 = gettid() ptrace$setopts(0x4206, r10, 0x0, 0x0) tkill(r10, 0x3c) ptrace$cont(0x18, r10, 0xffffffffffffffe4, 0x68d3) ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r9, 0x0, 0x0) [ 1468.515279] FAULT_INJECTION: forcing a failure. [ 1468.515279] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.537895] CPU: 0 PID: 27658 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1468.545842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1468.555356] Call Trace: [ 1468.557973] dump_stack+0x13e/0x194 [ 1468.561629] should_fail.cold+0x10a/0x14b [ 1468.565949] should_failslab+0xd6/0x130 [ 1468.570099] kmem_cache_alloc+0x2b5/0x770 [ 1468.574443] ? lookup_one_len+0x284/0x3a0 [ 1468.578754] alloc_inode+0xa0/0x170 [ 1468.582406] new_inode_pseudo+0x14/0xe0 [ 1468.586407] new_inode+0x1b/0x40 [ 1468.589932] debugfs_get_inode+0x1a/0x130 [ 1468.594106] __debugfs_create_file+0x93/0x3c0 [ 1468.598843] ? debugfs_create_file+0x37/0x60 [ 1468.603291] kvm_dev_ioctl+0xd71/0x1480 [ 1468.607440] ? kvm_put_kvm+0xa90/0xa90 [ 1468.611671] ? kvm_put_kvm+0xa90/0xa90 [ 1468.615599] do_vfs_ioctl+0x75a/0xfe0 [ 1468.619442] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1468.624230] ? ioctl_preallocate+0x1a0/0x1a0 [ 1468.628674] ? security_file_ioctl+0x76/0xb0 [ 1468.633276] ? security_file_ioctl+0x83/0xb0 [ 1468.637713] SyS_ioctl+0x7f/0xb0 [ 1468.641103] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1468.645226] do_syscall_64+0x1d5/0x640 [ 1468.649285] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1468.654728] RIP: 0033:0x45c479 00:37:41 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080)={0x0, 0x3, 0x400000000000000}, &(0x7f0000000100)={0x1ff, 0x0, 0x40000000000003, 0x0, 0x0, 0x0, 0x6, 0x100}, 0x0, 0x0) 00:37:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = creat(&(0x7f000002bff8)='./file0\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x3018c2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000040)={0x25cc, 0x8aa, 0xd7, 0x3, 0x10001, 0x3ff}) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) [ 1468.657938] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1468.666512] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1468.673942] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1468.681231] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1468.688525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1468.695817] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000036 00:37:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x62000, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000380)={0x4, 0x87, 0xdd, 0xed, 0x9, 0x3, 0x20, 0x5, 0x7f, 0x9, 0x7, 0x8, 0x4}, 0xe) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f00000003c0)={0xb13, 0x6, 0x5, 0xfb7, 0x3ff, 0x2}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x9e0000, 0x11, 0xfffffff7, r1, 0x0, &(0x7f0000000080)={0x50397, 0x4, [], @value=0x7}}) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000100)=0x1, 0x4) ptrace$cont(0x18, r0, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000140)='minix\x00', &(0x7f0000000180)='./file0\x00', 0x400081, 0x3, &(0x7f0000000400)=[{&(0x7f00000001c0)="bfe9f28ed47f62b80321964f64c381449181e3a7594a22c342812dfd542c720326f09a86ed167cf7a44669b87d5ca567fe9273d2c41901aa421dc06e8daa646d37801a982b86319151a47c41b5793de4005e5bc1a60fedbe07b9bc2f2fc6e4ff3c4f7e2b120c861f05ebf235e2e925cb0fdc0017484d32a518437c8db6e080b74fe5425b4157c1a3df18e91bef3860570d7fecbc665f8341f3cead5aaa25ffafa48061b338646066c02857441e85acea2bbbe62080f35f3e9950c675e72038", 0xbf, 0x3}, {&(0x7f00000004c0)="e14c8863713ecb7e3be8c42e294a1e1fd1ba5d4ea987c6132dd645ff065f9b1c9b64fc2f063bedbff8b3e8b536be24faf0d8a45c4b623381eb317b51669a09a6c57c93d6d2bf95161719ced932266f9ebccbecf481872b7109960b9c4b4d0374ddb849255220", 0x66, 0x7}, {&(0x7f0000000480)="5c6a95a71e83901e91ae8da802aa55c74f8f71142ff35c5b44bb383f", 0x1c, 0x5}], 0x80, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000540)="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", 0x1000) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, 0xffffffffffffffff, 0x0, 0x3e668820) 00:37:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4802000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r10, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r11, 0x100, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x24000080) dup2(r8, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:41 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000040)=0xff) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41a28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1}, 0x0, 0x165, 0x0, 0xd, 0x100, 0x1, 0x3f}, 0x0, 0x0, r0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) [ 1468.855193] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. 00:37:41 executing program 4 (fault-call:1 fault-nth:55): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@tipc, &(0x7f0000000180)=0x80) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0xf8) 00:37:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) 00:37:41 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x4000, 0x0) fcntl$setpipe(r7, 0x407, 0xb4f) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1469.085670] FAULT_INJECTION: forcing a failure. [ 1469.085670] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1469.103580] CPU: 1 PID: 27706 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1469.111510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1469.120887] Call Trace: [ 1469.123499] dump_stack+0x13e/0x194 [ 1469.127247] should_fail.cold+0x10a/0x14b [ 1469.131433] __alloc_pages_nodemask+0x1bf/0x700 00:37:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000280)={r9}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r10, r0) r11 = gettid() ptrace$setopts(0x4206, r11, 0x0, 0x0) tkill(r11, 0x3c) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$TIOCGSID(r13, 0x5429, &(0x7f00000002c0)=0x0) r15 = socket$inet_udp(0x2, 0x2, 0x0) r16 = socket$inet6_udp(0xa, 0x2, 0x0) kcmp(r11, r14, 0x2, r15, r16) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) fcntl$notify(r5, 0x402, 0x0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000040)={0x1e, 0x0, 0x1, 0x9, 0xb, 0x4}) 00:37:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xb925, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1469.136132] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 1469.141175] ? inode_doinit_with_dentry+0x735/0xe30 [ 1469.146315] ? lockref_get+0x11/0x50 [ 1469.150058] alloc_pages_current+0xe7/0x1e0 [ 1469.154540] __get_free_pages+0xb/0x40 [ 1469.158454] inode_doinit_with_dentry+0x7b6/0xe30 [ 1469.163321] ? selinux_cred_free+0x70/0x70 [ 1469.167598] ? put_itimerspec64+0x190/0x190 [ 1469.171949] selinux_d_instantiate+0x23/0x30 [ 1469.176379] security_d_instantiate+0x54/0xd0 [ 1469.180898] d_instantiate+0x5a/0x90 00:37:42 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f0000000240), 0x4) [ 1469.184630] __debugfs_create_file+0x15b/0x3c0 [ 1469.189232] ? debugfs_create_file+0x37/0x60 [ 1469.193665] kvm_dev_ioctl+0xd71/0x1480 [ 1469.197669] ? kvm_put_kvm+0xa90/0xa90 [ 1469.201585] ? kvm_put_kvm+0xa90/0xa90 [ 1469.205495] do_vfs_ioctl+0x75a/0xfe0 [ 1469.209316] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1469.214094] ? ioctl_preallocate+0x1a0/0x1a0 [ 1469.218539] ? security_file_ioctl+0x76/0xb0 [ 1469.222965] ? security_file_ioctl+0x83/0xb0 [ 1469.227393] SyS_ioctl+0x7f/0xb0 [ 1469.230778] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1469.234777] do_syscall_64+0x1d5/0x640 [ 1469.238691] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1469.243897] RIP: 0033:0x45c479 [ 1469.247099] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1469.254828] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1469.262118] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1469.269402] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1469.276686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1469.283967] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000037 [ 1470.561591] NOHZ: local_softirq_pending 08 00:37:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) 00:37:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) dup(0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r3}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000240)={0x7, 0x30, 0x1, r8}) r10 = dup(r9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r11}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r12, r0) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r14, 0x84, 0x8, &(0x7f00000001c0)=0x5, 0x4) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:44 executing program 5: r0 = socket(0x10, 0x803, 0x20) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='fd/4\x00') setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000440)='TIPCv2\x00', 0x7) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x80, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x14580, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = openat$cgroup_ro(r10, &(0x7f0000000380)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r11, 0x227b, &(0x7f00000003c0)=0x1) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000840)={&(0x7f00000005c0), 0xc, &(0x7f0000000800)={&(0x7f0000000c40)=ANY=[@ANYRES16=r8, @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040001) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000001640)=ANY=[@ANYBLOB="ec016373037fb796fabf91160000", @ANYRES16=r8, @ANYBLOB="880325bd7000fcdbdf2515000000f000058008000100657468000800010065746800340002800800010013000000080003000900000008000300010001000800040056ffffff0800020001000000080001001a000900070001006962000008000100756470000800010065746800070001006962000044000280080003002000000008000200ffffffff08000100010040000800040036000000080004000000010008000300feffffff080001002000000008000300800000003c0002800800040007000000080003008513000008000200ff070000080004000400000008000200070000000800040004000000080001000b00000008000100657468003800058034000280080004000180000008000200010001000800020025bf00000800010011000000080001001600000008000100150000007c0002801c00038008000100ff0100000800020003000000080002000700000008000100000000000c00038008000100000000001400038008000200ffffff7f080002000600000008000200020000002c00038008000100040000000800020001000000080002000000000008000100ffff0000080001009e000000340006800400020004000200040002000400020008000100020000000800010020000000080001000800"], 0x3}}, 0x20008800) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004004}, 0x40001) r12 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r12}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc10c5541, &(0x7f0000000200)={r13}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/autofs\x00', 0x40001, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r14 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r14, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:44 executing program 4 (fault-call:1 fault-nth:56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x9, &(0x7f0000000200)="1cf9500cad61a0b75cb3bee66f4ac26d4b922a5f54943259787d23695493597b1e01a946d19399de1c39a69359d7772522c1289cebd567eb65dff9ea3ad6f8a1163c2333feface377a593951ba1ea914d6493d811b44302a27f45f8285b54a45b0ee811adc3605895c5ffd38ccb26d3374c563b552ecb26b82084f45a47621c6facb0abc7a982efa67f05ddcc1e655e851207e248676bb4e91c9365a68743f1b14ba6c28960b3411d46df6f69a4c4df111627fcf33a1f5035c9edf0fba487f6e") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r3}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) setsockopt$inet_buf(r3, 0x0, 0x2b, &(0x7f0000000100)="83b94a379985634f7a4420df377a6337ab6fffb900bc9a1e00c8d2c7e74122290fa226ed6e6e8b3fdf5751f1bf244eea4419597232811af696e022df661919", 0x3f) dup(0xffffffffffffffff) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0xc, 0x45, [], 0x0, &(0x7f0000000340), &(0x7f00000002c0)=""/69}, &(0x7f00000001c0)=0x78) ptrace$setopts(0x4200, r1, 0x8000000000005, 0x10) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r1, 0x0, 0x0) 00:37:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0) 00:37:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) fcntl$setpipe(r1, 0x407, 0x785) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) 00:37:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000280)={r9}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r10, r0) r11 = gettid() ptrace$setopts(0x4206, r11, 0x0, 0x0) tkill(r11, 0x3c) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$TIOCGSID(r13, 0x5429, &(0x7f00000002c0)=0x0) r15 = socket$inet_udp(0x2, 0x2, 0x0) r16 = socket$inet6_udp(0xa, 0x2, 0x0) kcmp(r11, r14, 0x2, r15, r16) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) fcntl$notify(r5, 0x402, 0x0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1471.837438] FAULT_INJECTION: forcing a failure. [ 1471.837438] name failslab, interval 1, probability 0, space 0, times 0 00:37:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80000, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0xc02, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x20500, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x4000, 0xfff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r3, &(0x7f0000000640)='./file0\x00', 0x0, 0x800, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8d00000008010000006e000400008000000102000000b1ae77fb00a0b8beed003000050000000000000000030073797a20005e6d643573756d766d6e657431252773656c696e75785e76626f786e6574312f0a012f6465762f7a65726f000e006e65742f6d6366696c74657236000a006e49742f726f75746500575ac0c8cdc2c032f812c3513b42963ce6671839d5c0a1000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32], 0x8d) write$P9_RGETATTR(r1, &(0x7f0000000180)={0xa0, 0x19, 0x1, {0x22, {0x8, 0x2, 0x8}, 0x110, r2, r6, 0x8000, 0x8, 0x0, 0x3ff, 0x100000000, 0x1ff, 0x1, 0x20, 0x7, 0x3, 0xc, 0x7ff, 0xffffffffffff1e6d, 0x0, 0x2}}, 0xa0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="a668acec4c22e5dc564a657eb15cc1f7cfb18742ccd1f99cef044488cac3ffee2ca00f164b4cc112d6a7c8f08b80710b8e5b4b88663ba058ee3dc39beb6248ea5a9af91be93caf246c08898d7d7461b83aafa6a8a7e5965fdf0f5b0000000000cca1afd756b84b5178a023f6e2a6acae7417f389d0f161ece4") ptrace$cont(0x7, r0, 0x0, 0x0) [ 1471.923115] CPU: 1 PID: 27737 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1471.931046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1471.940409] Call Trace: [ 1471.943009] dump_stack+0x13e/0x194 [ 1471.946656] should_fail.cold+0x10a/0x14b [ 1471.950823] should_failslab+0xd6/0x130 [ 1471.954807] kmem_cache_alloc+0x2b5/0x770 [ 1471.959076] ? lookup_one_len+0x284/0x3a0 [ 1471.963287] alloc_inode+0xa0/0x170 [ 1471.966961] new_inode_pseudo+0x14/0xe0 00:37:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000240)=@get={0x1, &(0x7f00000001c0)=""/28, 0x3ff}) r4 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r5}) r6 = getpgid(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) fallocate(r7, 0x0, 0x100, 0x4f9c) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xefdf, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x2}, r6, 0x0, 0xffffffffffffffff, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r8, r0) r9 = dup(r2) r10 = gettid() ptrace$setopts(0x4206, r10, 0x0, 0x0) tkill(r10, 0x3c) ioctl$TIOCSPGRP(r9, 0x5410, &(0x7f0000000280)=r10) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:44 executing program 5: r0 = socket(0x10, 0x803, 0x20) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc10c5541, &(0x7f0000000200)={r6}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, 0x3, 0x4, 0x2, &(0x7f0000ffa000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r7, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1471.970943] new_inode+0x1b/0x40 [ 1471.974321] debugfs_get_inode+0x1a/0x130 [ 1471.978483] __debugfs_create_file+0x93/0x3c0 [ 1471.982987] ? debugfs_create_file+0x37/0x60 [ 1471.987407] kvm_dev_ioctl+0xd71/0x1480 [ 1471.991393] ? kvm_put_kvm+0xa90/0xa90 [ 1471.995301] ? kvm_put_kvm+0xa90/0xa90 [ 1471.999196] do_vfs_ioctl+0x75a/0xfe0 [ 1472.003018] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1472.007782] ? ioctl_preallocate+0x1a0/0x1a0 [ 1472.012212] ? security_file_ioctl+0x76/0xb0 [ 1472.016640] ? security_file_ioctl+0x83/0xb0 00:37:44 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x189000) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x86101, 0x0) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000000240)=0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r6, r0) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1472.021060] SyS_ioctl+0x7f/0xb0 [ 1472.024437] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1472.028421] do_syscall_64+0x1d5/0x640 [ 1472.032322] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1472.037515] RIP: 0033:0x45c479 [ 1472.040707] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1472.048428] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1472.055817] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1472.063102] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 00:37:44 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) [ 1472.070381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1472.077663] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000038 00:37:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = add_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="13a030b88d84b9b72916632d1fd5cf15563ecf2b79ebb7d4d21b9a0547dd0838f18b06592b0619b6a73d4a11270c09f0f4f367f9fd1c070c910727fc617d9590e2362aa832b038b591a675d997a59bc8453efe286607b8ec0a61e1004a00811dd2a9a18dbeb8b76f6fde07f690f42b3fdd80a09462445ccffe919cf6bef2ff46de979dabc00eb07476f033d02c971f7b35f4907e2f36ecce235723ca52f8b3685dc008804b7ab4f01f6e5d0c8b53cfa3beb9977c102d384d70431430462d47e773b2a2a2197f08", 0xc7, 0xfffffffffffffff8) r7 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0xfffff, r7) request_key(0x0, 0x0, &(0x7f0000000480)='\xf3F|$\x00\xac\xfaC\xe8{\x89\x80F\xc7G\xb7\xc0#z\xa1{\x91[\xd48+_\x1b\xb9\xd3t\x18\xd0\xe6\xfc\xb1+\r\x95\xd3HyV\b\xf5\xa2\xaa\xf2\xefz\x98\xff\xbb2\x1e\x81\x8c\xd3\xab*^\x93\xba\xe8\xe3[W\x82W', r7) keyctl$read(0xb, r7, &(0x7f0000000100)=""/50, 0x32) r8 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$instantiate(0xc, r6, &(0x7f0000000380)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', 'eth1vmnet1$selinux'}, 0x2b, r8) dup2(r5, r0) socket$nl_netfilter(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:45 executing program 4 (fault-call:1 fault-nth:57): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:37:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)) 00:37:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc10c5541, &(0x7f0000000200)={r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = accept(r0, &(0x7f00000002c0)=@xdp, &(0x7f0000000340)=0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000380)={0x0, 0x7fffffff}, &(0x7f00000003c0)=0x8) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040)={r9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000400)={r7, 0x7f, 0x2, 0x4, 0x8000, 0x7ff, 0x9, 0x5, {r9, @in6={{0xa, 0x4e22, 0x20, @ipv4={[], [], @broadcast}}}, 0x20, 0x4, 0x56d3, 0xfffffffc, 0x39c}}, &(0x7f00000004c0)=0xb0) dup2(r5, r0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6e2d979b, 0x101}, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0) 00:37:45 executing program 5: r0 = socket(0x10, 0x803, 0x20) dup(r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x8, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc10c5541, &(0x7f0000000200)={r5}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r6, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) select(0x40, &(0x7f0000000080), &(0x7f0000000100)={0x1ff}, 0x0, 0x0) 00:37:45 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x840, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x2, 0x4, 0x2]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc040}, 0x24080000) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x4, 0x4, 0x5, 0x4, 0x9}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300)={r5, 0xb9b}, 0x8) [ 1472.323576] FAULT_INJECTION: forcing a failure. [ 1472.323576] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.354818] CPU: 1 PID: 27788 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0 [ 1472.362746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1472.372109] Call Trace: [ 1472.374717] dump_stack+0x13e/0x194 [ 1472.378364] should_fail.cold+0x10a/0x14b [ 1472.382532] should_failslab+0xd6/0x130 [ 1472.386538] kmem_cache_alloc+0x2b5/0x770 [ 1472.390696] ? lookup_one_len+0x284/0x3a0 [ 1472.394847] alloc_inode+0xa0/0x170 [ 1472.398468] new_inode_pseudo+0x14/0xe0 [ 1472.402437] new_inode+0x1b/0x40 [ 1472.405794] debugfs_get_inode+0x1a/0x130 [ 1472.409933] __debugfs_create_file+0x93/0x3c0 [ 1472.414421] ? debugfs_create_file+0x37/0x60 [ 1472.418823] kvm_dev_ioctl+0xd71/0x1480 [ 1472.422797] ? kvm_put_kvm+0xa90/0xa90 [ 1472.426681] ? kvm_put_kvm+0xa90/0xa90 [ 1472.430571] do_vfs_ioctl+0x75a/0xfe0 [ 1472.434364] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1472.439116] ? ioctl_preallocate+0x1a0/0x1a0 [ 1472.443530] ? security_file_ioctl+0x76/0xb0 [ 1472.447932] ? security_file_ioctl+0x83/0xb0 [ 1472.452333] SyS_ioctl+0x7f/0xb0 [ 1472.455691] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1472.459749] do_syscall_64+0x1d5/0x640 [ 1472.463638] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1472.468820] RIP: 0033:0x45c479 [ 1472.471997] RSP: 002b:00007fd91993bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1472.479710] RAX: ffffffffffffffda RBX: 00007fd91993c6d4 RCX: 000000000045c479 [ 1472.486971] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1472.494247] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1472.501537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1472.508798] R13: 0000000000000390 R14: 00000000004c5c71 R15: 0000000000000039 [ 1473.067882] ------------[ cut here ]------------ [ 1473.072767] kernel BUG at drivers/dma-buf/dma-buf.c:68! [ 1473.079751] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1473.085127] Modules linked in: [ 1473.088305] CPU: 1 PID: 27776 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 1473.096165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1473.105505] task: ffff888096ef2500 task.stack: ffff888208028000 [ 1473.111547] RIP: 0010:dma_buf_release+0x313/0x5c0 [ 1473.116382] RSP: 0018:ffff88820802fdc0 EFLAGS: 00010297 [ 1473.121728] RAX: ffff888096ef2500 RBX: ffff888074c42840 RCX: 1ffffffff14cb674 [ 1473.128976] RDX: 0000000000000000 RSI: ffff888074c42840 RDI: ffff88804843ea78 [ 1473.136226] RBP: ffff88804843e900 R08: 0000000000000000 R09: 0000000000000000 [ 1473.143482] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888074c42868 [ 1473.150743] R13: ffff888074c428bc R14: ffffffff83a4c360 R15: ffff888074c42850 [ 1473.158039] FS: 0000000001723940(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 1473.166247] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1473.172109] CR2: 00007f54f9435db8 CR3: 0000000205771000 CR4: 00000000001426e0 [ 1473.179361] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1473.186631] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1473.193883] Call Trace: [ 1473.196508] ? ima_file_free+0x4f/0x330 [ 1473.200471] ? dma_buf_debug_show+0xee0/0xee0 [ 1473.205007] __fput+0x25f/0x790 [ 1473.208312] task_work_run+0x113/0x190 [ 1473.212184] exit_to_usermode_loop+0x1d6/0x220 [ 1473.216750] do_syscall_64+0x4a3/0x640 [ 1473.220626] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1473.225955] RIP: 0033:0x416011 [ 1473.229232] RSP: 002b:00007ffc844c6a10 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1473.236920] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000416011 [ 1473.244185] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 1473.251440] RBP: 0000000000000000 R08: 01ffffffffffffff R09: 01ffffffffffffff [ 1473.258693] R10: 00007ffc844c6af0 R11: 0000000000000293 R12: 000000000076c100 [ 1473.265964] R13: 0000000000771d60 R14: 0000000000167a58 R15: 000000000076c10c [ 1473.273248] Code: 31 e4 e8 61 1f ad fd 48 89 ef e8 49 a9 de fd e8 d4 7e b5 fd 44 89 e0 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 bd 7e b5 fd <0f> 0b e8 b6 7e b5 fd e8 01 2c a6 fd 48 8d bd 38 02 00 00 48 b8 [ 1473.292407] RIP: dma_buf_release+0x313/0x5c0 RSP: ffff88820802fdc0 [ 1473.299188] ---[ end trace 4e962c501bcf3a76 ]--- [ 1473.304372] Kernel panic - not syncing: Fatal exception [ 1473.311133] Kernel Offset: disabled [ 1473.314764] Rebooting in 86400 seconds..