port 2(bridge_slave_1) entered forwarding state [ 134.867675] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 134.886243] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 18:55:40 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 134.897758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 134.909397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.918108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.940624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.951476] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 134.957577] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.968087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.978839] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 18:55:40 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 134.998087] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 135.017144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.038164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.049546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.061752] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.068185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.083246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 18:55:40 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x10000, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x40, r2, 0x803, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x2c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000811) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) [ 135.096154] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 135.109395] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 135.125225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.134595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.145327] bridge0: port 2(bridge_slave_1) entered blocking state 18:55:40 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 135.151882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.185624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.193670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.208324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 135.228169] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 135.248578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.258211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.277442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.287838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.297917] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 135.312859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 135.333876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.346074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.354183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.364426] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 135.377106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.385064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.394995] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 135.402611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.409500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.419447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.429279] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 135.444560] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 135.453022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.461687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.469662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.477556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.487480] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 135.496244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.508597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 135.519077] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 135.527733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.538089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.547726] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 135.554639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.572291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.595850] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 135.617807] 8021q: adding VLAN 0 to HW filter on device batadv0 18:55:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:42 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r3, r2) write$P9_RGETATTR(r0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x40, 0x0, {"0b3c396370018def42331f99e6983d52"}}}}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) io_submit(0x0, 0x0, 0x0) 18:55:42 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 18:55:42 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 18:55:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) 18:55:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000040)={0x3, @netrom}) 18:55:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(twofish)\x00'}, 0x58) accept(r1, &(0x7f0000000440)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x0) 18:55:42 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x8, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 18:55:42 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:42 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec\xff\xff\xff\xff\xff\xff\xff\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000480)=""/195, 0xc3}, 0x4d6) creat(&(0x7f0000000140)='./bus\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040), 0x21c}], 0x8) 18:55:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:42 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x8, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 137.158147] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 18:55:42 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") unshare(0x20020000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480)='devpts\x00vh\xd2p!s\n@ha.\xc1\x88\x05\x89\x1d\b\xb3Xd\x92Y\x1b\x8c\xc0\xd0\xf4\x952\x8c!JC\xd1]Ul\xa2\x80\x19\x88 \xd4b\x0f\x87\x89P\xb4M\xf7]w\xa9\xb6\xc3}\x16\f\x87ueg$\xd9,\x8c\x9b\xbb*\xfe\x95\xb8\xa1\x9aVA\xb73w\xdf/\xa9\xc5\x8e\xe1\xef\xc5\x8d\x168\xba\"\x83\x8b\xe2\xf7*\xfa\xd20a\x94\xc7yiF\a\v\x14\xd2\xc1z\x94\x9d\x9d\a*\xab\xea\xd9Ee\xac\xa28p\xa2\xa1\x9a;\xb4o\xa0\xf1\xd7&[2\xf2\x82\xbc\xc2tu\xfb\xf5\xb1Y\xd6\xa9\x1b\xbec\xdeA\x8d\x94W)\x93,\xac\x02\x86\xd1\r\x00\xefZ\xf3Y\x84\xdbF\xf2u\xa1\x8b_\x9fe\xfe[q\xb1\\\xcen\bC \x81', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x5010, 0x0) poll(0x0, 0x0, 0x84d8) rmdir(&(0x7f0000000580)='./file0\x00') [ 137.208143] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 18:55:42 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x8, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 137.262701] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 18:55:42 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x8, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 137.305163] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.339249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.357594] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.376124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.395517] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 18:55:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xcf9c338894b880d, 0x0, 0x0, {{@in=@multicast1=0xe00000c0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31b}}}, 0xb8}}, 0x0) 18:55:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:42 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:42 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x8, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 137.411808] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.421809] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.428981] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.436054] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.443837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.456831] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.470148] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.488905] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.497098] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.508566] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.520447] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.534456] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.547513] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.559970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.569309] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.576606] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.583803] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.590912] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.597758] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.604942] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.611867] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.618582] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.625514] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.632258] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.638943] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.645680] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.652458] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.659242] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.665990] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.672759] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.680502] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.687283] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.694024] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.700931] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.707704] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.714472] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.724204] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.730953] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.737637] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.744399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.751917] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.758879] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.766021] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.772739] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.779417] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.788371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.795267] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.802005] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.808681] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.815399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.822178] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.829271] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.835996] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.843105] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.849787] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.856515] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.863249] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.869947] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.876812] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.884224] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.891042] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.897830] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.904671] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.925542] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.932303] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.938986] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.947860] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.957265] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.966268] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.973027] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.979730] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.986470] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 137.993176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.000071] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.006755] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.013624] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.020383] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.027078] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.033915] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.040664] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.048731] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.055461] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.062174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.068862] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.075608] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.082817] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.089607] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.096360] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.103111] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.109996] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.116809] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.123572] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.130856] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.137910] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.144657] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.151433] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.158335] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.165635] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.172528] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.179245] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.186029] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.193119] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.199791] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.206564] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.213302] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.220230] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.226929] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.233650] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.240752] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.247473] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.254236] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.260970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.260997] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.261010] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.261022] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.261034] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.261045] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.261062] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.274828] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.315392] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.322779] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.329473] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.336202] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.342950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.349627] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.356501] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.363419] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.370251] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.376951] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.383711] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.390441] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.397132] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.404078] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.410863] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.417545] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.424319] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.431068] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.437743] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.444532] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.451438] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.458114] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.464855] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.471587] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.478252] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.485095] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.491808] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.498633] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.505362] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.512103] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.518790] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.525521] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.532284] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.538961] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.545681] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.552383] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.559240] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.565973] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.572780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.579581] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.586328] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.593095] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.600099] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.606780] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.613528] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.620240] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.626908] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.633932] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.640824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.647493] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.654246] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.660975] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.667807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.674974] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.681716] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.688995] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.695929] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.702672] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.709436] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.716202] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.723268] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.731814] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.738507] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.745280] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.752051] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.758920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.765958] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.772694] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.781948] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 138.803678] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.811881] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.818597] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.825581] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.832607] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.839471] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.846319] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.853072] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.860340] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.867030] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.873799] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.881053] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.888449] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.896132] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.902951] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.909620] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.916385] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.923126] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.929799] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.936573] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.943445] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.950195] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.956881] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.964193] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.971017] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.977710] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.984581] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.991334] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.998093] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.004928] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.011797] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.018488] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.025238] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.032171] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.039734] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.046769] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.053535] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.060520] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.067207] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.073973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.080724] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.087403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.094174] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.101099] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.107776] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.114708] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.121461] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.128143] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.134873] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.141605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.148273] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.155015] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.161763] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.168546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.175288] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.182016] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.188787] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.195544] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.202281] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.209352] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.216265] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.223058] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.230252] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.236960] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.243728] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.250475] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.257255] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.264032] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.270835] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.277510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.284483] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.291370] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.298060] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.305519] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.312271] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.319299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.326074] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.332815] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.339487] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.346448] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.353287] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.360791] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.367493] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.374243] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.381104] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.387869] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.394792] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.401536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.408211] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.414937] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.421673] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.428366] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.435146] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.442175] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.449733] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.456597] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.463318] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.470115] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.476845] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.484002] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.490755] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.497435] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.504190] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.510953] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.518670] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.526061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.532803] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.539487] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.546236] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.553003] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.559670] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.566522] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.573247] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.580518] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.587307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.594046] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.601264] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.608078] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.614840] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.621564] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.628285] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.635041] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.641806] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.648493] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.655256] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.661968] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.668638] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.675388] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.682488] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.689181] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.695923] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.705650] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.712524] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.719367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.726132] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.732895] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.739658] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.746401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.753908] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.760866] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.767560] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.774346] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.781069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.787914] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.794673] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.801592] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.808283] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.815061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.821991] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.828670] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.835416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.842825] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.849527] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.856291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.863030] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.869708] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.877841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.884584] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.891330] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.898032] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.904793] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.911523] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.918196] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.925248] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.932041] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.939247] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.946166] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.952906] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.967200] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.973969] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.980727] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.987427] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 139.994183] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.000923] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.007602] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.014528] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.021244] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.028784] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.035764] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.044169] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.050936] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.057737] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.064478] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.071193] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.077857] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.085031] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.091771] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.098451] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.105226] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.114706] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.121463] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 18:55:45 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x5) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) 18:55:45 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:45 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x8, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:45 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, 0x0, 0x102002700) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:55:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300030, 0x29, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x7ffff, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 18:55:45 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 140.128144] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.136571] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.143311] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.150071] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.157862] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 18:55:45 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0xcfa}], 0x1}, 0x0) recvmsg(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, 0x0, 0x10000) recvmsg(r0, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x20) 18:55:45 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:45 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x8, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:45 executing program 2: 18:55:45 executing program 4: 18:55:45 executing program 2: 18:55:45 executing program 4: 18:55:45 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:45 executing program 0: 18:55:45 executing program 4: 18:55:45 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:45 executing program 2: 18:55:45 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:45 executing program 4: 18:55:45 executing program 2: 18:55:45 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:45 executing program 0: 18:55:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:45 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:45 executing program 4: 18:55:45 executing program 2: 18:55:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0x2, 0x0, 0x81, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e002fe) 18:55:45 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00b7e) 18:55:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00cbe) 18:55:46 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:46 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:46 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:46 executing program 5: r0 = socket$inet(0x2, 0x0, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:46 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:46 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0xffffffffffffffff, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00878) 18:55:46 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:46 executing program 5: r0 = socket$inet(0x2, 0x0, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) munlockall() recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00c3f) 18:55:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00b66) 18:55:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:46 executing program 5: r0 = socket$inet(0x2, 0x0, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:46 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:46 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:46 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:47 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:47 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') 18:55:47 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:47 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:47 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x40002014}) 18:55:47 executing program 2: syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) dup2(r1, r0) 18:55:47 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) 18:55:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:47 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:47 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="d56b168dc8b5dc288206b29a461eca822448f34924e3808bfd83c0ac"], 0x1c) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x4800) 18:55:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) 18:55:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) 18:55:47 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r1}, {r1, 0x12}, {r0}], 0x3, 0x0, 0x0, 0x0) 18:55:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:47 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) 18:55:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:48 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:48 executing program 3: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) inotify_init1(0x800) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000280)=""/124) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0xc8ee) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 18:55:48 executing program 0: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x402440, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) dup2(r3, r2) geteuid() write$P9_RGETATTR(r0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x40, 0x0, {"0b3c396370018def42331f99e6983d52"}, 0x0, 0x0, 0x7}}}, 0x90) accept$packet(r2, &(0x7f0000001440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) io_submit(0x0, 0x0, 0x0) 18:55:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) 18:55:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:48 executing program 3: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:48 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x40006ba2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:55:48 executing program 3: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:48 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:48 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:48 executing program 2: 18:55:48 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:48 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:48 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @perf_bp={0x0}, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 18:55:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:48 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000000027940000fffffff8000040000000001aee81260901000e000000"], 0x30) 18:55:48 executing program 2: 18:55:48 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:48 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:48 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0x406}, 0xfdef) [ 143.686508] SELinux: ebitmap start bit (14) is not a multiple of the map unit size (64) [ 143.722481] SELinux: failed to load policy 18:55:48 executing program 4: 18:55:49 executing program 2: r0 = socket$kcm(0x10, 0x80003, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="2e0000002c008151e00f80ec0400b904014865160b00014101410000000f00170000001f1500cd5edc00000000b4", 0x2e}], 0x1}, 0x0) 18:55:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@initdev, 0x4, r3}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 18:55:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0) syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x8100, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x8164) 18:55:49 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:49 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:49 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 143.873933] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. 18:55:49 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:49 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 143.920584] bridge0: port 1(bridge_slave_0) entered disabled state 18:55:49 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:49 executing program 2: [ 143.984468] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.023056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 18:55:49 executing program 2: 18:55:49 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 144.039045] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.046986] bridge0: port 1(bridge_slave_0) entered forwarding state 18:55:49 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 144.097902] bridge0: port 1(bridge_slave_0) entered disabled state 18:55:49 executing program 0: 18:55:49 executing program 2: 18:55:49 executing program 4: 18:55:49 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:49 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:49 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:49 executing program 0: 18:55:49 executing program 4: 18:55:49 executing program 2: 18:55:49 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:49 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:49 executing program 0: 18:55:49 executing program 4: 18:55:49 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:49 executing program 2: 18:55:49 executing program 0: 18:55:49 executing program 4: 18:55:49 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:49 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:49 executing program 0: 18:55:49 executing program 2: 18:55:49 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:49 executing program 4: 18:55:49 executing program 2: 18:55:49 executing program 0: 18:55:49 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:49 executing program 4: 18:55:49 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:49 executing program 2: 18:55:49 executing program 0: 18:55:49 executing program 4: 18:55:49 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:49 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:49 executing program 4: 18:55:49 executing program 2: 18:55:49 executing program 0: 18:55:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:50 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:50 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:50 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") fchdir(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141046, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) write$FUSE_INIT(r2, &(0x7f0000000000)={0x50}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 18:55:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x100000000000019, &(0x7f0000000000), 0x4) read(r1, &(0x7f00000000c0)=""/26, 0x1a) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x10000000008003, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0xffdc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x9) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000240)='gretap0\x00') sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) listen(r5, 0x1) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000001c0)=0x5, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write(r5, &(0x7f0000000380), 0x41ae10cc) recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) r7 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x983a000000003075, 0x0, 0x0) 18:55:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca5055e0bcfec7be070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000240)={0x80033f, 0x20000000209, 0x0, 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r2}, {}], 0x2, 0x9f) 18:55:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4070aea0, 0x0) 18:55:50 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0b") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:50 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 144.973845] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 18:55:50 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:50 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0b") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:50 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000d96927940000fffffff80000"], 0x20) 18:55:50 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 145.127684] SELinux: failed to load policy 18:55:51 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r0, 0x2, &(0x7f0000000040)={0x4, 0x3}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioperm(0x8000, 0x7, 0x8001) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x6, 0x80000) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000100)={0x101, 0x5, 0x3}) 18:55:51 executing program 0: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:51 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x4fff}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007ffd) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x75a0, @ipv4={[], [], @rand_addr=0x1f}, 0x1}, 0x1c) sendfile(r0, r2, 0x0, 0x800000000024) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x1, 0x40, 0x7, 0x4, 0x0, 0x9, 0xc4800, 0x1, 0x8, 0x517, 0x4, 0x5, 0x4, 0x6, 0x8000, 0x1f06, 0xc6, 0x100, 0xbd, 0x14, 0xaa4, 0x3, 0x0, 0x1, 0xfff, 0xff26, 0x9, 0x0, 0x8, 0x6, 0x401, 0x3ff, 0x380, 0x2, 0x9, 0x0, 0x0, 0xfffffffffffffff7, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x900, 0x10001, 0x4, 0xe, 0x0, 0x5, 0x6}, r3, 0x9, r2, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x208040, 0x0) rt_sigaction(0xa, 0xfffffffffffffffe, &(0x7f0000000400)={&(0x7f0000000340)="831ef63ea6c4c3fd010578610220fbc4e2612f178fea70128ec3000000b2ca000065dee9440f3802f8c4e1f5ef7599c4c3f90ee2afc482594609", {}, 0x0, &(0x7f00000003c0)="0fb25dc4f347a48f4978015a0136672e41e6ec0faea1f3410000c44210f211c4e179e7a1060000002e440f165cb3ce0f417fffc423694adcaf"}, 0x8, &(0x7f0000000380)) write$P9_RAUTH(r2, &(0x7f0000000200)={0x14, 0x67, 0x2, {0x8, 0x3, 0x5}}, 0x14) creat(0x0, 0x0) 18:55:51 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0b") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:51 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:51 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x400000, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000140)={0x400, 0x0, 0x5, 0xaa8, 0x3, @stepwise={{0x200, 0x3}, {0x3, 0x1}, {0x1, 0x6}}}) bind$inet6(r0, &(0x7f0000925fe4)={0xa, 0x4e23, 0xffffdfffffffffff}, 0xb) r2 = socket$inet_sctp(0x2, 0x8000000000005, 0x84) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x9, 0xffffffff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x8, 0x208, 0x7f, 0x2, r4}, &(0x7f00000000c0)=0x10) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040)=0x800, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r1, &(0x7f0000000180)="e4ed72739dfbffbf096ca4081021b71a6ab97f2f57ab757f3cecdb39c0", &(0x7f00000001c0)=""/24}, 0x18) r6 = memfd_create(&(0x7f0000000640)='\x06\x00\x00\xb6\xafTJ\xa24\xbe\x02\xff\x8b\x90\x8a\xd3\xb3\x8cm\n\x94E\xcb\xec\xfcMpG\x1f\xdc\xb2\bK\x90\xbc\x9e\x04MP)\xb0~*#b\xa1F\x99\xe0\x0eD\xc60\xde?\xcc\xaa\\Y\xe2\x8f\x1b\x01\xe9\xa6\xb1$U\x94\xea#\xd3\xb7\xf1\x8b\xda\xba||\xeeZ+\xed^6\xd1.\xc0\x029\xd8\xb4]\xea\x88\x95\xc0Km\x10\xebP9\xb5\xe6I,tx\xaa]\xfeH\xff\b4\x8fHmj\x91@\xc6y\xd9\x12\xbe\xe1 S\xda~\x89\xf5u*\x92\x05$Hvo\xfa}\x15\xec\x85\x85\x19\x18\xcd\xb4\x8fyR\xeec!\xa9&\xad\xbd\xdd\xa6\x19j\x04\v\x80a\r\x9b(*\xafS\xd7 \xd2D\x06nIQ\x0e\xb1\xf3)\xbd\xaa\xa1\xf2\xadh\v\xd3l\xa7\x9c\x9f\xde(5\x9c_\xc3M\xbf(\xb4\xb8\x89e5q\xf4oI\xfd>\x8d\x19V?#\x95\xf3l\xd3\"?/t\x1aR9\xce\xc1\xaf/\xae\xd7\xd6a\xa01>', 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) fallocate(r5, 0x11, 0x0, 0xc00000) connect$inet(r2, &(0x7f0000867ff0)={0x2, 0x4e23, @loopback}, 0x10) 18:55:51 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7b") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:51 executing program 4: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000002000/0x1000)=nil], &(0x7f0000000080)=[0x1], &(0x7f00000000c0), 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x7fffffff) 18:55:51 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, 0x0}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x3) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xab, "0d5898f07484f0b1997d6ab1895772084adb05e3ed3e811e29008a6e06381d119faba95a69cf7d307efebc22d7d8f1a7e41638561e352b3f18088e8eb31dc8fb3e40b8255c3ea4e0bd03429aa82c528c4cc864115f288a0c188297574836dacccae059a911d0af94cb0f7769c2b17e58a66a95ac2b6e5f26483c73f15277f2c8ef33f51962ec4f071126f36b6f6a0e6f8bac3ec3ccd4b3caa259b3d029bac1a7eaf683aef907c0c43e930d"}, &(0x7f0000000180)=0xb3) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={r1, 0x95f, 0x3, [0x1, 0xff00000000000000, 0x2]}, 0xe) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x120) mknodat(r2, &(0x7f0000000080)='./file0\x00', 0x8000, 0x9) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x44}) 18:55:51 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7b") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070") r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='./file1/file0\x00') ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0xd, @pix_mp={0x7ff, 0x1, 0x50323234, 0x3, 0xb, [{0xa7f1, 0xffffffffffff0001}, {0x4e1, 0x6}, {0x92f0, 0x2}, {0xffffffff, 0x8}, {0x6, 0x3ff}, {0x7, 0xc29}, {0x1, 0x401}, {0x6, 0x400}], 0x3, 0x8c, 0x3, 0x1}}) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x307}, 0x4, {0x2, 0x4e23, @loopback}, 'nr0\x00'}) rmdir(&(0x7f0000000240)='./file1\x00') creat(&(0x7f0000000140)='./file1/file0\x00', 0x0) 18:55:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:51 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, 0x0}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:51 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7b") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:51 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, 0x0}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:51 executing program 4: socket$alg(0x26, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000100)) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001980)="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", 0x3c1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}, 0x0) 18:55:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca500000000ec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000180)={0x3, 0x0, @ioapic={0xd000, 0x10000}}) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x192a3ad2043c77a}, "961f780ceaeb3c9e", "b7b302b909f7e31e30c5b415e2447f89", "d9087f66", "dcde42d64de9124c"}, 0x28) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0xfffffffffffffffd}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[], 0x0, 0x240}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000340)={0x1, 0xba, "c8ddf36120ba4860afaa23791d4eafafe01572fa418e4df98091f4a48ecc1862c578760a9c4d4fcb23b049db5275c545792950c22cc0ec384401679de7b2c2daa61446625abce2d072ad8096ee86962e794dcca76ab81769a419f08ac829395726f2d5203c16897ac91b8c35ece7e3324b29bd88cb253c7d2f35f8eb5994385321c5503efd5286e9fdb37f5a9aeaa8e438aedb27e9916766f326458d79e535d7b54eb467ebb7903b68b67400b7b2a3cab06f75a3610784f7ce39"}) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000300)={0x7, {0x0, 0x5, 0x0, 0x100000001}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:55:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0) sendfile(r1, r0, &(0x7f0000000140)=0x4a, 0x5) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000040)={[{0x3, 0x9, 0xffffffffffffff80, 0x1, 0x7, 0x6e0, 0xe98, 0x6, 0x4, 0x6, 0x100, 0xfffffffffffffff7, 0x52}, {0x3, 0x7, 0x5f62, 0x4, 0x3, 0x9, 0x9, 0x3ff, 0x4, 0xea2d, 0x6, 0x8001, 0x8147de8}, {0x20, 0x5, 0x5, 0x9, 0x7, 0x7, 0x7fff, 0x400, 0x3, 0x4b3b, 0x6, 0x7, 0x6}], 0x4}) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2d) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7) 18:55:51 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be0") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:51 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 146.488939] sp0: Synchronizing with TNC [ 146.564127] sp0: Synchronizing with TNC 18:55:51 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) write(r1, &(0x7f0000000440)="b63db85efd8c02000015d0a0d1b2656cc84a000000003ef00181ae21b14d872c678ce22c9b160096aa1fae1a00deb47bb80000000000000000047ee9", 0x3c) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000480)={0x0, 0x0, 0x2080, {0x4000, 0x4, 0x2}, [], "0ae0bd89d40a8ec9b8857c910ee5f1f939e02b7121290f27c0b191a24e2319b81417953d72e2b3205e1a6a08116ec57d6c25d086e69ad58b414d042aba63d0a7e340a4f29203b0b953894aa554ae17c35eea9c6622b6673ffe42a7f8a5e5647b91cd67586dcf3dd81d2dc632d15fbee66f8a63cdf4195642157c8598ede221220b987ef35fac74ec54058c7b79edbcf498e8cf0ea340dcd0f17004dec9c081820cb4659be57e8bdeb5b483068a99a5c1bcf124eccf465d084c9960f789f056a9583f91de2f1046ec0c8ada5786a2a874523d4291dde83cabb54a68fa567b8867d93b5879492bf37ea98d79b5cd4ad0462bc9b5549f8e663b80919c969882f652b1ad9509c8578c38e6f4743bffe2c9dccb7684c69af6c1a9347105abe9b95b703626bb643139a02826914f41f7c82a8db56c5fb443eca65d70773360c233d4feab7f124639af46a476d2d86ed190c2b54d9e367f76168aeb6805de764885e6a681351c33d5071a97d50ccb2e5b2e0889715b82f1ff9bcd693b91bf88d016291bc64053f9863e1b2ec06cee763db039d17f301e8b82a5046dfaf800e59aee6117067d5d6014fdcaa5f849b5f808217fa124b4558f88c8f9e7b8632412d8b554de274b4b4b49a0326c1023d7121c33b83c5af1ece9678265937eb0a261cd55be37a97f5683b24b6241ce60a85f938655547ce9e597f8eed1a4e88ab16c1c31745afdf814526945ccf6f534c4427a8c629929eba214a944240594c39f26056441393b0114c507a131a788e183e66699e185a6a36cd0fdd82b8bd5f5e98a35ca191465f4a5c99de9f01e95270085e4aea22d6de55da3d354b14ea53e34be38ee52cd950b280b8a05df4271e496ec5c397f1f86ada73d5de42fdb4967ae1a5175e71da10699f4d4b2bc2b83a59ad1f69693964096c639935bca5c7bc497a8da0e571c122322b18f335e57f7449d5494b1b2bf01a2e380167c3cc8e79f425bdd6d9d106e8b0cc35fc6a116157f96f571969cc3698b184065a0e248e895bbc5f43e56c4d5d8e44c95dc6eb9980a2b1b4e8a4a571f788dfac38f1b54b2d23f721f14086108e285ca1583cc86586c903b06c1f2314c22e4e498c64d198f562b4e33d136bad8bbc9d125ef3030906f1a26c8add894767e93f1ae444de7f1f1dcda61ee00bbc1ff1cb5fcf157d4184eabb7d5061144de1b484458042570af32bd9808da0153db03ef25fa5f8c9743197934a102ca1d4319d1c2024baf14b376907fa6b7aab5464211d877fe0c566c98a9a6e27c029c8901bbdce17a102da2b7065c04cb953f1552dd00e8da00402f533269399dc4a5bb49a399c7191ec75dd5bae6d97a5733f51dd6b888311312d5b3ce9d89e6f70e6cf07d0b5f2c2fdca8d407670b9bb26203bc849e7e80cea3b4d60bf9752e0fd5f4f36467f19a4a68b198f0c60ab0a250d47dd9a2f78e34149e67ca48939fb52d165e720d930f6b84ea7d7e69f15a9f1a7c976e2e84cb325d3c67684782eb0d91abc4a431548b83aee132d0e87b87e48113cd01463d10851b479a507061b6437da5a69614a3ce96405fcabbc7e84a600f3cf36db18925fa1ba4747538256a732a3f7d1798691f65215be2407f99e23b061f57dfd96434f337f5375cf619883d5058b2120fb1a389e24b5622de70fb9168912eca58c6d199a654a33dea0ba6f9032473f6b1549a29a57e63126b578c6a5ab0e3542d9fa75b8facf4c2161f589adee19c5b349db70c5d7983cd20127103981405e551be1b58b38242a5fefd9f31f2f9c9f618fa49dd49684c7fe608cd4b22f917a4f39a50f141ad4fec8477bc6fa3f3b8fdf01f33571cb4e0c2a8b630af24b82222d1d3342680038072f0ff8d1d08a595d8d4ce67131bf2f82c5d85d8afe36a9011390dc3451bb80c4e1f73c5df04faa1c7c5d5596538ee870d70846a184c602a71ab986f54efacef05c188db7bac3221d70678d63e8971d0c2a8095c254ce5084f3d889950f5907509092c7177b184b2498d1db11be529d212bde51943fe4f74680f010877a231f70df7e481406f83da73225deb4248d8113b45c50cfad4061498f110e1316cbff898b36d22a9ad7382a657794ebb0f063c7469cec90ee121f374d332aa0d78f5222ab09c140d8c9acfe2c6ccce48fa6b899eaac992df4745d7cadff2fa8a0c9d9bb5b983cc72076b9cb06b0cb9174f166735c6ffcff065c1ca71852133462ccf837d4c8ead3f1b14352e81fe0311ce550be77e8bb1ef20c42a3357549d0ac8f1fef1a18c95ada4d6cef702d3582cf6b4a8d358cf1516b381d443be53096d049fb9d0a00f3a972eaad23705bb04f43f6c2b59f71b28f6f844a0505cd1ab347bf0d918459417edd111893aa4c80b473128605e849011f38a7f85f8869ea3cd63807a4273742897e8a5e5890cdd9748d76cecbef64145907d62f08cfc475706e6bd4d4a61af393639511eac021076028d4fff773196a828c905525b0a8b6d86b14762328df10c1a669434022677bc8d59cf18019aab2d7d9fbb6428a89865749d9da874aa50c39604ba3c881e791ca00870b0060d45ed2622ebc0ca50136849c343d97e551f9aaed1011dfe0e3c2d90bfb09da390bd91465321fa87ed9d56b79310fb0ae51ebda4e9eabb422ea031e7731571e4fa6ed7b7a7bb7bc29252c599d946a02c4a143fb90a6c7fc463f2ab2522e4626186d1bf5e4f51cda40b39e184f8c0df1c588439319c8d1c741fc3e5c627731d379e1d43fa576122c348670d27003e7680d24a6f15ee2c464acddf03dbbbea8deac7dd8c74f8121791217c3287f5c772ae47d2bdf1c29e3af604d386e077b780f654bdd5851b42a15b359c606b92035808a4a30e5aac7b4fe079bca653af83592017a7350b6adbfc43042eee5fbe50dd10e61cec9d00792e878594daae4dafd9ed39b64b979c18532d9900ab8860010964742fef9b9aa49117439ece784f00b7424d1f2d7bcfc476f131b94aa686e2da4d3fa5cb1ee02304c053bbe551221dafa5d478fd04eac0b49a35282a3e850eca2a68c6e1df23436be7cf4b6915b0417b672c1a04a47ad4dd04e59638d7f5a562aff03310db7385804ea30e4ab0da03a75ea80a7459f6c6c173c9bdceadb82565bfc334cbe7d126592497a09404dba811cf4fe7612397c270059ed74d077b75ba2efa0175ba1fcb4a1c4c267071f3212069ca70c8b63663ef96c8b00701d151d0c58a6baba697a57c452440e49194f361dd99b59798d93173d57e1c8909d429c6cc943f3e1eb1506509209b77c6ccab0ed3522bad6900f1062bcfdd9ac16b9bf93a9d73ec84e9bac4563d0f0238d860793afa1c57b8a1ed009ca2b1257fbfb23244345939930f03c79c68ed46a3769ee375f96d226bd9454cad58b93083efca9159f6970e01bf2648d31351c933af3515d77055ed03cae30ebbfa38942d5889bfd086c6c9d6a698d3ec411326f8889248f36c827a64fc6d0c6decf9c5dec0d60e8d7c65af5d44b108f014fba441c2290a5f2e9bec72a24de9eb775c396d4a7cd55ce38fa06b8f1687d3f749fd6fecddd64000b960c40bec7055562eaa6931d23d79ee03a1644452d80e59ad772e75ef886ee3ce660308b968c4ad3168e4cf0a73332709cb85c5207c41b581f745f462148daa20b43731c8e2878552236d8d3e5a56a50f1d70073ae80bfe55be1278ec914df872f908c68a15f9f29d7b953b31691ede08770334f0cd79594804d40318d24aeb6964a46e0c47cbcb574c05f453aec992e50a22e408cdd24133687d32c8b8ca10412eaa1a1254e1d3beda2935b899890660f188a85cfa525ac9b0e42d10cc0cefb341989b1c8904a58cbaacda63e0889838a05b88012e6028d24ae7fb707ce2057a6a9a1df84b3d193e3929508d5472260f7a0fb60e35b837e172e9afc6e30176e8341b406d1b6d693021f2154e8cc7741194d34a8c3b1364a0de856dd931e683625d972a06c6a2cb275b2f54daae4ba2afb6372a61ddff644136438ce1d9c31b892d624835251a18028972baae900e8f1fdbd3027be52fadf6c4168eada824c66dc653d3f7d0b0bb06578f6448b11cb9a31990ad43cf3a3ad62f0f899d0e02d475a15135a7c64c96e252d8fec9e5678a2a8815f5d4156767421d18b0032601f53f4e0a14eb339dafdcf4d3192b03563efcc61765de6991f1d6f7b289aef294a65e199275a9f89c037f486f96605500662946519c62b8f1f1ec2f304bbdd9daf5baa37aa1d4ae8719595539b28cca7279147c29c166cb5e8ee272e95f6565c5c8141245f2c5ca2ff1cc0eca736e976ac83fbfdab313595d809028a9855d41f949ef76914157f9270c297f9f5b7b66ad4b33c0a14833f6da9d70691e595f3adce78e215885134d555c9eaf81c0623dbd53bcf4bc79cf081d641672755091ef91c7efe4e7c072d13b5d575ff5e9cc26972867d20aa6ac052a5e3235cc7fecb795ea1fa7214916087c6ba2bbff19fdd1360c9ffa6671b2e97bcd8d28463a125790883e62b9ded75b9aba8ab0aa570a59cc1112b05645fcf632f26dee6dc0ab79fbc837058da17bd85b2f6c6b32e3f2cdd09d1d624d83432251e407544b8869ab416acbceb55de32d84483ef12383fa876bbf00dd88836ea6f0ba82d787026b57dab4a8bf963c15489f1d680ca7a1f9ef6c26ba9cbba1ec1725f8a1b03cdb407b871d0ad85af63c17ffe93b3d020d65e6da32ea4afe926fb722f957117a10d75e6c28b5cede9993700f19d79ab9acaed160ec619dd867bacc8536ce885e47a464b4a687d7352a953c724d850887c4dc5864a35cc32e73fb8535dc3cddccce1ab2aafa85fffd106c4ed152ba628aa72d385944a057d18327156cbea2e648e0f3c1edbf3902429c96cd027d5700e3f5cb21e6b063126434c40608907ea13f58002f203ad766844e16adb1394afd52b571c7329fe1c8b3d071b513325e7bf5d0f2f5a1453f6f98f5498fb93437e053156ed0356cf2e0c389724b95c76556a226aafb7cab0e0bf173b60c55ccae55f0b305c196d77ac02475a5a63975141b9656948d95ca3f4c12649a891aa54111479d3040e2b1645b74bcaf2e09ec186c88c0e640dc94d565ecd341f6d17b4f91c407da4ad780a5df8f4465f2fff18cc0f91f11739a74fea6909d32eabd514599fccddf0e2cf465618b4883f2bd02752f8ee505d6a15319ed04856c23925e5bdb384735c8feddba2647300647ec41bbd8bbe9e10a1fe866f9dce4d07c720b6d23a6aa1db014a9b4f67c12a4b43118f0cc5174e45de9d6944ad2d60500645ff0748a0b7e9757870ce10c3053400be46e167c3f6d06b251460311c9d8ee21b6ed5d94f2a128024040a6e04adec55d475d7d1b666cff5874ceabbf9ae40c051f7710aeac80760c8f5c6551ed69e9fec2bb1b169b2c018acddc07629f4e00d5a5e147ff8823652bb32c8dd05587eb6d22f98d99b04871aaad7f1ab858ea337647dd3cf082485200dd725ee85b7931b05352d693305fb5fe803f3c1ba48d041068fe3461f20e7d9a5411ba477cb557e35e0281743c49662c36ccbf58c86083dbf93f783cf4cbe0088c9e1780743d8e1de970d6ec10a5a1f1b4ac98c0dba01661c3db758469ba42f681863e6197b156b24093cc6b4b0fd1569c81e920114f1701b62077902ecc4900459ac3bdce5c3adca03dbc42a5be2991dc8609f2797f2593c546f8beaa78c64a53a9178639df45acc39c363e88b38ee73b4383427717e142b4474072e78753afbc8732e083a1ed9d84c0b668aedca0b1e3f5e0b367", "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"}) pipe(0x0) 18:55:51 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:51 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be0") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00') setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000000)=0x80, 0x4) r1 = request_key(&(0x7f00000004c0)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)='$?/\x00', 0x0) r2 = request_key(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000600)='{:wlan1bdevem0vboxnet1,\x00', 0x0) keyctl$negate(0xd, r1, 0x3, r2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000480)={0x4, 0x2, @name="10d6e9911d346877e433ba1a66147859019470c66c8a5fff47f530825a45faa0"}) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000140)='cpuset\x00', &(0x7f0000000180)='wlan0\x00', &(0x7f00000001c0)='+\x00', &(0x7f0000000200)='uid_map\x00', &(0x7f0000000240)='%(nodev\x00', &(0x7f0000000280)='uid_map\x00', &(0x7f00000002c0)='wlan1[\x00'], &(0x7f0000000440)=[&(0x7f0000000340)='{:wlan1bdevem0vboxnet1,\x00', &(0x7f0000000380)='[user)esecurity\x00', &(0x7f00000003c0)=']em0!user\x00', &(0x7f0000000400)='\x00'], 0x1000) sendfile(r0, r0, &(0x7f0000000080)=0x34, 0x8) 18:55:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:51 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x4, 0x4) ioctl(r2, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x5, 0x40) sendfile(r0, r1, 0x0, 0xffff) [ 146.796335] sg_write: data in/out 167129/8 bytes for SCSI command 0x9b-- guessing data in; [ 146.796335] program syz-executor.0 not setting count and/or reply_len properly 18:55:52 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:52 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be0") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:52 executing program 2: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = socket$inet6(0xa, 0x806, 0x200000000000000) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x20008001) r2 = dup(r1) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x1bd) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0xfffffffffffffe0b) pause() ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000180)=0x9, 0x141) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000280)) r4 = getpgrp(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000200)={0x3, r4}) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000440)={0x0, 0x0}) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) timer_create(0x7, &(0x7f0000000240), 0x0) timer_delete(0x0) ioctl$TIOCNXCL(r0, 0x540d) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x8) ftruncate(r5, 0x7fff) sendfile(r2, r5, 0x0, 0x8000fffffffe) 18:55:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) r3 = socket(0xa, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000fea000/0x14000)=nil) r4 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='$em1*!\x00', 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f00000001c0)) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a1, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000040)='threaded\x00', 0xfd87) sendmmsg(r5, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000740)}, 0x7fffffff}], 0x1, 0x4040000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syz_tun\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00'}) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1d}}, 0xc) fallocate(r5, 0x3, 0x5e00, 0x2cbd) 18:55:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 147.003379] sg_write: data in/out 167129/8 bytes for SCSI command 0x9b-- guessing data in; [ 147.003379] program syz-executor.0 not setting count and/or reply_len properly [ 147.064377] audit: type=1400 audit(1560192952.266:42): avc: denied { name_bind } for pid=7938 comm="syz-executor.2" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 18:55:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="8b", 0x1) r2 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x33, 0x40001) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000580)={0x1, 0x40000000, &(0x7f0000000480)="4ca4a7d47a72050798089bbbd4f02ecb6d0531e28bb8950835050a47416edbd15767e4e0f394a81d0c69c47fbe23b8c9c9bb814248d47b9ec958954e1b4c9223", &(0x7f00000004c0)="4036d288d0a46213cb4f85377fd0889d36c80200a59d3958bde5d0411f72294bfab5e2f5fc6c885f8cc8dc1bc31c520947c8a45fb5f8029bcb1a195f1bed1bbc1c9f7829fcdbfed4b93a898a85543e40b62a7f2afa79d3b557082b624681ca4292933d94c4888869ec2add8841eedcff3dc9c2085a54aba1f665dbd40046667cd511eefb2436440aa511a76e094118a8ca4f18cb20dd204f9d3103fc6459", 0x40, 0x9e}) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0xc000, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000400)=""/97, &(0x7f00000000c0)=0x61) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000180)) 18:55:52 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{0x0}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:52 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 147.187247] audit: type=1400 audit(1560192952.266:43): avc: denied { node_bind } for pid=7938 comm="syz-executor.2" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 18:55:52 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{0x0}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:52 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:52 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) r1 = socket(0x12, 0x4, 0xe8) getsockname$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {0x0, 0x2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x4) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200800, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x99, "464fea5ecafa12ab24777bb5c21df6d80b084f24fd0e211ae2318bfe3e4bc9130e551cd899d9d4aafe3050a09824c2187733ba8d35034d997ce717b4dbb388dfa4a1623cdf30bc14fb78dc1489ff100fb4a76527363ffbb280568678ae1fb03648f49b81db4693ab1439b6f13b627eafb572de9da154ff12d81124f041973c7715efaffae485580dd6565e4d81ef9219ff3a2543338f51e409"}, &(0x7f0000000040)=0xbd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000000006010000000000000000000000a4c7"], 0x14}}, 0x0) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000180)) 18:55:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:52 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{0x0}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 147.446785] input: syz0 as /devices/virtual/input/input5 [ 147.464579] audit: type=1400 audit(1560192952.666:44): avc: denied { create } for pid=7984 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 147.502015] audit: type=1400 audit(1560192952.696:45): avc: denied { write } for pid=7984 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 147.545153] input: syz0 as /devices/virtual/input/input6 18:55:53 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={@initdev, 0x0, r2}) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000040)={'stack ', '.\x00'}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 18:55:53 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000080)={{0x1, 0x2}, 'port1\x00', 0x10, 0x42, 0x38, 0xffff, 0x6, 0x7, 0x0, 0x0, 0x2, 0x3}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xf}, 0x14) 18:55:53 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") poll(&(0x7f0000000000)=[{r0, 0x400}, {r1}, {r1}, {r1}], 0x4, 0x7) 18:55:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:53 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:53 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCGETS2(r0, 0x89f3, &(0x7f0000000100)) [ 147.901163] bridge0: port 1(bridge_slave_0) entered disabled state 18:55:53 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) recvfrom(r1, &(0x7f0000000000)=""/194, 0xc2, 0x2162, &(0x7f0000000180)=@caif=@util={0x25, "2bb4b3062fd38a193418c42dac62a1ee"}, 0x80) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000002c0)='veth\x00') recvmmsg(r2, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) 18:55:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 147.961977] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready 18:55:53 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 148.023570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.033229] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.039645] bridge0: port 1(bridge_slave_0) entered forwarding state 18:55:53 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 148.268957] bridge0: port 1(bridge_slave_0) entered disabled state 18:55:53 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x1000, @ipv4={[], [], @broadcast}, 0x86}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x50af, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x202000, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000140)={0x2, 0xd000, 0x2, 0x1, 0xffff}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$assume_authority(0x10, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000005c0)={0x0, 0x0, [], @raw_data=[0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x400, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffc00, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, 0xe2e, 0x3693, 0x6, 0x0, 0x8]}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) 18:55:53 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:53 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:53 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000100)={0x2, 0x5, 0x3, 0x3, 0xf17a}) socketpair(0x1e, 0x1ffffffffffffe, 0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = fcntl$getown(r2, 0x9) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x3, 0x6, 0x4, 0x0, 0x9, 0x2000, 0x6, 0x3, 0xff, 0x7, 0x9, 0x7, 0x5, 0xbc4, 0x91ed, 0x54e, 0x4, 0x100000000, 0x4, 0xcc03, 0x3, 0x3f, 0x5, 0x48, 0x100000001, 0x7ff, 0x6, 0x6, 0x80000001, 0x7, 0xf80, 0x80000001, 0x4, 0x0, 0x5, 0x0, 0x5, 0x2, @perf_config_ext={0x0, 0x9}, 0x10, 0xffffffffffffff01, 0x10000, 0x3, 0x6, 0xffffffff, 0x10000}, r3, 0x4, 0xffffffffffffff9c, 0x1) close(r2) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000140)={0x2, "0fbd"}, 0x3) recvmmsg(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, &(0x7f0000000440)=""/202, 0xca}}], 0x1, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000180)) semget$private(0x0, 0x1, 0x1) 18:55:53 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x7, 0x1, {0x4, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x7ff, 0xe875, 0x2}) 18:55:53 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:53 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000140)) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000080)='-/cgroup@\x00', 0xa) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x2000000000000007) 18:55:53 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:53 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x101) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000140)=0xffffffffffffff00) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000400)={0x7fffffff, 0x1, 0x80000000, 0x1, 0xfff, 0x1}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000340)={'TPROXY\x00'}, &(0x7f0000000380)=0x1e) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x200, 0x0) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f00000009c0)=""/232, &(0x7f0000000ac0)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000009f0c000018000000030000000b092fb14f61f61800159b39e7668c220000000007fcffff"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, &(0x7f0000000140), 0x41000, 0x2, [], r2, 0xf, r5, 0x8, &(0x7f0000000200)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x7, 0x100, 0x8}, 0x10}, 0x70) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="616c6c6f6373697a653d366b2c0079c18ab86a336663d3b7e21fc7f36182d3706b8900a98a6e92667251c466f4200e16cc177c1f5cd1e958aa2d444c87d4b486afaa27e756d630c8d3aeeb4d01fc483d36337b65673ec39d8d43bebb45e63b9f97ad709a3d27da544e46b25d49c53864bdf18a9e73d0db6b06c11608cefaaf19a7ed72e533c89cdd6c6c7a57c09f125c81b03f9263406a35f51e29703dc665d52fa43200cb266a6eb708afb4dcdf8efc9c691788785d"]) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000940)=@broute={'broute\x00', 0x20, 0x3, 0x48a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000440), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x1d, 0x59, 0x8864, 'batadv0\x00', 'tunl0\x00', 'lapb0\x00', 'veth0_to_bond\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[], 0xe}, [], 0xae, 0x116, 0x166, [@quota={'quota\x00', 0x18, {{0x1, 0x0, 0x1f, 0x4}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x80000000}}}, @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}], @common=@log={'log\x00', 0x28, {{0xe792, "9388147e9051a0df7b378f982d741309d028194c798ce03ae77dfe194445", 0xe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{0x15, 0x2, 0xf6, 'vcan0\x00', 'netdevsim0\x00', 'teql0\x00', 'bcsh0\x00', @dev={[], 0x13}, [0xff, 0xff, 0xff, 0x0, 0xff], @dev={[], 0x16}, [0x0, 0xff, 0x0, 0x0, 0xff], 0xa6, 0xa6, 0xee, [@realm={'realm\x00', 0x10, {{0x4, 0xb50}}}], [], @common=@ERROR={'ERROR\x00', 0x20, {"cca3d13beb0e4c0c3d48f353a64a9ed014cdb525215bbb6a4e7cc150efbe"}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x11, 0x1, 0x888e, 'bridge_slave_0\x00', 'veth0_to_bridge\x00', 'bond_slave_0\x00', 'bridge_slave_0\x00', @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @dev={[], 0xe}, [0x0, 0xff, 0xff, 0xff, 0xff], 0xe6, 0x146, 0x176, [@mac={'mac\x00', 0x10, {{@broadcast, 0x1}}}, @quota={'quota\x00', 0x18, {{0x0, 0x0, 0xfffffffffffffffd, 0xffff}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}]}, 0x502) [ 148.655480] XFS (loop0): invalid log iosize: 11 [not 12-30] [ 148.733933] XFS (loop0): invalid log iosize: 11 [not 12-30] 18:55:54 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="230000005e0081aee4050c00000f00000000a30000ffffff9e8b1832e0b58bc609f6d8", 0x23}], 0x1}, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x8000) setsockopt$ax25_int(r2, 0x101, 0xc, &(0x7f0000000100)=0x4, 0x4) r3 = dup3(r1, r0, 0x80000) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x33, @multicast2, 0x4e22, 0x0, 'fo\x00', 0x1f, 0x40000852, 0x22}, 0xffffffd5) 18:55:54 executing program 4: r0 = open(&(0x7f00000003c0)='./file0\x00', 0x141042, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001540)="c0dca5055e0bcfec7be070") setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), 0x4) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v2, 0x14, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x0, 0x2, 0x2, 0x1, "874e2232bc1725258f257e8a7290e6125fddea1d3567ec7b1e86389908729886fb866baf060fef231986831499a5d1243d2b0fc2e79e2f82fbf8b566b76c97363e305fc514bd4f0a9a9c9118c1ac11f87a6175261767a7eeee3f15f5fa0d52792c233b730ca38877970036891c5d093a935819a9a1489433e2c9c2e740"}, 0x8d) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x72, 0x4) 18:55:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:54 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:54 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:54 executing program 0: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:54 executing program 0: syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x80) fanotify_init(0x9, 0x41000) 18:55:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/4096, 0x1000}, 0x20000001}, {{&(0x7f0000000700)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000001a40)=""/87, 0x57}, 0x7}], 0x2, 0x0, 0x0) 18:55:54 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:54 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x88009, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'{\x00', 0x420000015002}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESOCT=r0], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYPTR64, @ANYRES64=r0, @ANYRESDEC=r0, @ANYBLOB="6b4741ba41212b028995149b8f0bf57b5d695ace6f955b8a6afe766b56f80cb3d0c5e9b326c2f942e85c8d3c80ea07bfd081662c9fd245156a91e60529fc18d8e41df284f0d13d7a123242bf427c1243c81c413ed9afef19b817035e6555f3fd9a3dcf48f775c634f5e4d39ae037e8bacb130999407ede3265565216dfd11636d99919d9e93b8e2adb9a92a1531c1404251d14b95f2f4b16ba491c9f84cd1df99dd5064915401565378fedc80e2eba64000f6aee71240bf85281a75b88e67a3eab63da9fe24f4e5908551243a3c201f3d2777fb5", @ANYRES32=r0, @ANYRES16=0x0, @ANYRESOCT=r0, @ANYRES16=r0], @ANYBLOB="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", @ANYRES64=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES64=r0]]], 0x1) 18:55:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:54 executing program 0: getpeername(0xffffffffffffff9c, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000000)=0x80) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001100), 0x4) r1 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) memfd_create(0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x32, r1, 0x0) ftruncate(r3, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x8040fffffffd) getdents64(r2, &(0x7f0000000080)=""/4096, 0x1000) 18:55:54 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff810040010000000058000b4824ca945f64009400050028845a01000000000000008000f0fffeffe809000000fff5dd00000010000100080c10000000000001400000", 0x58}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x1fd, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) write$cgroup_pid(r2, &(0x7f0000000140)=r3, 0x12) 18:55:54 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fcntl$getown(r0, 0x9) migrate_pages(r2, 0x3f, &(0x7f00000000c0)=0x7378, &(0x7f00000001c0)=0xff) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xdc0000}, 0x100) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x800, 0x80) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") 18:55:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:54 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:54 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x10200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x0, 0x6, 0x4, 0x1, 0x0, r0, 0x9, [], r1, 0xffffffffffffff9c, 0x0, 0x5}, 0x3c) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r2) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000180)=0x4) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x4, @raw_data="204914ac7380402a0afd59237050d5dbe1ae88326110cb07318d2ff927df5b48819c3d21e74779ed3106782e60ddae49954a4878d2f28b043bb74a1e28b871837fc374a44b0b0ffdbf2896afdac6eacf2f6980eda09e69f3d763139dbdd755810ffb286ffb7b2d50194740af550414ba1eb6fb514a3bba3fe616dfa64dc172fa70febe0c41326ca5964000efcf6a74e51c4d4fd76f90a20baf1589051c8b36881c464ae1c0899f52a55d3880b29ad36a466e01ead26195b72ba96a4f284d81bf5f4b4b8e334c6cfe"}) 18:55:54 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/174, 0xae}, {&(0x7f00000000c0)=""/39, 0x27}, {&(0x7f0000000100)=""/66, 0x42}, {&(0x7f0000000180)=""/166, 0xa6}], 0x4, 0x0) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000240)=@id={0x1e, 0x3, 0x0, {0x0, 0x2}}, 0x10, 0x0}, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f00000002c0)='vboxnet0\x00', 0x9) r1 = accept4(r0, &(0x7f0000000300)=@x25, &(0x7f0000000380)=0x80, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f00000003c0), 0x8) 18:55:54 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) 18:55:54 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:54 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x801, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000100)=0x7) 18:55:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000000)="1618b74d06ee45faa99bb0b23bc1374f26dfeb136607c721d86817013f9534b7a1ec1a115a4ef0eddf9a377c49524cf7ba1c567286bf91d876fc912b00f605a03013760756b36cd37351462d98f594e408") 18:55:54 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) 18:55:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:55 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x109801) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000280)={0x3, r0, 0x1}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x93, "ebfccbaee3758052a801c0613f754d46c639a67b324293f45768b993fb4ad7f1a2cbaf5c5b0d34fece42675a05235b686ae762ac0317a2e2593da54423b112052e3e3e384934f68808f47ee50e5e4365f868d37d5cebc7be0627a86ee90e099d6374f149a8370837491bf6b4e3d099c0f0053a93ae7d9a045a7c7d0fe4cf89180dbd2edea11cbc7b06f08ad34b8152d25ff1ea"}, &(0x7f0000000140)=0x9b) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000200)={{0x9, 0x3, 0x0, 0xfffffffffffffffe}, 'syz1\x00', 0x26}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r1, 0x8000}, &(0x7f00000001c0)=0x8) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, 0x0) set_mempolicy(0x4001, &(0x7f0000000000)=0x6, 0x7) 18:55:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070") r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x80, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000000c0)=""/4096) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x1, 0x0) 18:55:55 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:55 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) 18:55:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:55 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @multicast2}, {0x307, @local}, 0x2, {0x2, 0x4e21, @remote}, 'irlan0\x00'}) 18:55:55 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 150.016423] 9pnet_virtio: no channels available for device 127.0.0.1 18:55:55 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x801, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000100)=0x7) 18:55:55 executing program 3 (fault-call:5 fault-nth:0): r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:55 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 150.143113] 9pnet_virtio: no channels available for device 127.0.0.1 18:55:55 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x20000000021) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000025c0)='/dev/zero\x00', 0x2005, 0x0) sendmsg$kcm(r2, &(0x7f0000002500)={&(0x7f0000000080)=@nfc_llcp={0x27, 0x1, 0x2, 0x0, 0x7, 0xdbd0, "d5c3019311eeb827d8f25738916b6adb6712decbd20e0f4d7506e84d6981dd99932bda5aba101ce8917972ff448384d3a06d112829314a11cd5ba07782306c", 0x8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)="7a76011a19c671dd9954e5f7c1f5ec1fccfd58d9ed66f69d61a056bf0cc250d104ec79d820f47170752af3e1ddc396500ad3de76017479ee50c58de6760c205a23d8ed3b34af7859d491d71974f434d2d2d2f74c1d55d100c0606e9f51c5c450602fcd60a9e9640d24e9fe28530da388ed519802e2ff207062f7b296fec4e4918f1fc0c63891209d57ea2508d6008bbc1eef9c72466d10d0f963690cb247c0f5a85fe5218cb94274a72b379097b40c17e84a60d8f7dec21197eabe2f57d7c114e27ffe25919bd9223044837a913488736d2a3c3ee9cf7e68", 0xd8}, {&(0x7f0000000200)="32ddce0ab8ba1a85acba799394bf487b32e8e9404c83487fcbfb2c668c6adcd70ca7cb63765c61d9c2a5ba0e9f778f5873de3faafc403409fd64f1b813a948b14005f6f4ba6134575efd49cf6084c44c59d7afa4a90fa9319c8933f9a0afb3623d16d44b9e4488b9edd444d971562443e9d23ecb2681cc46d7493d4cdccdc5da7f517c2c7eedc887db1cb715c106faf41c1cecca1eccde3eb22f330172ca52c79f441089a9797824e48434d180614c58f24b88852b35c5667947c18958026256ac9ffb08b9842eb1861942c8f6f81e20b694ab3b9ec7cdbad2e9d221cd657550c649b9dc0c50427b16", 0xe9}, {&(0x7f0000000300)="7c8381e2a8611f60bfd253d79c9be986bd325d7b0943a7021b26e53419b860c078", 0x21}, {&(0x7f0000000340)="5cd827ae476880581d20196cb8bd62ee8ee1747d22890b62136706215bf4fec1e9851ed70e72cb6eb2637b7e1033897e109ab6310235d29f74d9cb0396df7c57c08e7afcdd08cbb535f89075a9ba3ed46941692917a9532db56f2aa00ac8d8e5ad4ee42fec16c7b926b6ad82c34e97c0ef9f7717469d82e6609dba1be631b2bd9c753e9c", 0x84}, {&(0x7f00000004c0)="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", 0x1000}], 0x5, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x1010}, 0x40000) r3 = socket(0x11, 0x80002, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000002580)=@gcm_256={{0x304}, "e0c5004e7deffe3a", "f5fa5b6cb6b0985fc76693d359d8386f5430011f345274ff8550b855a84739ce", "0c78ac7e", "1c5cfce8a6cd95b8"}, 0x38) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ftruncate(r0, 0x96e) ioctl$VT_ACTIVATE(r2, 0x5606, 0xfffffffffffffffe) setsockopt(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0xff19, 0x300, 0x0, 0x101aa) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000002540)={0x400, 0x6, 0x3}) syz_open_dev$video(&(0x7f0000002600)='/dev/video#\x00', 0x8, 0x8010000) 18:55:55 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x2, @local, 'sit0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @dev, 'batadv0\x00'}}, 0x1e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}) 18:55:55 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') connect$vsock_dgram(r2, &(0x7f0000000240)={0x28, 0x0, 0x2710}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6ae0250f, 0x1) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000001c0)=""/73) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x6, 0x1, 0x4, 0x7, 0x0}, &(0x7f00000000c0)=0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000100)={r4, 0x8}, &(0x7f0000000180)=0x8) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) 18:55:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:55 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) 18:55:55 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f00000000c0)=0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f00000001c0)=r3) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:55 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 150.481350] protocol 88fb is buggy, dev hsr_slave_0 [ 150.487270] protocol 88fb is buggy, dev hsr_slave_1 [ 150.560143] protocol 88fb is buggy, dev hsr_slave_0 [ 150.565305] protocol 88fb is buggy, dev hsr_slave_1 18:55:56 executing program 0: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'syz_tun\x00', 0x3}, 0xfffffffffffffe25) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7, 0x222300) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0xffffffff) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000000c0)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'hwsim0\x00'}, 0x18) rt_sigprocmask(0x3, &(0x7f0000000100)={0x5}, 0x0, 0x8) ioctl(r1, 0x8936, &(0x7f0000000000)) 18:55:56 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:56 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) 18:55:56 executing program 2: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc) 18:55:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:56 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x20000000021) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000025c0)='/dev/zero\x00', 0x2005, 0x0) sendmsg$kcm(r2, &(0x7f0000002500)={&(0x7f0000000080)=@nfc_llcp={0x27, 0x1, 0x2, 0x0, 0x7, 0xdbd0, "d5c3019311eeb827d8f25738916b6adb6712decbd20e0f4d7506e84d6981dd99932bda5aba101ce8917972ff448384d3a06d112829314a11cd5ba07782306c", 0x8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)="7a76011a19c671dd9954e5f7c1f5ec1fccfd58d9ed66f69d61a056bf0cc250d104ec79d820f47170752af3e1ddc396500ad3de76017479ee50c58de6760c205a23d8ed3b34af7859d491d71974f434d2d2d2f74c1d55d100c0606e9f51c5c450602fcd60a9e9640d24e9fe28530da388ed519802e2ff207062f7b296fec4e4918f1fc0c63891209d57ea2508d6008bbc1eef9c72466d10d0f963690cb247c0f5a85fe5218cb94274a72b379097b40c17e84a60d8f7dec21197eabe2f57d7c114e27ffe25919bd9223044837a913488736d2a3c3ee9cf7e68", 0xd8}, {&(0x7f0000000200)="32ddce0ab8ba1a85acba799394bf487b32e8e9404c83487fcbfb2c668c6adcd70ca7cb63765c61d9c2a5ba0e9f778f5873de3faafc403409fd64f1b813a948b14005f6f4ba6134575efd49cf6084c44c59d7afa4a90fa9319c8933f9a0afb3623d16d44b9e4488b9edd444d971562443e9d23ecb2681cc46d7493d4cdccdc5da7f517c2c7eedc887db1cb715c106faf41c1cecca1eccde3eb22f330172ca52c79f441089a9797824e48434d180614c58f24b88852b35c5667947c18958026256ac9ffb08b9842eb1861942c8f6f81e20b694ab3b9ec7cdbad2e9d221cd657550c649b9dc0c50427b16", 0xe9}, {&(0x7f0000000300)="7c8381e2a8611f60bfd253d79c9be986bd325d7b0943a7021b26e53419b860c078", 0x21}, {&(0x7f0000000340)="5cd827ae476880581d20196cb8bd62ee8ee1747d22890b62136706215bf4fec1e9851ed70e72cb6eb2637b7e1033897e109ab6310235d29f74d9cb0396df7c57c08e7afcdd08cbb535f89075a9ba3ed46941692917a9532db56f2aa00ac8d8e5ad4ee42fec16c7b926b6ad82c34e97c0ef9f7717469d82e6609dba1be631b2bd9c753e9c", 0x84}, {&(0x7f00000004c0)="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", 0x1000}], 0x5, &(0x7f00000014c0)=ANY=[@ANYBLOB="1010000000000000ff0000000500000076e92af9d3caf2ff0a1b45819b04207c8e56beecd1a78b426aa15c6b2cb0fb7c7c4b3a32085989c32ca187016ebe051ef154db8d39aca6a8216cc1b5a83ba3b833f4167e621935dce1fc916fe0e56aedd564a89591d9a9a2daf38c8f9cde99d094f798bab8287732dca0313c9c56904b8b782419c94ac8177d45804069818e6216854e7d8a6bbd90daa29caa7d31b273c2e723442a9556b8dc04aa9221475b5faaae0f6eb507e514e9e883374043f337807e57cc82cf7307f448a95752a4758c5258e4b9952327b04c4332ba0195c79d94e7ed9ad830d52611ce2a952b8ae31798c5cab49a5db67d3d3e48c305e4016af19df172f33f3d457e6f3af1aaeb2e8e0d681dd61f358965972b4c9d0833b2b684caf09c68e5fa92737ad158017bf49c135e1312f3e5c13e8dabf5ac7299cdb992cf213dd25b46501bd8fa9da2499fbd27d8e91d20781f631267ac5820faad25cd963ad69fae259b3342ec3c21f3f30a7a264268332190cca895de49d1ae3e457251bde188ccc04f6ab3917e76f7c5fe1c3ed88ada73def8591750ca6a0e7135a8532ab90be33e83ab9f75dd3d6270aac9ec4692bd91ba7af3b91192fc2a98cb313bc389957f778afbc06149f2af4b886dec5afa9233c7b0e87512fa2de6ec00050df2c576173137237f0207bd601f87edcc4f911c311b85eeed7ca9f83fe90023c2f528881e83fa83115c4921a1f195d7e9a9be0d92d6a8d024710f0a43890cf0ca2aa5424e09112be2d083eb3daf1e6eeda76aab4d64cfe825934cb0c134b59e35bddb63406df7225740a3a6476b1f61754ebf68a54d5d9fe789ddf50ee493ad765e81dcbb1859eb4f346c5554da230ef78f0da192ad30b678c387404170816139131410bf63fb6d05010bf9cc2aba90ac83c53a118fecf1f2b5ff3d7b16b752f8cc1236801c00651bccf8050ec7a529bed28cd340c0207f3c0f56c3a74f450f7282d86b6634946e8049ae7195fa2cc2c9f67cb10db2532a2dfcfea083fad600920523445b4a44f568b57b7bbb480385538a7c3134a70bdabf297f3970d3e16f11107a2673eaf78a987f9df1549e93ae3230aa306d336de306489d8d15d872132fb52c8d819acaf07a7cc4b380cfdb65d484c0c969ff56555e9dd119b3da43055b87809b8073759d12babfd794d8cd7b69e9573919beaa366a1b4587a8b25dbc52e742fea6eacbcdd9d834c9249cf1fcca4c7eb76621b08438ec3c9f070a5eedff93f7f29c2420ab87d1c50335dd84df744b07fad1fdf0a763b173a5c685bd8ab2ea55218161abc4eb8f5848dc383d8f3b15ec8a55e32e671273edf3b234943b6395723bf8dcf3636c793049b6b1ca6c52dab5f9fc33dd2a4cc91a5cafda6c7e80aa7f48725c1c06bbab73f665811714d91cdf972354a45b4633208aedf0f157af0c96606fb752aa4f9d67e1a91b9dceb5a4cd0ce1eedeb19c2b7cc8891fd0cf72bcc62aa7f82f2d44503a4cd89d465e6e29485f543182400274a9aba081d4e8589afbd7faa122d557655b31393bc80f55eca3b2b70662621abbb3ffc094fc8f70927276bc1441bb92b43ce7793e89466610f5d5d44fbbef3fe8e37852308dbc27708eccc0774d9355bcd87a4f26784b946a3e45566b0d453ed4818637ea7cb99c4faf4767c82047e70657bb10e6e732d97153fa6edf00924ec885662d70e6b3eebcf2a8a3afcf7d9c7ec941cdd5428bca713704e829926c26f4ba72b93713047f67ea755df8a1e22c58c2e7866a6b190145e590d85e4e0ebcbbe8ee0c1cd310e0eb5360b323b9bf283e382e51921ab0293cdfd72090378fb9a5610e31ef2b0f518e103440765c5efb4a9c11c2b6e199c6ee6ed3dcfb225c2a43f0be47ae9ed863926ea4aa9827ebf67eef65f4a4062873d5cb2f7f057be2fed79ecc051baad920d013179caf90fae2b8ad079d53432ec01bc2dfaa29f748042f4152bfeb51b9fb939e766f9f3f356c039c64472d966141e739f7cb16cdab3027d58b54922bd4d21505bfb9cc081f00feab155f0565e6a3f489c90512fe8a632d8e006d6da3391a1c6ffae53aacda6b8392a9031f6db1006c7358c95434076ad91ed14c2bc3421fc164d32909d41a3decf7ef503e17874f8761bb724d9f04939ffd896d44f41d04576767f284233a9e1404c5274aac0f26cc75a844e28acb331532ea62e5cd7d459b77d8b314f3a408eaef17c0fb5b7dea07880d681ea0a92816a64bec2f3461444537e02ff902de079d39553f5fc377f5432992f84ff46d1e1608dd56e5fbb6350a353be7d1b0cb8065b847e7a3e9607deddcf4057b612c255e8036276e22b5eb86456ad7d9573c983f7b1af00649c0e244f3f2a8f2df41a916af3de51c16effb3cbf3399edec25108c580ec71ca281c176c7bdc51b2f22dbb3fd6baa5b94d678156b45dd47ce913e9f14073ef7b3094a0ff14449a029ecc24ffce4da90db94218e3834d016e789c342536df7c47757ac5d07bb3e364f13eebe722fdacdf7b4d7ffcec884930beb5b0d705476ce8e5752d546f3167202247a31360efe9acc18741958145f264afc5700c0a57197ef7c9f600246801a98c25da84ed3ffdbe4d47ce5050900cc02eafd2db5584835a729d60f3f7e08be9af08b4672136fa46348a3ddb5b20e1cac56455a6f709525f315e156cb1f616a71e174ea3612b33aee8e211d6b62d95c76c17042ec0907e8a359592165fa35817f88fdc3c88edeac5251e89d8bcfded5bf997ca3e1eb448ac4c66c3e3914d0eafcaf585e2971f6c251d58d636c561611da88bb9bbfed8a55f13bf5156fd58fd2c080f2d4f290b0af9ce98561e388d596f05fb3431271f21d7c5b86044b9ec218b099cea7ff2399496db21cc18747554f1199d4d23440b39ba860c9d4da821df8b499ebc97b138e91eafe52370ff3cd82f695cd7d50a3bffe073f713e6d8c1ccaff68cea32b83e890595350c869d660bd0690b2ade6665b4f62458fef32a50e936cff746b71aa754d8c0e90c99362b8a6d29eb6b3901f229571d8f1e7bf407d4232de41a7403ceedbc16bed956bbfc36a5460f835e592909d41769b893b0b0b01721d0d5d71216b4b2edb3a891b67d93d1fb9de3c228c06d3ef7be3e0ed803dfdecc876d288dda27994f9025410eae05050b5f7400113d274af2ec993decd823b705bbfe209e1a275db36a5cdefc71227113c9ae2da3b5093f38fdb2e54c3ca7fac9f9c98602960ed593b8f1ff237c3d3a409a896c4a2a55ac0346fe2dcb66a30030e057e2dc9162cb114a6a71ba8145c98c9a02ac02e1cd8a0db439cd839e090d1f279a80e2c38e18d3f7441555416e00d52d6c668a3db94ee600e8effb9e94e7c79bf8c7ade1a324f310e1382c72c197fc80de4bfe87804a5dee4d7bcaad5bbcb4dcfedc18ebaeeaee6f249fc1f66c73e8ade014db1d4dd5760cbefdbebd95c2cb2094709e56d7471be5ca1933cd80dec704bc3b5ba56127504ea79082326732eabff514f9230691b93589992fb9de9543122e6431e02958e7650cd7371545131c5a02e52b44ec002d14b34f5b829f9fde19dabec11ca46cf35580bc7244992b00eff6371b9e8a2e5db2d67fe32998a1928427e84a5b324b4c679c934c222c082fd67d108ba64f62f4e97db38f3c845b8bfaac46bb81e0768a62a167caa7bd4dd8a9d92ba71ddb9c1263d2625aed0d0f084368b190049b53d1444c0e0176dc779dcfad5e901ec48470b2195d65408fbe8514bf3cd2e7ac3931805e9969fc0e1b26b9189f74d7a6203f716f4ca8a2dcb5098ca2090818dc12e1f245fd618e966300d2d0a8435422d31a82935c63ba9e0ecdf5ff0ad6535d0ba01ad8e46a2d0450d61dcbd6e2b07e32105cd7edcc0caf811e55e90707227a2420c7b18d9103ecfc895d9632232f9c3007c0bbb8d36dba9b22afb85c0e2528f379e5b874001ba9c170b3e0fcd575df82109bf7373a162684c8e4b22f0778cd71ec9bb1ae73b2f855290fbcb5b261f481db61a8ab315137376793d69e5da2e1424f9e176a9bb2e39a077a2b3a60e2efa3e0e7319dd8fd28c11776d78cd0b05d0489d5491eaef2d7c6f8c1d96b479eea3f0cc3437f7a4ea12d02172bf788e5cad7cb7eefe4c40840c0aeecf79bce35b2bd73abf2192aafc58aa529552b714261a3e4693ee2eaa1afebdc940d94dc9621b01a36179b3ecf8f7b906d396ad5fca318e3f3628eeb08a255aab6cdacfc7988401c9152f5673bb4f0d1b469ba6e62facc206dd8a29b17b9545e1d2201f2a60d6883456773740d87c5aa7962615f60f5124cb6ce6a66792085bbb71056b2e57c44e943fefc3190fa70d62cef4ca246ad2fd0c82c796991490134bdf9ab421e1a86b77624e16842583b775763fea5ebbadbe6e848dfb0767453916a7901e339b31e6702ed72fd2b52c1a3e238ec47155fd2f96193b3e2622829a11dbde31b5adebac760552c4837947a5b20ba23c689ea36a6a9569f91a656d0f38f37a79dc858cfb149226f115863dcbb4b33b32daebc3d201503ccc0d7fd9e348e550c495cde8407c6db89cfe7b0a83f3555ad9977e9f2f4563429121b371d3b4dcbd989aa8113db0d50d7df7ab7377a69e3908498b2b9c07b2accf17556ebb9fa43ee9204932a4d9fba814567ccc2e100263a1aceb8ff6ad932c8f20a7098a88b21b5b572440f94e01322250477ee8baab1f6aa0fe12c6fb238591935f1d08e9203c1fd1078bd8ca8b5f876192267572db500ddcc324b5e68f3c5f5454ee1990d89971e422bb2ac92911c4d7b0196f349c687370c3d2cf41f76fd9e96fcc37584df0e5216a7607ef0a8ddca08f6e11e533cb56bd8dcbb46890ec8ef409ccd7a17e67c85bb0bc5a84f4487e0d8ddce64da1d854a8f1a986dd8a3ce2204e26b56d67594960d529d1451b2ecb9e99915150c0b25bca661686940e57a8ca7beb97a08a0ad4c73b6f6c637c5be67b3384934573544bf44724c82bae214d0203b561461f5a1c647462655b284557cb6fffc151f15c52103a887838c829532f543a966eea4f2c04c7ed32582647198718600f5d1e607b2689b2803077efe2ac76a22a54957be7022400dbdc2a79f94de36c394e85c6234e7eca91b554b41003f6d8074892fb7b6db24b580c5dc67d37d1ae95b0b7ed908136468796b0cf7957e00bd5e1390896ca3511670e31ba89e9907c2f054c18154ff4678389b6a026f131a2b9f080e8ec3766f84317b7a771b378c0424de068c584096f2ade12f050e552c7f28eddc00befd9d71ab5b5b90e974c6864d9fb2ccb9f5d05c0ea815955ed2134a22d2ff16809b5128c8be7d2db2211219da343c673726ba5d902cd76754be842bc86c0ed31d18142385b51a037d340ce6a1582513508274664b697f452d7a55348a6a1b6f120f97b04e5f16428ce39d82debc9c3e7aba4f732969ab768ccf9eb15ec1ab6fa2337c662553ef4e78e20ed48c88d9ec4722dc1078e88f9914ebc9e0cdd8c6ee66d8122a48d5d690a8dcf24e909ab34a767fda9f8ec38ede724405b3648cc1345b4c2309588c9d21fc0d6c8c68100a3a895dcfb0c8a94c24ee80699654f426ce91ddbcc320ee83e02b917a71595418dc4af5b1cdfd25316fbc5a191511ae6524de740333953f0d6c800ffc2fb8ff65030cec2a91911248ea37e6483c1b2cae14e351664f4ca775ef9e45b321ad6f885aff5d5697a1c7875c6e5eee8c31c0a0c21232ec529ce4b4b830327cf8f5e5f1496227b0720c39734c185faf53bd26eccb20b31f88c7fe56392ec68f6a30959fd805836"], 0x1010}, 0x40000) r3 = socket(0x11, 0x80002, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000002580)=@gcm_256={{0x304}, "e0c5004e7deffe3a", "f5fa5b6cb6b0985fc76693d359d8386f5430011f345274ff8550b855a84739ce", "0c78ac7e", "1c5cfce8a6cd95b8"}, 0x38) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ftruncate(r0, 0x96e) ioctl$VT_ACTIVATE(r2, 0x5606, 0xfffffffffffffffe) setsockopt(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0xff19, 0x300, 0x0, 0x101aa) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000002540)={0x400, 0x6, 0x3}) syz_open_dev$video(&(0x7f0000002600)='/dev/video#\x00', 0x8, 0x8010000) 18:55:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = creat(&(0x7f0000000200)='./bus\x00', 0xffff) ftruncate(r1, 0x0) seccomp(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x100000006, 0x0, 0x0, 0x400000050000}]}) 18:55:56 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 150.967663] audit: type=1400 audit(1560192956.166:46): avc: denied { create } for pid=8295 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_iscsi_socket permissive=1 18:55:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 151.040148] protocol 88fb is buggy, dev hsr_slave_0 [ 151.045958] protocol 88fb is buggy, dev hsr_slave_1 18:55:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000001c0)={0x40001, 0x0, [0x7f, 0x6, 0x35, 0x7fffffff, 0x7fffffff, 0x8000, 0x9]}) splice(r0, &(0x7f0000000300), r1, &(0x7f0000000340), 0x7, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x8000, 0xfffffffffffff98f, 0x8578, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x0, 0x20}, &(0x7f0000000180)=0x90) setsockopt(r0, 0x101, 0x1, 0x0, 0xfffffffffffffc83) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f00000002c0)=0x10) socket$vsock_dgram(0x28, 0x2, 0x0) [ 151.090221] audit: type=1326 audit(1560192956.286:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8308 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45c0ba code=0x50000 18:55:56 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) 18:55:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, 0x0, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 151.155449] audit: type=1326 audit(1560192956.286:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8308 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=35 compat=0 ip=0x457741 code=0x50000 18:55:56 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6b8, 0x200000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0xfffffffffffffffd) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00\x15\x1d\xecdt\xff\x86\xafhp\xd8\xb0D\xe5}fDg|\x95\x18\x01\x00\x90$\x1a\xb5\xd9\xf7\xc78\xa7\xd3=d\xef\xac[\x80\x10%2Y\xee*\xa1G\xbe.\x9d\xca\xb9[\xdc#\x19\x00'/75) preadv(r0, &(0x7f00000017c0), 0x1b0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000000c0)={0x66, 0xfff, 0x5, 0xc, 0x7}) 18:55:56 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x480, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=0x0, &(0x7f00000001c0)=0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={r3, 0x2}, &(0x7f0000000240)=0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x44) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000280)={0x9, 0x0, [], {0x0, @bt={0x2, 0x4, 0x0, 0x3, 0x0, 0x5, 0xfffffffffffffffb, 0x0, 0xffffffffffff5113, 0x3, 0x1, 0x9, 0xd8, 0x9, 0x2, 0x28}}}) 18:55:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, 0x0, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:56 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}}, 0x98) [ 151.280154] audit: type=1326 audit(1560192956.286:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8308 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45c0ba code=0x50000 18:55:56 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x20000000021) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000025c0)='/dev/zero\x00', 0x2005, 0x0) sendmsg$kcm(r2, &(0x7f0000002500)={&(0x7f0000000080)=@nfc_llcp={0x27, 0x1, 0x2, 0x0, 0x7, 0xdbd0, "d5c3019311eeb827d8f25738916b6adb6712decbd20e0f4d7506e84d6981dd99932bda5aba101ce8917972ff448384d3a06d112829314a11cd5ba07782306c", 0x8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)="7a76011a19c671dd9954e5f7c1f5ec1fccfd58d9ed66f69d61a056bf0cc250d104ec79d820f47170752af3e1ddc396500ad3de76017479ee50c58de6760c205a23d8ed3b34af7859d491d71974f434d2d2d2f74c1d55d100c0606e9f51c5c450602fcd60a9e9640d24e9fe28530da388ed519802e2ff207062f7b296fec4e4918f1fc0c63891209d57ea2508d6008bbc1eef9c72466d10d0f963690cb247c0f5a85fe5218cb94274a72b379097b40c17e84a60d8f7dec21197eabe2f57d7c114e27ffe25919bd9223044837a913488736d2a3c3ee9cf7e68", 0xd8}, {&(0x7f0000000200)="32ddce0ab8ba1a85acba799394bf487b32e8e9404c83487fcbfb2c668c6adcd70ca7cb63765c61d9c2a5ba0e9f778f5873de3faafc403409fd64f1b813a948b14005f6f4ba6134575efd49cf6084c44c59d7afa4a90fa9319c8933f9a0afb3623d16d44b9e4488b9edd444d971562443e9d23ecb2681cc46d7493d4cdccdc5da7f517c2c7eedc887db1cb715c106faf41c1cecca1eccde3eb22f330172ca52c79f441089a9797824e48434d180614c58f24b88852b35c5667947c18958026256ac9ffb08b9842eb1861942c8f6f81e20b694ab3b9ec7cdbad2e9d221cd657550c649b9dc0c50427b16", 0xe9}, {&(0x7f0000000300)="7c8381e2a8611f60bfd253d79c9be986bd325d7b0943a7021b26e53419b860c078", 0x21}, {&(0x7f0000000340)="5cd827ae476880581d20196cb8bd62ee8ee1747d22890b62136706215bf4fec1e9851ed70e72cb6eb2637b7e1033897e109ab6310235d29f74d9cb0396df7c57c08e7afcdd08cbb535f89075a9ba3ed46941692917a9532db56f2aa00ac8d8e5ad4ee42fec16c7b926b6ad82c34e97c0ef9f7717469d82e6609dba1be631b2bd9c753e9c", 0x84}, {&(0x7f00000004c0)="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", 0x1000}], 0x5, &(0x7f00000014c0)=ANY=[@ANYBLOB="1010000000000000ff0000000500000076e92af9d3caf2ff0a1b45819b04207c8e56beecd1a78b426aa15c6b2cb0fb7c7c4b3a32085989c32ca187016ebe051ef154db8d39aca6a8216cc1b5a83ba3b833f4167e621935dce1fc916fe0e56aedd564a89591d9a9a2daf38c8f9cde99d094f798bab8287732dca0313c9c56904b8b782419c94ac8177d45804069818e6216854e7d8a6bbd90daa29caa7d31b273c2e723442a9556b8dc04aa9221475b5faaae0f6eb507e514e9e883374043f337807e57cc82cf7307f448a95752a4758c5258e4b9952327b04c4332ba0195c79d94e7ed9ad830d52611ce2a952b8ae31798c5cab49a5db67d3d3e48c305e4016af19df172f33f3d457e6f3af1aaeb2e8e0d681dd61f358965972b4c9d0833b2b684caf09c68e5fa92737ad158017bf49c135e1312f3e5c13e8dabf5ac7299cdb992cf213dd25b46501bd8fa9da2499fbd27d8e91d20781f631267ac5820faad25cd963ad69fae259b3342ec3c21f3f30a7a264268332190cca895de49d1ae3e457251bde188ccc04f6ab3917e76f7c5fe1c3ed88ada73def8591750ca6a0e7135a8532ab90be33e83ab9f75dd3d6270aac9ec4692bd91ba7af3b91192fc2a98cb313bc389957f778afbc06149f2af4b886dec5afa9233c7b0e87512fa2de6ec00050df2c576173137237f0207bd601f87edcc4f911c311b85eeed7ca9f83fe90023c2f528881e83fa83115c4921a1f195d7e9a9be0d92d6a8d024710f0a43890cf0ca2aa5424e09112be2d083eb3daf1e6eeda76aab4d64cfe825934cb0c134b59e35bddb63406df7225740a3a6476b1f61754ebf68a54d5d9fe789ddf50ee493ad765e81dcbb1859eb4f346c5554da230ef78f0da192ad30b678c387404170816139131410bf63fb6d05010bf9cc2aba90ac83c53a118fecf1f2b5ff3d7b16b752f8cc1236801c00651bccf8050ec7a529bed28cd340c0207f3c0f56c3a74f450f7282d86b6634946e8049ae7195fa2cc2c9f67cb10db2532a2dfcfea083fad600920523445b4a44f568b57b7bbb480385538a7c3134a70bdabf297f3970d3e16f11107a2673eaf78a987f9df1549e93ae3230aa306d336de306489d8d15d872132fb52c8d819acaf07a7cc4b380cfdb65d484c0c969ff56555e9dd119b3da43055b87809b8073759d12babfd794d8cd7b69e9573919beaa366a1b4587a8b25dbc52e742fea6eacbcdd9d834c9249cf1fcca4c7eb76621b08438ec3c9f070a5eedff93f7f29c2420ab87d1c50335dd84df744b07fad1fdf0a763b173a5c685bd8ab2ea55218161abc4eb8f5848dc383d8f3b15ec8a55e32e671273edf3b234943b6395723bf8dcf3636c793049b6b1ca6c52dab5f9fc33dd2a4cc91a5cafda6c7e80aa7f48725c1c06bbab73f665811714d91cdf972354a45b4633208aedf0f157af0c96606fb752aa4f9d67e1a91b9dceb5a4cd0ce1eedeb19c2b7cc8891fd0cf72bcc62aa7f82f2d44503a4cd89d465e6e29485f543182400274a9aba081d4e8589afbd7faa122d557655b31393bc80f55eca3b2b70662621abbb3ffc094fc8f70927276bc1441bb92b43ce7793e89466610f5d5d44fbbef3fe8e37852308dbc27708eccc0774d9355bcd87a4f26784b946a3e45566b0d453ed4818637ea7cb99c4faf4767c82047e70657bb10e6e732d97153fa6edf00924ec885662d70e6b3eebcf2a8a3afcf7d9c7ec941cdd5428bca713704e829926c26f4ba72b93713047f67ea755df8a1e22c58c2e7866a6b190145e590d85e4e0ebcbbe8ee0c1cd310e0eb5360b323b9bf283e382e51921ab0293cdfd72090378fb9a5610e31ef2b0f518e103440765c5efb4a9c11c2b6e199c6ee6ed3dcfb225c2a43f0be47ae9ed863926ea4aa9827ebf67eef65f4a4062873d5cb2f7f057be2fed79ecc051baad920d013179caf90fae2b8ad079d53432ec01bc2dfaa29f748042f4152bfeb51b9fb939e766f9f3f356c039c64472d966141e739f7cb16cdab3027d58b54922bd4d21505bfb9cc081f00feab155f0565e6a3f489c90512fe8a632d8e006d6da3391a1c6ffae53aacda6b8392a9031f6db1006c7358c95434076ad91ed14c2bc3421fc164d32909d41a3decf7ef503e17874f8761bb724d9f04939ffd896d44f41d04576767f284233a9e1404c5274aac0f26cc75a844e28acb331532ea62e5cd7d459b77d8b314f3a408eaef17c0fb5b7dea07880d681ea0a92816a64bec2f3461444537e02ff902de079d39553f5fc377f5432992f84ff46d1e1608dd56e5fbb6350a353be7d1b0cb8065b847e7a3e9607deddcf4057b612c255e8036276e22b5eb86456ad7d9573c983f7b1af00649c0e244f3f2a8f2df41a916af3de51c16effb3cbf3399edec25108c580ec71ca281c176c7bdc51b2f22dbb3fd6baa5b94d678156b45dd47ce913e9f14073ef7b3094a0ff14449a029ecc24ffce4da90db94218e3834d016e789c342536df7c47757ac5d07bb3e364f13eebe722fdacdf7b4d7ffcec884930beb5b0d705476ce8e5752d546f3167202247a31360efe9acc18741958145f264afc5700c0a57197ef7c9f600246801a98c25da84ed3ffdbe4d47ce5050900cc02eafd2db5584835a729d60f3f7e08be9af08b4672136fa46348a3ddb5b20e1cac56455a6f709525f315e156cb1f616a71e174ea3612b33aee8e211d6b62d95c76c17042ec0907e8a359592165fa35817f88fdc3c88edeac5251e89d8bcfded5bf997ca3e1eb448ac4c66c3e3914d0eafcaf585e2971f6c251d58d636c561611da88bb9bbfed8a55f13bf5156fd58fd2c080f2d4f290b0af9ce98561e388d596f05fb3431271f21d7c5b86044b9ec218b099cea7ff2399496db21cc18747554f1199d4d23440b39ba860c9d4da821df8b499ebc97b138e91eafe52370ff3cd82f695cd7d50a3bffe073f713e6d8c1ccaff68cea32b83e890595350c869d660bd0690b2ade6665b4f62458fef32a50e936cff746b71aa754d8c0e90c99362b8a6d29eb6b3901f229571d8f1e7bf407d4232de41a7403ceedbc16bed956bbfc36a5460f835e592909d41769b893b0b0b01721d0d5d71216b4b2edb3a891b67d93d1fb9de3c228c06d3ef7be3e0ed803dfdecc876d288dda27994f9025410eae05050b5f7400113d274af2ec993decd823b705bbfe209e1a275db36a5cdefc71227113c9ae2da3b5093f38fdb2e54c3ca7fac9f9c98602960ed593b8f1ff237c3d3a409a896c4a2a55ac0346fe2dcb66a30030e057e2dc9162cb114a6a71ba8145c98c9a02ac02e1cd8a0db439cd839e090d1f279a80e2c38e18d3f7441555416e00d52d6c668a3db94ee600e8effb9e94e7c79bf8c7ade1a324f310e1382c72c197fc80de4bfe87804a5dee4d7bcaad5bbcb4dcfedc18ebaeeaee6f249fc1f66c73e8ade014db1d4dd5760cbefdbebd95c2cb2094709e56d7471be5ca1933cd80dec704bc3b5ba56127504ea79082326732eabff514f9230691b93589992fb9de9543122e6431e02958e7650cd7371545131c5a02e52b44ec002d14b34f5b829f9fde19dabec11ca46cf35580bc7244992b00eff6371b9e8a2e5db2d67fe32998a1928427e84a5b324b4c679c934c222c082fd67d108ba64f62f4e97db38f3c845b8bfaac46bb81e0768a62a167caa7bd4dd8a9d92ba71ddb9c1263d2625aed0d0f084368b190049b53d1444c0e0176dc779dcfad5e901ec48470b2195d65408fbe8514bf3cd2e7ac3931805e9969fc0e1b26b9189f74d7a6203f716f4ca8a2dcb5098ca2090818dc12e1f245fd618e966300d2d0a8435422d31a82935c63ba9e0ecdf5ff0ad6535d0ba01ad8e46a2d0450d61dcbd6e2b07e32105cd7edcc0caf811e55e90707227a2420c7b18d9103ecfc895d9632232f9c3007c0bbb8d36dba9b22afb85c0e2528f379e5b874001ba9c170b3e0fcd575df82109bf7373a162684c8e4b22f0778cd71ec9bb1ae73b2f855290fbcb5b261f481db61a8ab315137376793d69e5da2e1424f9e176a9bb2e39a077a2b3a60e2efa3e0e7319dd8fd28c11776d78cd0b05d0489d5491eaef2d7c6f8c1d96b479eea3f0cc3437f7a4ea12d02172bf788e5cad7cb7eefe4c40840c0aeecf79bce35b2bd73abf2192aafc58aa529552b714261a3e4693ee2eaa1afebdc940d94dc9621b01a36179b3ecf8f7b906d396ad5fca318e3f3628eeb08a255aab6cdacfc7988401c9152f5673bb4f0d1b469ba6e62facc206dd8a29b17b9545e1d2201f2a60d6883456773740d87c5aa7962615f60f5124cb6ce6a66792085bbb71056b2e57c44e943fefc3190fa70d62cef4ca246ad2fd0c82c796991490134bdf9ab421e1a86b77624e16842583b775763fea5ebbadbe6e848dfb0767453916a7901e339b31e6702ed72fd2b52c1a3e238ec47155fd2f96193b3e2622829a11dbde31b5adebac760552c4837947a5b20ba23c689ea36a6a9569f91a656d0f38f37a79dc858cfb149226f115863dcbb4b33b32daebc3d201503ccc0d7fd9e348e550c495cde8407c6db89cfe7b0a83f3555ad9977e9f2f4563429121b371d3b4dcbd989aa8113db0d50d7df7ab7377a69e3908498b2b9c07b2accf17556ebb9fa43ee9204932a4d9fba814567ccc2e100263a1aceb8ff6ad932c8f20a7098a88b21b5b572440f94e01322250477ee8baab1f6aa0fe12c6fb238591935f1d08e9203c1fd1078bd8ca8b5f876192267572db500ddcc324b5e68f3c5f5454ee1990d89971e422bb2ac92911c4d7b0196f349c687370c3d2cf41f76fd9e96fcc37584df0e5216a7607ef0a8ddca08f6e11e533cb56bd8dcbb46890ec8ef409ccd7a17e67c85bb0bc5a84f4487e0d8ddce64da1d854a8f1a986dd8a3ce2204e26b56d67594960d529d1451b2ecb9e99915150c0b25bca661686940e57a8ca7beb97a08a0ad4c73b6f6c637c5be67b3384934573544bf44724c82bae214d0203b561461f5a1c647462655b284557cb6fffc151f15c52103a887838c829532f543a966eea4f2c04c7ed32582647198718600f5d1e607b2689b2803077efe2ac76a22a54957be7022400dbdc2a79f94de36c394e85c6234e7eca91b554b41003f6d8074892fb7b6db24b580c5dc67d37d1ae95b0b7ed908136468796b0cf7957e00bd5e1390896ca3511670e31ba89e9907c2f054c18154ff4678389b6a026f131a2b9f080e8ec3766f84317b7a771b378c0424de068c584096f2ade12f050e552c7f28eddc00befd9d71ab5b5b90e974c6864d9fb2ccb9f5d05c0ea815955ed2134a22d2ff16809b5128c8be7d2db2211219da343c673726ba5d902cd76754be842bc86c0ed31d18142385b51a037d340ce6a1582513508274664b697f452d7a55348a6a1b6f120f97b04e5f16428ce39d82debc9c3e7aba4f732969ab768ccf9eb15ec1ab6fa2337c662553ef4e78e20ed48c88d9ec4722dc1078e88f9914ebc9e0cdd8c6ee66d8122a48d5d690a8dcf24e909ab34a767fda9f8ec38ede724405b3648cc1345b4c2309588c9d21fc0d6c8c68100a3a895dcfb0c8a94c24ee80699654f426ce91ddbcc320ee83e02b917a71595418dc4af5b1cdfd25316fbc5a191511ae6524de740333953f0d6c800ffc2fb8ff65030cec2a91911248ea37e6483c1b2cae14e351664f4ca775ef9e45b321ad6f885aff5d5697a1c7875c6e5eee8c31c0a0c21232ec529ce4b4b830327cf8f5e5f1496227b0720c39734c185faf53bd26eccb20b31f88c7fe56392ec68f6a30959fd805836"], 0x1010}, 0x40000) r3 = socket(0x11, 0x80002, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000002580)=@gcm_256={{0x304}, "e0c5004e7deffe3a", "f5fa5b6cb6b0985fc76693d359d8386f5430011f345274ff8550b855a84739ce", "0c78ac7e", "1c5cfce8a6cd95b8"}, 0x38) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ftruncate(r0, 0x96e) ioctl$VT_ACTIVATE(r2, 0x5606, 0xfffffffffffffffe) setsockopt(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000000), 0xff19, 0x300, 0x0, 0x101aa) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000002540)={0x400, 0x6, 0x3}) syz_open_dev$video(&(0x7f0000002600)='/dev/video#\x00', 0x8, 0x8010000) 18:55:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, 0x0, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 151.438399] audit: type=1326 audit(1560192956.286:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8308 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=35 compat=0 ip=0x457741 code=0x50000 [ 151.501246] audit: type=1326 audit(1560192956.286:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8308 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45c0ba code=0x50000 [ 152.070205] kauditd_printk_skb: 4072 callbacks suppressed [ 152.070213] audit: type=1326 audit(1560192957.266:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8308 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x412ea1 code=0x50000 [ 152.101931] audit: type=1326 audit(1560192957.276:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8308 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x412ea1 code=0x50000 [ 152.126504] audit: type=1326 audit(1560192957.276:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8308 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x412ea1 code=0x50000 [ 152.150995] audit: type=1326 audit(1560192957.276:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8308 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x412ea1 code=0x50000 [ 152.175497] audit: type=1326 audit(1560192957.276:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8308 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x412ea1 code=0x50000 [ 152.200627] audit: type=1326 audit(1560192957.276:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8308 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x412ea1 code=0x50000 [ 152.225201] audit: type=1326 audit(1560192957.276:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8308 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x412ea1 code=0x50000 [ 152.250394] audit: type=1326 audit(1560192957.276:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8308 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x412ea1 code=0x50000 [ 152.274840] audit: type=1326 audit(1560192957.276:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8308 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x412ea1 code=0x50000 [ 152.299566] audit: type=1326 audit(1560192957.276:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8308 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x412ea1 code=0x50000 18:55:59 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ptrace$cont(0x9, r0, 0x0, 0x0) 18:55:59 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x8000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000240)=""/141, &(0x7f0000000300)=0x8d) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000340)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) ioctl(r1, 0x7f, &(0x7f0000001040)="fc6e5722efea29442be28966b5120765bed806a39aa25d2f498a1ad39f6b6f6f1e14fcd7ea6a857ca5eca8d2282d29bf023d292cabf2d87913a938144ec8e08f53fbd2fa6992134eea259cb618f7383ab585570248b372a51f2b1f0eaf3d59b562b97faa785ae1e95ee1b1d7ecc83cddebe33949edf7c65c554a6aa491c5ff7114d5e611b9263e7008dc928a2a40242cfb10cb0a9382634a349617514aaff78a3fe1ecdc291e9752e774fb05c97556832068f6f279940e8d559ba6359d38b623cab5ba166a0a97ed660f6f6f50196f1c77c853f8b649ac2860d4572cd34772457f4d85c1c2ce52e09ffe7284e2cb5e5c3f3ae566a974da01b282971190b3f766dcc3a6384ae9cc55b64c4b2480d9b36e0fda7f938aef7058ff3ba65460cf39ae670f8089ee0bf5de10496d1441f90060351f2305706345bde38e04c83e4f2fd22697c9a84e095658e8625533d5acbbb0d997112f50ee595eec436a5650f4a2de4a63882720af6ad402f0592803ff99307fb4d52f8858cd3f7e8d605cdfccad5316de97a8c9928050902fd96ec45cf23a891004c8bcefc6ad7378f1ebc5b6cd4561518e30f52952156636a1fdec88daa53c2be14d6b18df1576570d5e2888f1165073b64b295a427b48788180d049250b02adaba61b33476538e67fcc84a09c250401f9a6af37f97889fbaa4ecf6efd1c88b070f0647802bfb29e7579d9f3e2c98f5cb21d4b12cdca253ee129fbba4265fe5fe63c6dca982ddaacd7a5a9d68e327839fe1191a720fb914209ac423a961698b8a9af9396b8c1170683c664f1e6fad98cb64ff124a2bbb3c83af606750afafd2eabd0e45dc8ffe9bdb37a3cdb79b81f30ba00197a32844075a91f69585960b6500722c97edeb35f1dc3f994726fb7457b8cc09a0ed4722c26608989098bb0913f0b429ba10c93f9c9442736a4eb46365b0b6d5ad03db0d3102f0ae3fef082cab954d7e467ce71408645503b463d3d5ebcd559a84c013df6272ff9266466ddf98abda342efb698c6b31d1246cfba39e1e8be64cd59a35042cb70a90ca9cc9835d00c8c2913812d0fa04df4fec7f93cfd748d990efbcbea33ada33eef2f770332864f2cb25aa02265cb747e61b1de0c1ab975504604b7ff3d491c28bf18f206fbcc31b55b3ed081d0e86fdcf3b48015641e796c7de57658c08a8b6591c24e2634bff35fc3cc25543e4bdacba9fddce7bea366f6b9b0b27e4c35e23453f04a88929ec344f089d332bfe7ca0aefa306c17037d9f62ebf5deffdcd3105f294d3a4d76881fc23dfccb80031ef9ed9b9dbb2475be8594cf1faf4f64ffd19d4f255c4de488a5c5cb32e2af43e677ffe86dd3ae653e074864e3cd1629aaf4850d476bcf233eb5eb2768b80ca57840fc6d4b87cbc91338636c23f47c89f21e16f380a434ae6b17b54930717c934b6365fdaee2eeac40102b67c28e864b19e397cd86c3567dec2f8b2ed104141400cccc7e046c877e8d27887f5d5e89be74b44c787bde1b9c55f90848e6af0e5bc15a0c85b3ef708f473e1ec54b6597c7a373f4bf0d009c6d40edee580a528f635046459738cde83e7dd3f7291964a931f75d586ec62db47a5e0d4c051de8c2b24db8b0ae223c3c191b055ec11856474c8930c4485ba9f791ae76c8ce68074f5809396f6d98eac318db87220c69b80813b27f514e4b4d9e0f32bccb614f1e3b2a9c93af54dab74f59849a3d68e376f9f9e5dd0d858e6948bed76aaf265029bee269343bbbf8bbb387ef3866d87e8b8a72ae00e19528449bcc7d4ce28425639100cc658865b7e419e55540b4b9244da27f83e9a35505cb9e73e9ce56a84ee696ea902d980ba16cbf13d386b44b32b0769703a32302dbe4053348c14673d8d9b9cb8fa911482c19fca782a2ce928deacbb5666224a95f474c715819cf46e82c6faca6f3506442dce7e536e1cdab06bd8d69a73f394d177bf64d214909912b4fc16079dd78764f97d94bcf526d978501bd6474c9aa4fce81e8ff3460b93bc92554ce4a587c1c59b1ebdf3866552033e40fe81e6255944ffc36c24ed7c3e461bd9cb5b06d1f3f0cc727c47e9e47c69933d1995de1d2a3fd63d13b9dc392ca9c0f75669a84d73de1957cb65e3a4694f540068202b86d78e636224b97b1766393fe9e996c9bac7f404cca5a42020bf23374d880d259b4adb205c8928b1b0bf79bc38188e773d20128b420cc8b22233a65551031df152aef67608ffdd9ceae1d034f65fed800107e8aa7ad186bbc2d7a785553bbd9a69ca1fc60b857bf37ec0f03fa7e1728dc5fc38c3de39c81738181c56e7779803ec0e737a95ac404c200aeaf2ac19e2663ad4da99eea7364b9b856efb4fe3614c655e4545b242f34c7ab5436836d8ebe815f6e3f4f01302d432604a150fd08323f07892ce61f2cbd16be6f72b357503e53f98e52283ab49635f0dd491aef941318dbd56cb13175d1baa365bf6bf62f421e9ff4e0397cec30ec84ab20d35bfe975edd22d7e9371b3d2708beac44a80fcb6225f663b94f0dc2c9cde02b9c125108cdd9e7bcee5bfd070d735b006eaf752471be9f55015f4d2cc883ff7e95bd7765f4f9507a616308373a587364144779760ad1239b2af87f3640971ca89db2040fc99548b326742a554e4052ee19562021521c448606461da873f1004cb679f1f0cc21658f2ab1dd5ae81bc0785c5907a7283a6243e6bd2e4ac91d436f25c1d54159768921aed23344bb3d9130a9808ddf360e720e40f2b6c2036a293f0248d3e0e33aaea58bb05959fc9a0e3100fd93fb82a35a5604cb561e8ab1c51d002cfe9f67a1110a48756bfd9fc72c1d0a7b59619b9f1b6d35fcf0d84f4228776cd06af8fc5e5e76d938a15cfa185dd075a1a657137b26d4c3b86f8192573c92ac3cb67210f665f29a7b9dd586ae3f9dc851c2be17fce6aed4a2ca9b5ed41c8ee207fd56f725bbf3364ced10bf83100ef3fc57fc3d32eaf5e727c1327ddf5db36aa64a31e383b769cd769030acb42b1b37272eafac38e5857d70b63c514073c7b6aa3889d60fce5a5e98d138a47b9cc3de4f6175c2cd4a19bff74cff8e227125889e382cc207a1d2d3d496ece8e62092c524a9d551c7f130deb73dff6235b5e694555a247bd80ad2b6a8b1febe027e23bd1961b040a6c6ec991841dcdb8e5f6ca88a8dd2cc79daf3b0c8d0282f3960ffee9e43524cb54abff4cbda15b5e6b6e10b40901fc78fe376915531c8739388bbe4fb9efc586a9d9d881965f4730eb9aedd8de3e56e9c980cf3e075864ff1c9ffe9fc6b1a7baf589e2d5f01c3d653f74a7d5c64eb99fd59a7d05a74853eb4837875115a0be6fc15e570228dc9a56aa3f36af293a6c9601ac42cf254f83b3c7b926b7a71bc57d9e760a8db3959fe8cdfb72d983fec8983e5c3e17a87c3afbc50e2672bdeba387554dfa99bb599bca3ea228145a5567f2347bb8cb82e7757f186956cf21432fdf5a2dccb530ad774058ebe54d924636a9a7b27a4f91c8c4fb513cf4cb476bc30c06e0128d44125efce5f249daf0a3dd1a635e1ae667339f8abf6bbb5b021a61d2ebdc1b0df13a935629896b1b3ef9cc8c5e6e9822800955347276061892fc62e398e347948274522acc28af4b8dc7226f700195de163528e714fcaac61897688b8f29cd84a0f0048051eda1ce89bc2bb8ca9a103894c919b027101b5d6cdf07aa55a8fa4d122c3d7672bf048e01a466a4562ef2e117f77e1f33b29950149a721e044de8c9c73f74f77cf17cf11ec82b2cddc81dc46a0cff82e2a9808f05657e97032ca66bc05d6a7cc4b32fa5482c5dff4689b1c96bc752ccca2de1ed941e2996a292ed34dfaac46a5b4e14bb733f7c6b55f60436b83b78baf10c5e57378c09c402ff8a86b357dccb38cda79754e5cbc0f1accaa0a0cf5917c923d63ff24dcfb2bbff5d8eb65f15c69c17f49edecf3bdcf01919647cc0c8f56055dbb5b993164ca06b5a0b02772cb093dbbb5cbbd9bae291c44ed2b36e547a0c08f9456792d18ede3a921afbe4ed0ededf8453a4445e053bca365b8622e39b8f4fd68604ad877f63cae7cedaf028851e37c4255f685706e2bebe4d699a657501300ebd7ec62a0f7e2faf88415e2869ba218b778e6a843b9fd38cef212b3e91967b9142a3c68321b5c09d0de1a7723ff7897f46ddbe04533181314eb31448b2b34b054445069b1e5d9d8cd9a6051dfd0b00dc0a2800b42a43e4621383635d8c248105bbd639bd1ae16084b8cb582445b564e6e1560025482040163203ed52a1da5e406482f76c210eec4685f93c9998b9f13731955940042d73cae0752bdf2d30f3e715e20dae9509bdce4a12f40021e145a26efbf03dbdff1bbbecd3c6737eed87a603c77fe5c1c3a35193e5126a3a6c56e2eae844ac35edf820fa4d9a6ead799a3a876e06174ae157d828951a790c24fa6b1480d03ae5eefbec68d72f249afb25505621c24cefe9295341c2bcc4329db07c9c85a1359b10140dc6bd6a463d6565e8a30ef7f613646d572ce026ac907e384a1affce7e4dbbc5f832d7fa58994f13e7eb26e5685afc2bce447af18aba72b8da06e9ababf24d4f7fa3d1242451b0a551f1a59a1fb8772bad2a52f85ada7da073248402659ae3ff24eec4cbdb06ef36f3eb46d4972975c7acd78f6d6916550a048891e0f6b3abc0b5b14d4c0864c69bdfcb4fbef0e2961ba8aa8b3a963b7c44af5b555f78048c0df387858baef22e3f9cdafa05b43fbd89a16e43b092ab4b951efae89340d76d8d43f2623f29335d4395d538b8f768344a87d75962610bc46e391957a9e20763fbbc54e85e10d96100b025a8961dda514907eedf03e0b776b7810b30dca4ddb338fc07af1636d13a97f6e32e572f14d6a32e09aaab78241ceab88ce86dfd31de9bc8de4ec3c13ce055be4ec8874ee217a394d322008076d0143846537eeb4a19ba7938dee0668beb807659cc14bb2921fdd8c102fa8edf723b1ce05c29d5bf8b031bcf559189f1560fe316ea07231a5a800d0596360ad2906e7dd1a94b28c8aaa7165febd8201d625a4e4a8f2dfe5450379a5bb66b491464a3a607cc03e933c7f82e2c0de9c6babd8200869412795a6410c5bedfaad164561421f3da204ed580d3bba45c95516d0a8cf9a0f254b54ec3b3133d2efcd8e32594742b2f78bc25dcff2bfc03399092ffac841b26063eebc53146ce49e980f11e046eab15e5541cf60d35dbb55382cd3f1cba498a159e678005cbe1191950a3271d81df28db8c1c0df79d7ca41958f2be5772279200b7df89b6c35ef8c7cfe6364c6a3f1e026d3dde040b6b02479b7b9c206b5a099f6dd5746cfc3bf5a212033c671dfcfa02b0cb3d2fc3952b4837f4445bdf2bd7523d3a2ce330fbf502210829a029e2e56954dee053b2e500eecf5ae67759a3b611a524f479eb9151769392d63d6038f63a1f4ca4d0da6b80dbbdf9b9b5954ca2ecbc605e7422802467c3445b30a68488f9ac5c5a88ff8a8abbb1c09a4aff67c8714ac39d2cab4b12c6aca7770f148a80e908600e7864608937609f7f0460c3e91f5b534084a9b6379a740cd7ae07d97a9f0acbf9b8b8cc59f7dbae30bbde69b1ca2511a6977b798b47fece625d17a3ddcaec0bf5c4f72d21434dade6bdf2b9971f43c16794cef7de06251d60f870cad075071ada450aacbc08a031e6e77112d53cddbe86e5f3eb6fe2ff11331d2c9b37ad7d210d7074ab522b744c9a324b4b532a16866e6c396e41a36d54defde7c898d4841bd6f5c27ebeb63e025de8eef26a334b6c827426d5") r2 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x100000890e, &(0x7f0000000080)="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") ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000380)=0xc) capget(&(0x7f00000003c0)={0x20080522, r4}, &(0x7f0000000400)={0x1ff, 0x8, 0x7, 0xe00d, 0x1, 0xfff}) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x5, 0x181042) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) 18:55:59 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x6, 0x0, 0x1, 0xd, 0x0, 0x6}, &(0x7f0000000040)=0x20) ioctl(r0, 0xc1004111, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x4000, 0x0) flock(r0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) bind$packet(r1, &(0x7f0000000140)={0x11, 0x7, r2, 0x1, 0x1f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x14) 18:55:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000), 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:59 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}}, 0x98) 18:55:59 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000100)="d57ca6cc0eee5fcf37fe396b0f10f2e30ed83a51b3210b23d2fac106356ac20af7e519bb41c55774bc7e680ff6c7f413272667cc1bde0d13f17672372d85815c43b2ae6037b9ae96b5b959b22980394ab52325b76a54962491b42cff789cfae04cd1df7fd237f5515d974083dc6687c69bd79c1e6eea9b3cd30ba26b7195c9979f01603b9f83abc8aafac05ad38e9c46603095dccccf611d7459fcd33c8b8cfadff0ce86111d7b299adb3823f820f4a0612a80f58e28ab7f0e1c4d2b95") setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000040)="a2e6fa9a", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f00000001c0)="ce03100001b3b100ff901efc9fb35c22cc6dc379bca27d8599b512eceb92bd30961166bf00000000070020e1dfb0d0c739ed4083ed97d2409c3c7eb7c0c39ccc48e97079", 0x44, 0x0, 0x0, 0x0) 18:55:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x80000000, 0x101200) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000100)="3d11a21764122fc895c1c576c69fbfcd295e6974058c9b686d45504d799f52f684702f3eb3f8a1751dc7d770062872c7b5140f65d586f42a9f4d42359ab2edbf2795afc776cb0f927e2dd1faa08772f79cccf3aaf7f4cba9d24268f8cb8107f8bf6ad3e411e4887674b0c89ff917cf41d4f71ad0391a777c956dd2734be963d41a1749a95adc13936362033b5afc638602ed701b074cbd1ce2c2dad0d9c6ef3107f0000513023f4399ee14915715d09d1d9b38f318da512511ae18ab66199cc43b5a7c43f151b7ecbd7daa0ae7e6f5baaf3016a18b524884cb59d64b7c285ce298", {0xc220, 0x1029, 0x4745504a, 0x4, 0x8, 0x23, 0x7, 0xfff}}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fffffe181004e22000075a9bdee0521d283945f64009400050028925aa8000000000000ff7f00f0fffeffe809000000fff5dd001b2f0f000100070abd00000078b7ff3ec600", 0x58}], 0x1) 18:55:59 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x501000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:59 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}}, 0x98) 18:55:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000), 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:59 executing program 4: perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x8d, "240213005494ca55e59829b6cefe4030a9053bfc41e2d8b519f0d15d7390db531fc51cbfdc79498f0b1a63af27fabcfda5c209d7a00215c1a5f41f17a36d95eba4db602df94e58cb2095602d81f9a57f360f49db8add0a7c8f48f17ac19a448223b9fc2c7f3fed7c74d6061b92696969342b85ca9a3e956aeff902a3f337a1424891186d2cb009192a9200e95c"}, &(0x7f0000000340)=0x95) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={r2, @in={{0x2, 0x4e23, @remote}}, 0x7ff, 0x6}, &(0x7f0000000440)=0x90) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000200)={0x2, 0x70, 0x0, 0x101, 0x9, 0x401, 0x0, 0x5, 0x50000, 0x8, 0x3f, 0x10001, 0x6d0, 0xf7, 0x100000000, 0x0, 0x8b, 0x2, 0x0, 0x81, 0xfffffffffffffffe, 0x8001, 0x6, 0x7ff, 0x9, 0x9, 0x8000, 0x1, 0x81, 0x0, 0x1, 0x4, 0x1000, 0x331410d6, 0x200000000000000, 0x0, 0x20, 0x10000, 0x0, 0xffff, 0x1, @perf_config_ext={0x5, 0x6}, 0x4000, 0x1e, 0x6, 0x7, 0x2, 0xc4d0, 0x9}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r3, 0x16d6}, &(0x7f0000000180)=0x8) 18:55:59 executing program 5 (fault-call:4 fault-nth:0): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000280)={0x1000, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) [ 154.154273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 18:55:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000), 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000003100"/24], &(0x7f0000000340)='syzkaller\x00', 0x5, 0x338, &(0x7f000000cf3d)=""/195}, 0x48) 18:55:59 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r4, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x66b0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x885}, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000080)=""/81) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000300)={0x1}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffdfffffffffffd}}) acct(&(0x7f00000004c0)='./file0\x00') ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x33, @dev={0xfe, 0x80, [], 0x12}, 0x7}}, 0x1, 0x9, 0x10001, 0x2, 0x8}, &(0x7f0000000000)=0x42) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000100)=""/60) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x1a}, 0x1}}, 0x1000, 0x20002000000000, 0x4, 0xff, 0x9}, 0x98) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:55:59 executing program 2: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r0 = syz_open_dev$usb(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000040)="0f320f21b40f0f39bbf20f009192870f20860f20d86635200000000f22d8670fae093e0f00d00f01df3e3680ab0e0000", 0x30}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000000)) signalfd4(r0, &(0x7f0000000080)={0x5}, 0x8, 0x800) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x453, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$caif(r0, &(0x7f00000000c0)=@util={0x25, "6a9ce4b342507ad12589936d63834295"}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000100)=0x1, 0x4) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) 18:55:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200", 0x2) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 154.286807] FAULT_INJECTION: forcing a failure. [ 154.286807] name failslab, interval 1, probability 0, space 0, times 1 [ 154.312224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.346588] CPU: 1 PID: 8400 Comm: syz-executor.5 Not tainted 4.14.124 #18 [ 154.353838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.363203] Call Trace: [ 154.365989] dump_stack+0x138/0x19c [ 154.369635] should_fail.cold+0x10f/0x159 [ 154.373815] should_failslab+0xdb/0x130 [ 154.378158] kmem_cache_alloc_node+0x56/0x780 [ 154.382662] ? path_openat+0x193b/0x3f70 [ 154.386731] ? do_sys_open+0x2c5/0x430 [ 154.390633] __alloc_skb+0x9c/0x500 [ 154.394255] ? skb_scrub_packet+0x4b0/0x4b0 [ 154.398573] _sctp_make_chunk+0x51/0x270 [ 154.402818] sctp_make_control+0x35/0x150 [ 154.406949] sctp_make_heartbeat+0x88/0x250 [ 154.411272] ? ima_rdwr_violation_check+0x212/0x3f0 [ 154.416282] ? sctp_make_violation_max_retrans+0xf0/0xf0 [ 154.421715] ? ima_add_template_entry.cold+0x48/0x48 [ 154.426799] ? save_trace+0x290/0x290 [ 154.430582] ? ima_match_policy+0x84b/0x1180 [ 154.434977] sctp_sf_heartbeat.isra.0+0x26/0x180 [ 154.439719] sctp_sf_do_prm_requestheartbeat+0x27/0x100 [ 154.445079] sctp_do_sm+0xfb/0x4a30 [ 154.448692] ? __lock_acquire+0x5f9/0x45e0 [ 154.452910] ? __lock_acquire+0x5f9/0x45e0 [ 154.457131] ? sctp_do_8_2_transport_strike.isra.0+0x8a0/0x8a0 [ 154.463105] ? trace_hardirqs_on+0x10/0x10 [ 154.467935] ? __lock_acquire+0x5f9/0x45e0 [ 154.472163] ? save_trace+0x290/0x290 [ 154.476133] ? trace_hardirqs_on+0x10/0x10 [ 154.480365] ? save_trace+0x290/0x290 [ 154.484152] ? __might_fault+0x110/0x1d0 [ 154.488199] ? find_held_lock+0x35/0x130 [ 154.492256] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 154.497518] sctp_apply_peer_addr_params+0x126/0x1000 [ 154.502701] sctp_setsockopt_peer_addr_params+0x34b/0x400 [ 154.508317] ? sctp_getsockopt_assoc_stats+0x540/0x540 [ 154.513589] ? lock_sock_nested+0x8c/0x110 [ 154.517813] ? trace_hardirqs_on+0xd/0x10 [ 154.521968] ? __local_bh_enable_ip+0x99/0x1a0 [ 154.526536] sctp_setsockopt+0xa56/0x3f50 [ 154.530854] ? sctp_setsockopt_paddr_thresholds+0x3b0/0x3b0 [ 154.536547] ? sock_has_perm+0x1ed/0x280 [ 154.540602] ? selinux_tun_dev_create+0xc0/0xc0 [ 154.545256] ? lock_downgrade+0x6c2/0x6e0 [ 154.549388] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 154.555521] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 154.560891] sock_common_setsockopt+0x94/0xd0 [ 154.565561] SyS_setsockopt+0x13c/0x210 [ 154.569784] ? SyS_recv+0x40/0x40 [ 154.573231] ? do_syscall_64+0x53/0x640 [ 154.577189] ? SyS_recv+0x40/0x40 [ 154.580625] do_syscall_64+0x1e8/0x640 [ 154.584491] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 154.589320] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 154.594496] RIP: 0033:0x459279 18:55:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100)=0x7, 0x4) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0x80000001}, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x802102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x9f, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) 18:55:59 executing program 4: setrlimit(0x7, &(0x7f0000000180)) r0 = semget$private(0x0, 0x0, 0x514) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000000)=""/13) io_setup(0x8, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) 18:55:59 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x100) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r2 = gettid() sched_setattr(r2, &(0x7f00000000c0)={0x30, 0x5, 0x0, 0x2f, 0x0, 0x2, 0x279dbce1, 0x5265}, 0x0) [ 154.597672] RSP: 002b:00007f283c97fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.605368] RAX: ffffffffffffffda RBX: 00007f283c97fc90 RCX: 0000000000459279 [ 154.612621] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 154.619875] RBP: 000000000075bf20 R08: 0000000000000098 R09: 0000000000000000 [ 154.627131] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f283c9806d4 [ 154.634383] R13: 00000000004ceab8 R14: 00000000004dd320 R15: 0000000000000005 18:55:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200", 0x2) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:59 executing program 5 (fault-call:4 fault-nth:1): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:55:59 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) lseek(r0, 0x0, 0x1) fgetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000040)=""/214, 0xd6) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000001c0)={0x545, {{0xa, 0x4e22, 0xe83, @remote, 0x9}}, {{0xa, 0x4e22, 0x9, @remote, 0x8}}}, 0x108) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$packet(r0, &(0x7f0000000300)="f58ce4cfbbeb8eed75c56fc43f6597ce32139a9a6c880e39f05152077c228bf0c5afd9cc5ff8aab2518c5794d0e540e25ca5d7098d52e181309f7e1db5a5f3fe7e3354191b8a33cbb12c00965492", 0x4e, 0x40, 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)=@canfd={{0x0, 0x8001, 0x2, 0x200}, 0x0, 0x2, 0x0, 0x0, "8a67b53a7fe7749c1b93af5b6075a8eec30733bf59e15de09114f15fe50bdb8cac8304feeac29c56784c5744cb55b50c1de05994f8e49073c97c72499f4062b7"}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40840) 18:55:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200", 0x2) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:55:59 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0xfffd, 0x0) capset(&(0x7f00002d0ff8)={0x20080522}, &(0x7f0000cc0000)) write$nbd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000000000080bd82099cbab388361f79ab66f0b33ddfcf9252abcf5a2fdbedf1fbb11bedfb1f8cd557b0bdfcd7f42f63af872a0a11e32f7a0eb6bb02f6b78b1ee3c0a580f6ba185947306a84c6c5e7be785dc0cf305fdb2d6ba15da2df2ed92ed73780a98367298c9a081b1272c290f1479b31f8e3a142f7a01609eb1218502c7cfb37a1ac8ba35b44395b385bd6395b8f667ec6e218a8ed0f91345503d95bf28732401b33607479317571a7d4de00"/197], 0x1) [ 154.841012] FAULT_INJECTION: forcing a failure. [ 154.841012] name failslab, interval 1, probability 0, space 0, times 0 [ 154.869897] CPU: 1 PID: 8454 Comm: syz-executor.5 Not tainted 4.14.124 #18 [ 154.876976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.886351] Call Trace: [ 154.888958] dump_stack+0x138/0x19c [ 154.892699] should_fail.cold+0x10f/0x159 [ 154.896860] should_failslab+0xdb/0x130 [ 154.900848] kmem_cache_alloc_node_trace+0x5a/0x770 [ 154.905878] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 154.911352] __kmalloc_node_track_caller+0x3d/0x80 [ 154.916382] __kmalloc_reserve.isra.0+0x40/0xe0 [ 154.921062] __alloc_skb+0xcf/0x500 [ 154.924695] ? skb_scrub_packet+0x4b0/0x4b0 [ 154.929026] _sctp_make_chunk+0x51/0x270 [ 154.933090] sctp_make_control+0x35/0x150 [ 154.937248] sctp_make_heartbeat+0x88/0x250 [ 154.941568] ? ima_rdwr_violation_check+0x212/0x3f0 [ 154.946590] ? sctp_make_violation_max_retrans+0xf0/0xf0 [ 154.952054] ? ima_add_template_entry.cold+0x48/0x48 [ 154.957251] ? save_trace+0x290/0x290 [ 154.961056] ? ima_match_policy+0x84b/0x1180 [ 154.965479] sctp_sf_heartbeat.isra.0+0x26/0x180 [ 154.970242] sctp_sf_do_prm_requestheartbeat+0x27/0x100 [ 154.975612] sctp_do_sm+0xfb/0x4a30 [ 154.979237] ? __lock_acquire+0x5f9/0x45e0 [ 154.983479] ? __lock_acquire+0x5f9/0x45e0 [ 154.987733] ? sctp_do_8_2_transport_strike.isra.0+0x8a0/0x8a0 [ 154.993703] ? trace_hardirqs_on+0x10/0x10 [ 154.997940] ? __lock_acquire+0x5f9/0x45e0 [ 155.002176] ? save_trace+0x290/0x290 [ 155.005984] ? trace_hardirqs_on+0x10/0x10 [ 155.010225] ? save_trace+0x290/0x290 [ 155.014029] ? __might_fault+0x110/0x1d0 [ 155.018264] ? find_held_lock+0x35/0x130 [ 155.022341] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 155.027638] sctp_apply_peer_addr_params+0x126/0x1000 [ 155.032857] sctp_setsockopt_peer_addr_params+0x34b/0x400 [ 155.038402] ? sctp_getsockopt_assoc_stats+0x540/0x540 [ 155.044183] ? lock_sock_nested+0x8c/0x110 [ 155.048422] ? trace_hardirqs_on+0xd/0x10 [ 155.052570] ? __local_bh_enable_ip+0x99/0x1a0 [ 155.057250] sctp_setsockopt+0xa56/0x3f50 [ 155.061409] ? sctp_setsockopt_paddr_thresholds+0x3b0/0x3b0 [ 155.067301] ? sock_has_perm+0x1ed/0x280 [ 155.071367] ? selinux_tun_dev_create+0xc0/0xc0 [ 155.076130] ? lock_downgrade+0x6c2/0x6e0 [ 155.080281] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 155.085906] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 155.091201] sock_common_setsockopt+0x94/0xd0 [ 155.095707] SyS_setsockopt+0x13c/0x210 [ 155.099683] ? SyS_recv+0x40/0x40 [ 155.103142] ? do_syscall_64+0x53/0x640 [ 155.107120] ? SyS_recv+0x40/0x40 [ 155.110587] do_syscall_64+0x1e8/0x640 [ 155.114473] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 155.119330] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 155.124536] RIP: 0033:0x459279 [ 155.127733] RSP: 002b:00007f283c97fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 18:56:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x800000000000013f, 0xfffffffffffffffc}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000100)=[{0x9, 0x0, [0x5, 0x2, 0xa43, 0x8, 0x0, 0x8, 0x0, 0x6, 0x8, 0x3f, 0x6aad, 0x6, 0x100000001, 0x6, 0x7f, 0x8]}, {0x8, 0x0, [0x4, 0x1, 0x9, 0x0, 0x6, 0xff800000000000, 0x400, 0x3, 0x10001, 0x6, 0x6, 0xffffffffffffffaf, 0xeda, 0x8, 0x5, 0x7ff]}, {0x2b, 0x0, [0xa74442dc00, 0x8, 0xfffffffffffffff7, 0x2, 0xffffffffffffffe0, 0x2, 0x800, 0x2, 0xaf4, 0xd04d, 0xffffffffffffffff, 0x20, 0x0, 0x4, 0x5766, 0x904]}], 0xffffffffffffffff, 0x1, 0x1, 0xd8}}, 0x20) 18:56:00 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', r1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100000000000000040045ccae6ef07993628845f56487160000000000000800", @ANYRES32=0x0, @ANYBLOB="10000200000000002000000000000000"], 0x2c, 0x0) chdir(&(0x7f0000000340)='./file0\x00') r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5f, 0x20200) write$P9_RLOPEN(r2, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x0, 0x0, 0x4}, 0x7}}, 0x18) [ 155.135443] RAX: ffffffffffffffda RBX: 00007f283c97fc90 RCX: 0000000000459279 [ 155.142716] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 155.149982] RBP: 000000000075bf20 R08: 0000000000000098 R09: 0000000000000000 [ 155.157259] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f283c9806d4 [ 155.164528] R13: 00000000004ceab8 R14: 00000000004dd320 R15: 0000000000000005 18:56:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000080)) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000001000"/14], 0x1a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x10203, 0x3, 0x1, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x7ff}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000180)={r3, 0x4}, 0x8) 18:56:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a20000", 0x3) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:00 executing program 0: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0xd, 0x48000028, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x0) 18:56:00 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) 18:56:00 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 18:56:00 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x20800) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000080)='vboxnet0^\x00', 0xa) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) read$alg(r2, &(0x7f0000001040)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:00 executing program 5 (fault-call:4 fault-nth:2): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:00 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0xa21, &(0x7f0000014000)=""/4096}, 0x48) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0xffffffffffffffda) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0)) 18:56:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000340)=0x25, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x3, [0x3, 0x0, 0x100]}}) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xffffffffffffffd1, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x400000000004e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="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", 0x218, 0x8000, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) close(r0) 18:56:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a20000", 0x3) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x111, 0x4}}, 0x20) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000000600)=[{&(0x7f0000000100)=""/143, 0x8f}, {&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000002c0)=""/54, 0x36}, {&(0x7f0000000300)=""/196, 0xc4}, {&(0x7f0000000400)=""/77, 0x4d}, {&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000500)=""/23, 0x17}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000540)=""/164, 0xa4}], 0x9, &(0x7f00000006c0)}, 0x40000100) [ 155.444957] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 155.474631] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 155.487172] FAULT_INJECTION: forcing a failure. [ 155.487172] name failslab, interval 1, probability 0, space 0, times 0 [ 155.505353] CPU: 0 PID: 8506 Comm: syz-executor.5 Not tainted 4.14.124 #18 [ 155.512421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.521788] Call Trace: [ 155.521820] dump_stack+0x138/0x19c [ 155.528016] should_fail.cold+0x10f/0x159 [ 155.533158] should_failslab+0xdb/0x130 [ 155.537151] kmem_cache_alloc+0x47/0x780 [ 155.541315] ? __alloc_skb+0x3ee/0x500 18:56:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a20000", 0x3) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:00 executing program 4: ioctl(0xffffffffffffffff, 0x3, &(0x7f0000000100)="15c1") socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, 0xfffffffffffffffe, 0x0, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0x3ff, &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x802, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010009080800414900000004fcff", 0x58}], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'team0\x00'}) [ 155.545299] ? skb_scrub_packet+0x4b0/0x4b0 [ 155.545315] sctp_chunkify+0x4b/0x280 [ 155.553429] _sctp_make_chunk+0x14d/0x270 [ 155.557585] sctp_make_control+0x35/0x150 [ 155.557596] sctp_make_heartbeat+0x88/0x250 [ 155.566061] ? ima_rdwr_violation_check+0x212/0x3f0 [ 155.571096] ? sctp_make_violation_max_retrans+0xf0/0xf0 [ 155.576832] ? ima_add_template_entry.cold+0x48/0x48 [ 155.581952] ? save_trace+0x290/0x290 [ 155.585768] ? ima_match_policy+0x84b/0x1180 [ 155.590204] sctp_sf_heartbeat.isra.0+0x26/0x180 18:56:00 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000003c0)={{0x100000001}}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x109000, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000180)=""/254) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000000000001000000000000000800000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32=r1, @ANYBLOB="000000000600"/28, @ANYRES32=r1, @ANYBLOB="000000000300"/28, @ANYRES32=r2, @ANYBLOB="00000000010000000100"/28, @ANYRES32=r1, @ANYBLOB="00000000ffff00"/28, @ANYRES32=r1, @ANYBLOB="000000000500"/28, @ANYRES32=r0, @ANYBLOB="00000000020000000000000000000000000000000000000000e80000", @ANYRES32=r1, @ANYBLOB="00000000caf200"/28]) [ 155.594985] sctp_sf_do_prm_requestheartbeat+0x27/0x100 [ 155.600368] sctp_do_sm+0xfb/0x4a30 [ 155.604000] ? __lock_acquire+0x5f9/0x45e0 [ 155.604012] ? __lock_acquire+0x5f9/0x45e0 [ 155.604029] ? sctp_do_8_2_transport_strike.isra.0+0x8a0/0x8a0 [ 155.612520] ? trace_hardirqs_on+0x10/0x10 [ 155.612531] ? __lock_acquire+0x5f9/0x45e0 [ 155.612539] ? save_trace+0x290/0x290 [ 155.612551] ? trace_hardirqs_on+0x10/0x10 [ 155.612562] ? save_trace+0x290/0x290 [ 155.612576] ? __might_fault+0x110/0x1d0 [ 155.612585] ? find_held_lock+0x35/0x130 [ 155.612604] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 155.612619] sctp_apply_peer_addr_params+0x126/0x1000 [ 155.612633] sctp_setsockopt_peer_addr_params+0x34b/0x400 [ 155.612645] ? sctp_getsockopt_assoc_stats+0x540/0x540 [ 155.612666] ? lock_sock_nested+0x8c/0x110 [ 155.612673] ? trace_hardirqs_on+0xd/0x10 [ 155.612684] ? __local_bh_enable_ip+0x99/0x1a0 [ 155.681685] sctp_setsockopt+0xa56/0x3f50 [ 155.685841] ? sctp_setsockopt_paddr_thresholds+0x3b0/0x3b0 [ 155.691559] ? sock_has_perm+0x1ed/0x280 18:56:00 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) fchmod(r1, 0x1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400002, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 155.695626] ? selinux_tun_dev_create+0xc0/0xc0 [ 155.695639] ? lock_downgrade+0x6c2/0x6e0 [ 155.704460] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 155.710107] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 155.715487] sock_common_setsockopt+0x94/0xd0 [ 155.715504] SyS_setsockopt+0x13c/0x210 [ 155.724688] ? SyS_recv+0x40/0x40 [ 155.728155] ? do_syscall_64+0x53/0x640 [ 155.732229] ? SyS_recv+0x40/0x40 [ 155.735694] do_syscall_64+0x1e8/0x640 [ 155.739592] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 155.744461] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 155.749833] RIP: 0033:0x459279 [ 155.753026] RSP: 002b:00007f283c97fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.760752] RAX: ffffffffffffffda RBX: 00007f283c97fc90 RCX: 0000000000459279 [ 155.768036] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 155.775316] RBP: 000000000075bf20 R08: 0000000000000098 R09: 0000000000000000 [ 155.782602] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f283c9806d4 18:56:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000480)={0x0, 0xfffffffd, 0x2, {0x2, @raw_data="c5d57e1409c8c8bfc4b0a6a486e6759ec6b71794ff0adc9ee376a40807fdd9774aece3e8b95da34ee175d3529bc03c3401cbd467e3a00b3f565d83fcdaa18e1364954192aa37c8b5d52de4df78b6ea9e89a2c13f92b9f7650b89fdf12ca7c48762bc81646f92b9f2270c1a324c9820fd0525a8c381ced94247dfa06a9362cdade36c5ee4e0463288dced378801a8dad713036ecfa51add03337e4cc1d3d7cdea599d986641334404b67bd660b034ebd565d306b651d8b3a7d05256fd53039928498f4aa480448183"}}) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000040)=0x53, 0x4) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc058565d, &(0x7f0000000300)={0x0, 0x2, 0x0, {0x0, @raw_data="2085f3072c9b42f03f10be83b68ebcf014a0409fdf8be3d3e82c747c7f79f7cee00b443f02000000a91ca25441677d16ff0adc9e2d6eebf4bef6c96076d67f243aebaac6430c9ef1a788e60eb3d0a7c29a5e3416871c8a51df55701a05e0a2f09883c482efaf6dc9e1695038733a23bbf0faf76a1d3fae5c251c4fad507b2ead2f1581057e3f84f3e8503ee570d8069eb53a897d2dd5f3d89629917fb171132181e9f3c510ac5229a6b6096547977578c5795d84cf23fe1d042df97dbd37a4b3d0e338a1b611e3ae"}}) [ 155.789905] R13: 00000000004ceab8 R14: 00000000004dd320 R15: 0000000000000005 18:56:01 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000000)={{0xffffff94}, {0xfdfdffff}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x1, 0x0, 0x80, 0x0, 0xef}, 0x100000000, 0x0, 0x9}) 18:56:01 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl(r1, 0x7c6821d8, &(0x7f0000001040)="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") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 155.880946] use of bytesused == 0 is deprecated and will be removed in the future, [ 155.897320] use the actual size instead. 18:56:01 executing program 5 (fault-call:4 fault-nth:3): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:01 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100026bd7000fbdbdf25070000003c000200080007000000000008000500090000009dcfea3d06000000080007000000000008000d0001000000080003007ef3000008000900040000000c00020008000b000a000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e, 0x0, 0x0, 0x9}}, 0x50) 18:56:01 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:01 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x7) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400, 0x0) r2 = accept$alg(r1, 0x0, 0x0) r3 = fcntl$getown(r1, 0x9) r4 = perf_event_open(0x0, r3, 0x6, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000000)) fcntl$setstatus(r2, 0x4, 0x2800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r2, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) r5 = getpid() sched_setattr(r5, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 18:56:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6cc0400fbab65d8b4ac2ca35c6e", 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0xc200, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) sendmmsg(r1, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000140), 0x4) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000100)={0xfffffffffffeffff, 0x5, 0x3}) 18:56:01 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x1, 0x2}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}, {0x2, 0x7, r3}], {0x4, 0x2}, [{0x8, 0x5, r4}, {0x8, 0x1, r5}, {0x8, 0x2, r6}], {0x10, 0x1}}, 0x54, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000140)='./file0\x00', 0x0, r7) 18:56:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:01 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000240)="00000000000000000000006284c497af8cc6d77863ed6423288a58282709721e0ee2ad550c739cd93374b828d2eda030cb93cb79058bd9b9ed0570b532fbb9d5ca08623def7f364cc8750e80cf8d4fe3343c0b5c9925fcdd901b125c1554877b9bc0a17bbe447c6746e39902814894add912b707020f633f9e362e5736b0ed555cb0879c588b287750418fc32648c15f9e914c751a905bd8eb625812b39fd9acffb88f68446ad5cb9d6374") r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f00000000c0)={0x498, 0x8002, 0x3, 0x5, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={r2, 0x5, 0x30, 0x0, 0x3}, &(0x7f00000001c0)=0x18) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) clock_gettime(0x5, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 156.094165] FAULT_INJECTION: forcing a failure. [ 156.094165] name failslab, interval 1, probability 0, space 0, times 0 18:56:01 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000400)={{0x4, 0x10000, 0x6, 0x1, 0x80, 0xa3eb}, 0x5, 0xfffffffffffffffe, 0x219a, 0x6, 0x6, "03097ccec4953c915a5067e719fa649d07a7bdd757c861b200ea326aa8636b686ae5bab9f32249ddec25671647e021fa680ed596d1ce41eabd223d21218dcbb0e80137f15add1c466794a8f562a28f2b2399cce39b2fbcbc23001042c783956be5a674f3e5caf3e424413fe88248bded9ffeb51f821d9baa7e7a07638e7b24a9"}) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) getuid() socketpair(0xb, 0x80007, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), 0x4) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x20000, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000140)={{0x100000000, 0x9, 0x4000000000000000, 0x7d42, 0x0, 0x7}, 0xffffffffffffffff, 0x8, 0xa4}) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000001c0)="d5fb1a20a8ebc4a2ca694b698df0ea6f4e75b981469ea0f2c3477d1f87d663b05df4b612dfe29546bca14c99c78168e590bf485480f90951a51b44b0b471647e0a4ef089dcd77b512319fcd0ec064b08a8a3f650599cc40fca1082cfef2a41666c6b4224043cc0d019af57aff0eba5201a66e2ac37261553200e67ee501d225a30f35122589fcdbe70b2a65179c1341de95a125ce01367d8cd6e9c644f2cd671ef956b82c0b57c46b523ff7acafdeb6400b089d5bc076dd930e514a92d85bde2a428474a339fe7f91e56dcff1e4e697c4b1b9bf4a4db97bc10acd774684d0f6e", 0xe0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) recvmsg(r2, &(0x7f00000015c0)={&(0x7f0000000340)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)}, {&(0x7f0000001540)}], 0x3}, 0x2) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) 18:56:01 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") tee(r0, r0, 0x7, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 156.161083] CPU: 0 PID: 8562 Comm: syz-executor.5 Not tainted 4.14.124 #18 [ 156.168157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.177523] Call Trace: [ 156.180127] dump_stack+0x138/0x19c [ 156.183863] should_fail.cold+0x10f/0x159 [ 156.188027] should_failslab+0xdb/0x130 [ 156.192144] kmem_cache_alloc_node+0x287/0x780 [ 156.196722] ? unwind_get_return_address+0x61/0xa0 [ 156.201669] __alloc_skb+0x9c/0x500 [ 156.205472] ? skb_scrub_packet+0x4b0/0x4b0 18:56:01 executing program 4: add_key(&(0x7f0000000200)='blacklist\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)="6da90f4ed2aacda1a12cc1b8d1d0cf93c0c232b4112ccdea7e4399f7c52529ba35fa83b541e3ee2d1d4cdc75393871ada7d04ddc7a8646ef1468d7bf53a92c1177e87ca7ae71f760f3ff709b21e256cb40a0786763017fa25ceda61cd2413aae6a0bb5673519a711e5f1ba1dd24d2895ab1015201cc3dbbb3732d07c8542a435", 0x80, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000580)=@abs, &(0x7f0000000140)=0x6e, 0x80000) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r1) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, r3) getsockname(r2, &(0x7f0000000600)=@xdp, &(0x7f0000000680)=0x80) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000280)="772e3bc2d2130b063f91019ae664fa92e351c25b05a8078c54be40c21923a7a8ed1da0e08258465cf8e965556a47536671b49b2404e055780760bcf19e40eecff7168f7e908e680767a4c55998c040c3e9d84c375c284b0d266a3f495acf26dcdcaa517d298f28f68d5ae17107f41ecc5b11e50c891a1ec8fdb5b024397909a8bf10cadc0308c25a80966a537d9eeea92052f9afe2aed8f5170c8df8c11f1cd10c8bfe1b92cea8670275f812d551aedf5709d7c3d489a2be9eaf56a6ad6072fc69d625380311c1e4c4bb1fd68cf684f484a0c5f15f096734c118cec3d2", 0xdd, r4) [ 156.209802] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 156.215278] sctp_packet_transmit+0x351/0x3020 [ 156.219870] ? sctp_packet_config+0x614/0x9f0 [ 156.219892] ? sctp_packet_config+0x9f0/0x9f0 [ 156.219904] ? sctp_transport_burst_limited+0x17b/0x1c0 [ 156.234269] sctp_outq_flush+0xd13/0x31b0 [ 156.238438] ? __sctp_outq_teardown+0xde0/0xde0 [ 156.238451] ? ima_add_template_entry.cold+0x48/0x48 [ 156.238464] ? ima_match_policy+0x84b/0x1180 [ 156.252641] ? sctp_sf_heartbeat.isra.0+0x12a/0x180 [ 156.257687] sctp_outq_uncork+0x60/0x70 [ 156.261765] sctp_do_sm+0x417/0x4a30 [ 156.265486] ? __lock_acquire+0x5f9/0x45e0 [ 156.269769] ? __lock_acquire+0x5f9/0x45e0 [ 156.274021] ? sctp_do_8_2_transport_strike.isra.0+0x8a0/0x8a0 [ 156.280011] ? trace_hardirqs_on+0x10/0x10 [ 156.284250] ? __lock_acquire+0x5f9/0x45e0 [ 156.288499] ? save_trace+0x290/0x290 [ 156.292311] ? trace_hardirqs_on+0x10/0x10 [ 156.296714] ? save_trace+0x290/0x290 [ 156.300528] ? __might_fault+0x110/0x1d0 [ 156.304603] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 156.310419] sctp_apply_peer_addr_params+0x126/0x1000 [ 156.315634] sctp_setsockopt_peer_addr_params+0x34b/0x400 [ 156.321278] ? sctp_getsockopt_assoc_stats+0x540/0x540 [ 156.326579] ? lock_sock_nested+0x8c/0x110 [ 156.330820] ? trace_hardirqs_on+0xd/0x10 [ 156.335151] ? __local_bh_enable_ip+0x99/0x1a0 [ 156.339760] sctp_setsockopt+0xa56/0x3f50 [ 156.343924] ? sctp_setsockopt_paddr_thresholds+0x3b0/0x3b0 [ 156.349648] ? sock_has_perm+0x1ed/0x280 [ 156.353711] ? selinux_tun_dev_create+0xc0/0xc0 [ 156.358398] ? lock_downgrade+0x6c2/0x6e0 [ 156.362542] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 156.368172] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 156.373644] sock_common_setsockopt+0x94/0xd0 [ 156.378224] SyS_setsockopt+0x13c/0x210 [ 156.382207] ? SyS_recv+0x40/0x40 [ 156.385666] ? do_syscall_64+0x53/0x640 [ 156.389734] ? SyS_recv+0x40/0x40 [ 156.393189] do_syscall_64+0x1e8/0x640 [ 156.397081] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 156.402974] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 156.408161] RIP: 0033:0x459279 [ 156.411345] RSP: 002b:00007f283c97fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 156.419056] RAX: ffffffffffffffda RBX: 00007f283c97fc90 RCX: 0000000000459279 [ 156.426327] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 156.433598] RBP: 000000000075bf20 R08: 0000000000000098 R09: 0000000000000000 [ 156.440868] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f283c9806d4 [ 156.448153] R13: 00000000004ceab8 R14: 00000000004dd320 R15: 0000000000000005 18:56:01 executing program 5 (fault-call:4 fault-nth:4): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:01 executing program 4: mkdir(&(0x7f0000000040)='./control\x00', 0x20) chmod(&(0x7f0000000340)='./control\x00', 0x9c32f69e6caa24ef) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r0) setreuid(0x0, 0xee00) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$bt_bnep(0x1f, 0x3, 0x4) openat$userio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/userio\x00', 0x200000, 0x0) syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0xf4, 0x8400) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x24000, 0x0) syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0x0, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/pid\x00') socket$bt_hidp(0x1f, 0x3, 0x6) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x100000000, 0x6, 0x401, 0x5, 0x0, 0x1026, 0x4000, 0x1, 0x60, 0x0, 0xe68, 0x7, 0x6, 0x100000000, 0x7661, 0x0, 0xfffffffffffffffd, 0xffffffff, 0x3, 0x1b, 0x2, 0x5, 0x7fffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x6, 0x7ff, 0xfffffffffffffffb, 0x100000001, 0xc5, 0x9, 0x6, 0x2, 0x3407, 0x7, 0x0, 0x3, 0x2, @perf_config_ext={0x2000000000, 0x9}, 0x200, 0x1ff, 0x4, 0x0, 0x6, 0x5ee}, 0xffffffffffffffff, 0xf, 0xffffffffffffff9c, 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x4000, 0x0) r3 = dup2(r2, r1) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000380)=""/196) open(&(0x7f0000000000)='./control\x00', 0xc40beb2474dfd22a, 0xf6fffbff) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x7fff) 18:56:01 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x200) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 156.606958] FAULT_INJECTION: forcing a failure. [ 156.606958] name failslab, interval 1, probability 0, space 0, times 0 [ 156.625947] CPU: 1 PID: 8600 Comm: syz-executor.5 Not tainted 4.14.124 #18 [ 156.633279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.642648] Call Trace: [ 156.645261] dump_stack+0x138/0x19c [ 156.648912] should_fail.cold+0x10f/0x159 [ 156.653080] should_failslab+0xdb/0x130 [ 156.657076] kmem_cache_alloc_node_trace+0x280/0x770 [ 156.662195] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 156.667661] __kmalloc_node_track_caller+0x3d/0x80 [ 156.672604] __kmalloc_reserve.isra.0+0x40/0xe0 [ 156.677285] __alloc_skb+0xcf/0x500 [ 156.680918] ? skb_scrub_packet+0x4b0/0x4b0 [ 156.685252] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 156.690714] sctp_packet_transmit+0x351/0x3020 [ 156.695309] ? sctp_packet_config+0x614/0x9f0 [ 156.699834] ? sctp_packet_config+0x9f0/0x9f0 [ 156.704348] ? sctp_transport_burst_limited+0x17b/0x1c0 [ 156.709733] sctp_outq_flush+0xd13/0x31b0 [ 156.713885] ? __sctp_outq_teardown+0xde0/0xde0 [ 156.713894] ? ima_add_template_entry.cold+0x48/0x48 [ 156.713904] ? ima_match_policy+0x84b/0x1180 [ 156.713915] ? sctp_sf_heartbeat.isra.0+0x12a/0x180 [ 156.713925] sctp_outq_uncork+0x60/0x70 [ 156.713933] sctp_do_sm+0x417/0x4a30 [ 156.713942] ? __lock_acquire+0x5f9/0x45e0 [ 156.713950] ? __lock_acquire+0x5f9/0x45e0 [ 156.713964] ? sctp_do_8_2_transport_strike.isra.0+0x8a0/0x8a0 [ 156.755501] ? trace_hardirqs_on+0x10/0x10 [ 156.759735] ? __lock_acquire+0x5f9/0x45e0 [ 156.764043] ? save_trace+0x290/0x290 [ 156.767837] ? trace_hardirqs_on+0x10/0x10 [ 156.772064] ? save_trace+0x290/0x290 [ 156.775852] ? __might_fault+0x110/0x1d0 [ 156.779909] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 156.785212] sctp_apply_peer_addr_params+0x126/0x1000 [ 156.790394] sctp_setsockopt_peer_addr_params+0x34b/0x400 [ 156.795917] ? sctp_getsockopt_assoc_stats+0x540/0x540 [ 156.801204] ? lock_sock_nested+0x8c/0x110 [ 156.805426] ? trace_hardirqs_on+0xd/0x10 [ 156.809558] ? __local_bh_enable_ip+0x99/0x1a0 [ 156.814136] sctp_setsockopt+0xa56/0x3f50 [ 156.818446] ? sctp_setsockopt_paddr_thresholds+0x3b0/0x3b0 [ 156.824143] ? sock_has_perm+0x1ed/0x280 [ 156.828230] ? selinux_tun_dev_create+0xc0/0xc0 [ 156.832886] ? lock_downgrade+0x6c2/0x6e0 [ 156.837026] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 156.842637] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 156.848088] sock_common_setsockopt+0x94/0xd0 [ 156.852587] SyS_setsockopt+0x13c/0x210 [ 156.856554] ? SyS_recv+0x40/0x40 [ 156.859997] ? do_syscall_64+0x53/0x640 [ 156.864046] ? SyS_recv+0x40/0x40 [ 156.867487] do_syscall_64+0x1e8/0x640 [ 156.871361] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 156.876219] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 156.881403] RIP: 0033:0x459279 [ 156.884666] RSP: 002b:00007f283c97fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 156.892382] RAX: ffffffffffffffda RBX: 00007f283c97fc90 RCX: 0000000000459279 [ 156.900164] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 18:56:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x0, 0x2000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) inotify_init1(0x800) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000280)=""/124) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000240)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) fcntl$addseals(r0, 0x409, 0x4) ioctl$UI_DEV_DESTROY(r1, 0x5502) 18:56:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:01 executing program 0: r0 = socket$inet(0x2, 0x4000800000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000080), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 18:56:01 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x4, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@seclabel='seclabel'}]}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[], 0x6cb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) msgrcv(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x0, 0x0) open(0x0, 0x14103e, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 156.907594] RBP: 000000000075bf20 R08: 0000000000000098 R09: 0000000000000000 [ 156.914939] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f283c9806d4 [ 156.922201] R13: 00000000004ceab8 R14: 00000000004dd320 R15: 0000000000000005 18:56:02 executing program 5 (fault-call:4 fault-nth:5): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:02 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") r2 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) r3 = accept$packet(r2, 0x0, &(0x7f00000001c0)) getsockname$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000200)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400402, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'hwsim0\x00'}) 18:56:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:02 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x1, 0x8, 0x0, 0x9}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 18:56:02 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x800000005, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xac, 0x202}}, 0xffd6, &(0x7f0000000640), 0x98, &(0x7f0000000180)=[{0x20}], 0x20}, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r0, &(0x7f00000054c0)={0x0, 0x0, &(0x7f0000005440), 0x0, &(0x7f0000005480)=""/36, 0x24}, 0x12100) bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:56:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 157.079519] FAULT_INJECTION: forcing a failure. [ 157.079519] name failslab, interval 1, probability 0, space 0, times 0 [ 157.121726] CPU: 0 PID: 8635 Comm: syz-executor.5 Not tainted 4.14.124 #18 [ 157.129009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.138470] Call Trace: [ 157.141080] dump_stack+0x138/0x19c [ 157.144921] should_fail.cold+0x10f/0x159 [ 157.149105] ? sctp_packet_transmit+0xc2a/0x3020 [ 157.153882] should_failslab+0xdb/0x130 [ 157.157879] kmem_cache_alloc_node+0x56/0x780 [ 157.162400] __alloc_skb+0x9c/0x500 [ 157.166035] ? skb_scrub_packet+0x4b0/0x4b0 [ 157.170366] ? sctp_transport_burst_limited+0x17b/0x1c0 [ 157.176175] ? sctp_transport_burst_reset+0x90/0xb0 [ 157.181208] _sctp_make_chunk+0x51/0x270 [ 157.185282] sctp_make_control+0x35/0x150 [ 157.189439] sctp_make_heartbeat+0x88/0x250 [ 157.194385] ? sctp_make_violation_max_retrans+0xf0/0xf0 [ 157.200629] ? __sctp_outq_teardown+0xde0/0xde0 [ 157.205408] ? ima_add_template_entry.cold+0x48/0x48 [ 157.210632] ? ima_match_policy+0x84b/0x1180 [ 157.215056] sctp_sf_heartbeat.isra.0+0x26/0x180 [ 157.219826] sctp_sf_do_prm_requestheartbeat+0x27/0x100 [ 157.225215] sctp_do_sm+0xfb/0x4a30 [ 157.229201] ? __lock_acquire+0x5f9/0x45e0 [ 157.233457] ? __lock_acquire+0x5f9/0x45e0 [ 157.237714] ? sctp_do_8_2_transport_strike.isra.0+0x8a0/0x8a0 [ 157.244487] ? trace_hardirqs_on+0x10/0x10 [ 157.248740] ? __lock_acquire+0x5f9/0x45e0 [ 157.252982] ? save_trace+0x290/0x290 [ 157.257149] ? trace_hardirqs_on+0x10/0x10 [ 157.261417] ? save_trace+0x290/0x290 [ 157.265255] ? __might_fault+0x110/0x1d0 [ 157.269352] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 157.274646] sctp_apply_peer_addr_params+0x126/0x1000 [ 157.279858] sctp_setsockopt_peer_addr_params+0x34b/0x400 [ 157.285391] ? sctp_getsockopt_assoc_stats+0x540/0x540 [ 157.290926] ? lock_sock_nested+0x8c/0x110 [ 157.295146] ? trace_hardirqs_on+0xd/0x10 [ 157.299289] ? __local_bh_enable_ip+0x99/0x1a0 [ 157.303858] sctp_setsockopt+0xa56/0x3f50 [ 157.308015] ? sctp_setsockopt_paddr_thresholds+0x3b0/0x3b0 [ 157.317737] ? sock_has_perm+0x1ed/0x280 [ 157.323445] ? selinux_tun_dev_create+0xc0/0xc0 [ 157.330320] ? lock_downgrade+0x6c2/0x6e0 [ 157.335168] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 157.341826] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 157.347108] sock_common_setsockopt+0x94/0xd0 [ 157.351604] SyS_setsockopt+0x13c/0x210 [ 157.355581] ? SyS_recv+0x40/0x40 [ 157.359060] ? do_syscall_64+0x53/0x640 [ 157.363106] ? SyS_recv+0x40/0x40 [ 157.366644] do_syscall_64+0x1e8/0x640 [ 157.370519] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 157.375799] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 157.382208] RIP: 0033:0x459279 [ 157.385385] RSP: 002b:00007f283c97fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 157.393171] RAX: ffffffffffffffda RBX: 00007f283c97fc90 RCX: 0000000000459279 [ 157.400606] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 157.408133] RBP: 000000000075bf20 R08: 0000000000000098 R09: 0000000000000000 [ 157.415398] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f283c9806d4 18:56:02 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x428080) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 157.422841] R13: 00000000004ceab8 R14: 00000000004dd320 R15: 0000000000000005 18:56:02 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_sco(r0, &(0x7f0000000000), 0x8) listen(r0, 0x0) 18:56:02 executing program 5 (fault-call:4 fault-nth:6): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 157.624478] FAULT_INJECTION: forcing a failure. [ 157.624478] name failslab, interval 1, probability 0, space 0, times 0 [ 157.636870] CPU: 1 PID: 8664 Comm: syz-executor.5 Not tainted 4.14.124 #18 [ 157.643962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.653318] Call Trace: [ 157.656020] dump_stack+0x138/0x19c [ 157.660619] should_fail.cold+0x10f/0x159 [ 157.665133] should_failslab+0xdb/0x130 [ 157.669099] kmem_cache_alloc_node_trace+0x5a/0x770 [ 157.674206] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 157.679730] __kmalloc_node_track_caller+0x3d/0x80 [ 157.684668] __kmalloc_reserve.isra.0+0x40/0xe0 [ 157.689337] __alloc_skb+0xcf/0x500 [ 157.693509] ? skb_scrub_packet+0x4b0/0x4b0 [ 157.698000] ? sctp_transport_burst_limited+0x17b/0x1c0 [ 157.703354] ? sctp_transport_burst_reset+0x90/0xb0 [ 157.708354] _sctp_make_chunk+0x51/0x270 [ 157.712960] sctp_make_control+0x35/0x150 [ 157.717108] sctp_make_heartbeat+0x88/0x250 [ 157.721417] ? sctp_make_violation_max_retrans+0xf0/0xf0 [ 157.726850] ? __sctp_outq_teardown+0xde0/0xde0 [ 157.731500] ? ima_add_template_entry.cold+0x48/0x48 [ 157.736592] ? ima_match_policy+0x84b/0x1180 [ 157.741084] sctp_sf_heartbeat.isra.0+0x26/0x180 [ 157.745941] sctp_sf_do_prm_requestheartbeat+0x27/0x100 [ 157.751377] sctp_do_sm+0xfb/0x4a30 [ 157.754987] ? __lock_acquire+0x5f9/0x45e0 [ 157.759219] ? __lock_acquire+0x5f9/0x45e0 [ 157.763443] ? sctp_do_8_2_transport_strike.isra.0+0x8a0/0x8a0 [ 157.769935] ? trace_hardirqs_on+0x10/0x10 [ 157.774257] ? __lock_acquire+0x5f9/0x45e0 [ 157.778483] ? save_trace+0x290/0x290 [ 157.782277] ? trace_hardirqs_on+0x10/0x10 [ 157.786585] ? save_trace+0x290/0x290 [ 157.790721] ? __might_fault+0x110/0x1d0 [ 157.794773] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 157.800056] sctp_apply_peer_addr_params+0x126/0x1000 [ 157.805256] sctp_setsockopt_peer_addr_params+0x34b/0x400 [ 157.810792] ? sctp_getsockopt_assoc_stats+0x540/0x540 [ 157.816061] ? lock_sock_nested+0x8c/0x110 [ 157.820289] ? trace_hardirqs_on+0xd/0x10 [ 157.824423] ? __local_bh_enable_ip+0x99/0x1a0 [ 157.828991] sctp_setsockopt+0xa56/0x3f50 [ 157.833146] ? sctp_setsockopt_paddr_thresholds+0x3b0/0x3b0 [ 157.838844] ? sock_has_perm+0x1ed/0x280 [ 157.842898] ? selinux_tun_dev_create+0xc0/0xc0 [ 157.847551] ? lock_downgrade+0x6c2/0x6e0 [ 157.851772] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 157.857570] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 157.862849] sock_common_setsockopt+0x94/0xd0 [ 157.867343] SyS_setsockopt+0x13c/0x210 [ 157.871680] ? SyS_recv+0x40/0x40 [ 157.876765] ? do_syscall_64+0x53/0x640 [ 157.880731] ? SyS_recv+0x40/0x40 [ 157.884167] do_syscall_64+0x1e8/0x640 [ 157.888040] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 157.892871] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 157.898054] RIP: 0033:0x459279 [ 157.901228] RSP: 002b:00007f283c97fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 157.908918] RAX: ffffffffffffffda RBX: 00007f283c97fc90 RCX: 0000000000459279 [ 157.916182] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 157.923453] RBP: 000000000075bf20 R08: 0000000000000098 R09: 0000000000000000 [ 157.931261] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f283c9806d4 [ 157.938520] R13: 00000000004ceab8 R14: 00000000004dd320 R15: 0000000000000005 18:56:03 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000001640)={@broadcast, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev, {[@ra={0x94, 0x6}]}}, @igmp={0x0, 0x0, 0x0, @loopback}}}}}, 0x0) 18:56:03 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xcf9c338894b880d, 0x0, 0x0, {{@in=@multicast1=0xe00000c0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) 18:56:03 executing program 5 (fault-call:4 fault-nth:7): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:03 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl(r0, 0x2, &(0x7f0000000080)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:03 executing program 0: [ 158.159027] FAULT_INJECTION: forcing a failure. [ 158.159027] name failslab, interval 1, probability 0, space 0, times 0 [ 158.206639] CPU: 0 PID: 8680 Comm: syz-executor.5 Not tainted 4.14.124 #18 [ 158.213709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 158.213716] Call Trace: [ 158.213736] dump_stack+0x138/0x19c [ 158.213753] should_fail.cold+0x10f/0x159 [ 158.233495] should_failslab+0xdb/0x130 [ 158.237482] kmem_cache_alloc+0x47/0x780 [ 158.237496] ? __alloc_skb+0x3ee/0x500 [ 158.237507] ? skb_scrub_packet+0x4b0/0x4b0 [ 158.250303] sctp_chunkify+0x4b/0x280 [ 158.254208] _sctp_make_chunk+0x14d/0x270 [ 158.258376] sctp_make_control+0x35/0x150 [ 158.262552] sctp_make_heartbeat+0x88/0x250 [ 158.266895] ? sctp_make_violation_max_retrans+0xf0/0xf0 [ 158.272369] ? __sctp_outq_teardown+0xde0/0xde0 [ 158.277044] ? ima_add_template_entry.cold+0x48/0x48 [ 158.282155] ? ima_match_policy+0x84b/0x1180 [ 158.286667] sctp_sf_heartbeat.isra.0+0x26/0x180 [ 158.291603] sctp_sf_do_prm_requestheartbeat+0x27/0x100 [ 158.297251] sctp_do_sm+0xfb/0x4a30 [ 158.300875] ? __lock_acquire+0x5f9/0x45e0 [ 158.305456] ? __lock_acquire+0x5f9/0x45e0 [ 158.309683] ? sctp_do_8_2_transport_strike.isra.0+0x8a0/0x8a0 [ 158.315807] ? trace_hardirqs_on+0x10/0x10 [ 158.320140] ? __lock_acquire+0x5f9/0x45e0 [ 158.324371] ? save_trace+0x290/0x290 [ 158.328270] ? trace_hardirqs_on+0x10/0x10 [ 158.332507] ? save_trace+0x290/0x290 [ 158.336302] ? __might_fault+0x110/0x1d0 [ 158.340368] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 158.345998] sctp_apply_peer_addr_params+0x126/0x1000 [ 158.351185] sctp_setsockopt_peer_addr_params+0x34b/0x400 [ 158.356712] ? sctp_getsockopt_assoc_stats+0x540/0x540 [ 158.362004] ? lock_sock_nested+0x8c/0x110 [ 158.366321] ? trace_hardirqs_on+0xd/0x10 [ 158.370464] ? __local_bh_enable_ip+0x99/0x1a0 [ 158.375033] sctp_setsockopt+0xa56/0x3f50 [ 158.379377] ? sctp_setsockopt_paddr_thresholds+0x3b0/0x3b0 [ 158.385082] ? sock_has_perm+0x1ed/0x280 [ 158.389147] ? selinux_tun_dev_create+0xc0/0xc0 [ 158.393802] ? lock_downgrade+0x6c2/0x6e0 [ 158.397937] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 158.403558] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 158.408844] sock_common_setsockopt+0x94/0xd0 [ 158.413332] SyS_setsockopt+0x13c/0x210 [ 158.417318] ? SyS_recv+0x40/0x40 [ 158.420770] ? do_syscall_64+0x53/0x640 [ 158.424742] ? SyS_recv+0x40/0x40 [ 158.428210] do_syscall_64+0x1e8/0x640 [ 158.432453] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 158.437374] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 158.442559] RIP: 0033:0x459279 [ 158.445892] RSP: 002b:00007f283c97fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 158.453699] RAX: ffffffffffffffda RBX: 00007f283c97fc90 RCX: 0000000000459279 [ 158.460990] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 158.468266] RBP: 000000000075bf20 R08: 0000000000000098 R09: 0000000000000000 [ 158.475549] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f283c9806d4 [ 158.482837] R13: 00000000004ceab8 R14: 00000000004dd320 R15: 0000000000000005 18:56:03 executing program 4: 18:56:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:03 executing program 2: 18:56:03 executing program 0: 18:56:03 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8000, 0x101000) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000080)={0x6, 0x5, 0x8, 0x3, 0x9}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:03 executing program 5 (fault-call:4 fault-nth:8): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:03 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl(r1, 0x8000000000f35, &(0x7f0000000280)="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") ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = dup3(r0, r1, 0x80000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:03 executing program 4: 18:56:03 executing program 2: 18:56:03 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x2, 0x4, 0x4, 0x3}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000100), 0x0}, 0x18) 18:56:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 158.644423] FAULT_INJECTION: forcing a failure. [ 158.644423] name failslab, interval 1, probability 0, space 0, times 0 18:56:03 executing program 2: 18:56:03 executing program 0: 18:56:03 executing program 4: 18:56:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:03 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) sendto$x25(r1, &(0x7f0000000200)="a1ea907d619a55e16a969f58426b83d10f2f0993fddf1cd6e24fcf19e0f4a823c304737d00890c7fb978a878b5c301000000000000000f77a1b169711c82bb5b84f7ac85d4d98caf506b459ea20a85fbae144e56d513814692898ec419b556c6af0daee387c5d81db53c3a3024e54935fef17c0f21b9476891", 0x79, 0x80, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect(r2, &(0x7f0000000080)=@hci={0x1f, r3, 0x3}, 0x80) [ 158.725682] CPU: 1 PID: 8707 Comm: syz-executor.5 Not tainted 4.14.124 #18 [ 158.733206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 158.742938] Call Trace: [ 158.745562] dump_stack+0x138/0x19c [ 158.749216] should_fail.cold+0x10f/0x159 [ 158.753386] should_failslab+0xdb/0x130 [ 158.757381] kmem_cache_alloc_node+0x287/0x780 [ 158.762072] ? kmem_cache_alloc_node_trace+0x5e2/0x770 [ 158.767389] __alloc_skb+0x9c/0x500 [ 158.771034] ? skb_scrub_packet+0x4b0/0x4b0 18:56:03 executing program 2: [ 158.775420] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 158.780893] sctp_packet_transmit+0x351/0x3020 [ 158.785497] ? sctp_packet_config+0x614/0x9f0 [ 158.790026] ? sctp_packet_config+0x9f0/0x9f0 [ 158.795072] ? sctp_transport_burst_limited+0x17b/0x1c0 [ 158.800841] sctp_outq_flush+0xd13/0x31b0 [ 158.805016] ? __sctp_outq_teardown+0xde0/0xde0 [ 158.809706] ? ima_add_template_entry.cold+0x48/0x48 [ 158.814822] ? ima_match_policy+0x84b/0x1180 [ 158.819243] ? sctp_sf_heartbeat.isra.0+0x12a/0x180 [ 158.824556] sctp_outq_uncork+0x60/0x70 [ 158.828614] sctp_do_sm+0x417/0x4a30 [ 158.832321] ? __lock_acquire+0x5f9/0x45e0 [ 158.836730] ? __lock_acquire+0x5f9/0x45e0 [ 158.840979] ? sctp_do_8_2_transport_strike.isra.0+0x8a0/0x8a0 [ 158.840990] ? trace_hardirqs_on+0x10/0x10 [ 158.841000] ? __lock_acquire+0x5f9/0x45e0 [ 158.841007] ? save_trace+0x290/0x290 [ 158.841017] ? trace_hardirqs_on+0x10/0x10 [ 158.841027] ? save_trace+0x290/0x290 [ 158.841045] ? __might_fault+0x110/0x1d0 [ 158.841065] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 158.841079] sctp_apply_peer_addr_params+0x126/0x1000 [ 158.841093] sctp_setsockopt_peer_addr_params+0x34b/0x400 [ 158.841105] ? sctp_getsockopt_assoc_stats+0x540/0x540 [ 158.841125] ? lock_sock_nested+0x8c/0x110 [ 158.841133] ? trace_hardirqs_on+0xd/0x10 [ 158.841143] ? __local_bh_enable_ip+0x99/0x1a0 [ 158.841155] sctp_setsockopt+0xa56/0x3f50 [ 158.841167] ? sctp_setsockopt_paddr_thresholds+0x3b0/0x3b0 [ 158.841174] ? sock_has_perm+0x1ed/0x280 [ 158.841184] ? selinux_tun_dev_create+0xc0/0xc0 [ 158.871729] ? lock_downgrade+0x6c2/0x6e0 [ 158.871742] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 158.871750] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 158.871771] sock_common_setsockopt+0x94/0xd0 [ 158.871784] SyS_setsockopt+0x13c/0x210 [ 158.882516] ? SyS_recv+0x40/0x40 [ 158.882529] ? do_syscall_64+0x53/0x640 [ 158.882538] ? SyS_recv+0x40/0x40 [ 158.882547] do_syscall_64+0x1e8/0x640 [ 158.882554] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 158.882569] entry_SYSCALL_64_after_hwframe+0x42/0xb7 18:56:04 executing program 5 (fault-call:4 fault-nth:9): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:04 executing program 2: 18:56:04 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x30202) getpeername$llc(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:04 executing program 4: 18:56:04 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x17) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) [ 158.882580] RIP: 0033:0x459279 [ 158.893366] RSP: 002b:00007f283c97fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 158.893378] RAX: ffffffffffffffda RBX: 00007f283c97fc90 RCX: 0000000000459279 [ 158.893383] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 158.893388] RBP: 000000000075bf20 R08: 0000000000000098 R09: 0000000000000000 [ 158.893396] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f283c9806d4 [ 158.902188] R13: 00000000004ceab8 R14: 00000000004dd320 R15: 0000000000000005 18:56:04 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:device_t:s0\x00', 0x1e, 0x3) 18:56:04 executing program 4: 18:56:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 158.987473] FAULT_INJECTION: forcing a failure. [ 158.987473] name failslab, interval 1, probability 0, space 0, times 0 18:56:04 executing program 4: 18:56:04 executing program 2: 18:56:04 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xd3, 0x4000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000100)={r3, 0xffffffff, 0x30, 0x81}, &(0x7f0000000180)=0x18) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) prctl$PR_SET_UNALIGN(0x6, 0x3) 18:56:04 executing program 0: [ 159.254276] CPU: 1 PID: 8737 Comm: syz-executor.5 Not tainted 4.14.124 #18 [ 159.261559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.271001] Call Trace: [ 159.271024] dump_stack+0x138/0x19c [ 159.271039] should_fail.cold+0x10f/0x159 [ 159.271053] should_failslab+0xdb/0x130 [ 159.271063] kmem_cache_alloc_node+0x287/0x780 [ 159.271080] __alloc_skb+0x9c/0x500 [ 159.277305] ? skb_scrub_packet+0x4b0/0x4b0 [ 159.277316] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 159.277332] sctp_packet_transmit+0x351/0x3020 [ 159.308257] ? sctp_packet_config+0x614/0x9f0 [ 159.312791] ? sctp_packet_config+0x9f0/0x9f0 [ 159.317315] ? sctp_transport_burst_limited+0x17b/0x1c0 [ 159.322673] sctp_outq_flush+0xd13/0x31b0 [ 159.326810] ? __sctp_outq_teardown+0xde0/0xde0 [ 159.331666] ? ima_add_template_entry.cold+0x48/0x48 [ 159.336788] ? ima_match_policy+0x84b/0x1180 [ 159.341187] ? sctp_sf_heartbeat.isra.0+0x12a/0x180 [ 159.346206] sctp_outq_uncork+0x60/0x70 [ 159.350341] sctp_do_sm+0x417/0x4a30 [ 159.354038] ? __lock_acquire+0x5f9/0x45e0 [ 159.358430] ? __lock_acquire+0x5f9/0x45e0 [ 159.362739] ? sctp_do_8_2_transport_strike.isra.0+0x8a0/0x8a0 [ 159.368698] ? trace_hardirqs_on+0x10/0x10 [ 159.372937] ? __lock_acquire+0x5f9/0x45e0 [ 159.378039] ? save_trace+0x290/0x290 [ 159.381864] ? trace_hardirqs_on+0x10/0x10 [ 159.386086] ? save_trace+0x290/0x290 [ 159.389897] ? __might_fault+0x110/0x1d0 [ 159.393950] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 159.399225] sctp_apply_peer_addr_params+0x126/0x1000 [ 159.404402] sctp_setsockopt_peer_addr_params+0x34b/0x400 [ 159.410023] ? sctp_getsockopt_assoc_stats+0x540/0x540 [ 159.415297] ? lock_sock_nested+0x8c/0x110 [ 159.419515] ? trace_hardirqs_on+0xd/0x10 [ 159.423644] ? __local_bh_enable_ip+0x99/0x1a0 [ 159.428210] sctp_setsockopt+0xa56/0x3f50 [ 159.432340] ? sctp_setsockopt_paddr_thresholds+0x3b0/0x3b0 [ 159.438039] ? sock_has_perm+0x1ed/0x280 [ 159.442084] ? selinux_tun_dev_create+0xc0/0xc0 [ 159.446734] ? lock_downgrade+0x6c2/0x6e0 [ 159.451001] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 159.456629] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 159.461899] sock_common_setsockopt+0x94/0xd0 [ 159.466471] SyS_setsockopt+0x13c/0x210 [ 159.470449] ? SyS_recv+0x40/0x40 [ 159.473891] ? do_syscall_64+0x53/0x640 [ 159.477852] ? SyS_recv+0x40/0x40 [ 159.481289] do_syscall_64+0x1e8/0x640 [ 159.485186] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 159.490033] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 159.495212] RIP: 0033:0x459279 18:56:04 executing program 5 (fault-call:4 fault-nth:10): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:04 executing program 4: 18:56:04 executing program 2: 18:56:04 executing program 0: 18:56:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:04 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0xfffffff000000002, 0x0, 0x0, 0x0, 0x1}}) r2 = semget(0x3, 0x4, 0x4e2) semctl$GETZCNT(r2, 0x2, 0xf, &(0x7f0000000500)=""/39) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r3 = getpgid(0xffffffffffffffff) r4 = getuid() ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x4, &(0x7f0000000180)={[{@shortname_win95='shortname=win95'}, {@utf8no='utf8=0'}, {@numtail='nonumtail=0'}, {@shortname_win95='shortname=win95'}, {@numtail='nonumtail=0'}, {@fat=@debug='debug'}], [{@obj_user={'obj_user', 0x3d, '/dev/snd/timer\x00'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}]}) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x19c, r6, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x725c9bff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x4}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="c6887424edd54c5488dd047c7dc861d7"}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x84b3837f2566dffd}}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x84}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7fff}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c001) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r3}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 159.498400] RSP: 002b:00007f283c97fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 159.506096] RAX: ffffffffffffffda RBX: 00007f283c97fc90 RCX: 0000000000459279 [ 159.513364] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 159.520614] RBP: 000000000075bf20 R08: 0000000000000098 R09: 0000000000000000 [ 159.527864] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f283c9806d4 [ 159.535126] R13: 00000000004ceab8 R14: 00000000004dd320 R15: 0000000000000005 18:56:04 executing program 2: 18:56:04 executing program 4: 18:56:04 executing program 0: 18:56:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:04 executing program 4: 18:56:04 executing program 2: [ 159.686668] FAT-fs (loop3): Unrecognized mount option "obj_user=/dev/snd/timer" or missing value [ 159.715532] FAULT_INJECTION: forcing a failure. [ 159.715532] name failslab, interval 1, probability 0, space 0, times 0 [ 159.779278] CPU: 0 PID: 8786 Comm: syz-executor.5 Not tainted 4.14.124 #18 [ 159.786358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.795722] Call Trace: [ 159.798328] dump_stack+0x138/0x19c [ 159.801963] should_fail.cold+0x10f/0x159 [ 159.806101] ? sctp_packet_transmit+0xc2a/0x3020 [ 159.810845] should_failslab+0xdb/0x130 [ 159.814898] kmem_cache_alloc_node+0x56/0x780 [ 159.819382] __alloc_skb+0x9c/0x500 [ 159.822989] ? skb_scrub_packet+0x4b0/0x4b0 [ 159.827553] ? sctp_transport_burst_limited+0x17b/0x1c0 [ 159.832899] ? sctp_transport_burst_reset+0x90/0xb0 [ 159.837898] _sctp_make_chunk+0x51/0x270 [ 159.841945] sctp_make_control+0x35/0x150 [ 159.846093] sctp_make_heartbeat+0x88/0x250 [ 159.850494] ? sctp_make_violation_max_retrans+0xf0/0xf0 [ 159.855943] ? __sctp_outq_teardown+0xde0/0xde0 [ 159.860597] ? ima_add_template_entry.cold+0x48/0x48 [ 159.865693] ? ima_match_policy+0x84b/0x1180 [ 159.870112] sctp_sf_heartbeat.isra.0+0x26/0x180 [ 159.874872] sctp_sf_do_prm_requestheartbeat+0x27/0x100 [ 159.880218] sctp_do_sm+0xfb/0x4a30 [ 159.883825] ? __lock_acquire+0x5f9/0x45e0 [ 159.888043] ? __lock_acquire+0x5f9/0x45e0 [ 159.892261] ? sctp_do_8_2_transport_strike.isra.0+0x8a0/0x8a0 [ 159.898216] ? trace_hardirqs_on+0x10/0x10 [ 159.902438] ? __lock_acquire+0x5f9/0x45e0 [ 159.906664] ? save_trace+0x290/0x290 [ 159.910458] ? trace_hardirqs_on+0x10/0x10 [ 159.914679] ? save_trace+0x290/0x290 [ 159.918464] ? __might_fault+0x110/0x1d0 [ 159.922514] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 159.927775] sctp_apply_peer_addr_params+0x126/0x1000 [ 159.932952] sctp_setsockopt_peer_addr_params+0x34b/0x400 [ 159.938480] ? sctp_getsockopt_assoc_stats+0x540/0x540 [ 159.943769] ? lock_sock_nested+0x8c/0x110 [ 159.947991] ? trace_hardirqs_on+0xd/0x10 [ 159.952131] ? __local_bh_enable_ip+0x99/0x1a0 [ 159.956702] sctp_setsockopt+0xa56/0x3f50 [ 159.966673] ? sctp_setsockopt_paddr_thresholds+0x3b0/0x3b0 [ 159.973278] ? sock_has_perm+0x1ed/0x280 [ 159.977674] ? selinux_tun_dev_create+0xc0/0xc0 [ 159.982418] ? lock_downgrade+0x6c2/0x6e0 [ 159.986556] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 159.992181] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 159.997453] sock_common_setsockopt+0x94/0xd0 [ 160.001951] SyS_setsockopt+0x13c/0x210 [ 160.005914] ? SyS_recv+0x40/0x40 [ 160.009350] ? do_syscall_64+0x53/0x640 [ 160.013488] ? SyS_recv+0x40/0x40 [ 160.016930] do_syscall_64+0x1e8/0x640 [ 160.020817] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 160.025662] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 160.030848] RIP: 0033:0x459279 [ 160.034030] RSP: 002b:00007f283c97fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 160.041998] RAX: ffffffffffffffda RBX: 00007f283c97fc90 RCX: 0000000000459279 [ 160.049258] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 160.057137] RBP: 000000000075bf20 R08: 0000000000000098 R09: 0000000000000000 [ 160.064391] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f283c9806d4 [ 160.071733] R13: 00000000004ceab8 R14: 00000000004dd320 R15: 0000000000000005 18:56:05 executing program 5 (fault-call:4 fault-nth:11): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4030ae7b, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x1}) 18:56:05 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 18:56:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000001ff2)={0xa, 0x0, 0x0, @initdev, 0xffffffffffffffff}, 0x1c) [ 160.125923] FAT-fs (loop3): Unrecognized mount option "obj_user=/dev/snd/timer" or missing value 18:56:05 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x2180, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x27040000000, 0x6, 0x5, 0x2, 0x4}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000240)={r3, 0x2}, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) timer_create(0x4, &(0x7f0000000000)={0x0, 0x10, 0x1}, &(0x7f0000000080)=0x0) timer_getoverrun(r4) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:05 executing program 2: r0 = socket$kcm(0x11, 0x80000200000004, 0x300) recvmsg$kcm(r0, &(0x7f0000014040)={0x0, 0x0, 0x0}, 0x1) 18:56:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:05 executing program 0: r0 = fanotify_init(0x5, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x40000000, 0x40) flock(r0, 0x2) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000040)={0x1, 0x1, [0x9, 0x1, 0x0, 0x7, 0x9, 0x7, 0x3]}) close(r0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="641f34a6fe97f294d11f4d23919d459b89835d00aceb3b2a0d153a7c09363ddba7d1bc9335147224885ef7e4ee894dd014457d007f2e2d14b90385960109784d8ad5780088223804407f469d9bbe2180ab86ec80ac163638b23ac001c2d2c054df9b167c9919eb4e7523d926b73512fdc7c855df58c06ce344081dbf4ab5a990ee918dab7d44aede89afeba9aca851a4dcf3a057fca6f00e9458a3aed252ea632a19598f99ebdb39666997899ac4ce890050fde214efb7b997f3aa6b6e9428edc8ed637314af91b87f5635d04480affb070cd3c2448a5efdd11e0ff27a0a4c39c26fa5292cd068973e9e63dc286fd052bfa047e3dae4eadc7ffa4bad3597e3dd") setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000080)={0x9d, @empty, 0x4e24, 0x3, 'lblc\x00', 0x4, 0x0, 0x4a}, 0x2c) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz1', "72383b17bf0231eb9d4d80d82c7957c7495e6a6bd169c57b51e7db13847104b6969e685a262695e792fc5936c3964e16bd45067de00ca6f3fb643e18bfea3d6b77ae075e8e6e3b5ceac00d990420b5d8a85ed114ea96324381905fedcd6782e240dc172d08ce2935613d65f004118b16266cf5ae6095dbb59824"}, 0x7e) 18:56:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) accept(r0, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) [ 160.245335] FAULT_INJECTION: forcing a failure. [ 160.245335] name failslab, interval 1, probability 0, space 0, times 0 18:56:05 executing program 0: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="f0418005882174823e7d2aa3", 0xc, 0xfffffffffffffffa) keyctl$describe(0x6, r0, &(0x7f00000000c0)=""/205, 0xcd) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) [ 160.310210] CPU: 1 PID: 8818 Comm: syz-executor.5 Not tainted 4.14.124 #18 [ 160.317290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.326920] Call Trace: [ 160.329533] dump_stack+0x138/0x19c [ 160.333182] should_fail.cold+0x10f/0x159 [ 160.337353] should_failslab+0xdb/0x130 [ 160.341362] kmem_cache_alloc_node_trace+0x280/0x770 [ 160.346500] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 160.351985] __kmalloc_node_track_caller+0x3d/0x80 18:56:05 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x5b, 0x3f, 0x4, 0x9}, 0xc) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x1, @hyper}, 0x3) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000080)='!\x00', 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) listen(r0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)=0x3) r3 = accept(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e23, 0x0, @mcast1, 0x8}}, 0xb8, 0x8, 0xfff, 0x8, 0x3}, &(0x7f0000000180)=0x21) ioctl$CAPI_NCCI_OPENCOUNT(r2, 0x80044326, &(0x7f00000001c0)=0x3) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000340)={0x292b, 0x7fff, 0xffffffff, 0x2, 0x9, 0x0, 0x3, 0x7}, &(0x7f0000000380)={0x3, 0x53e, 0x81, 0x40, 0x5, 0x0, 0xfff, 0xb6}, &(0x7f00000003c0)={0x1, 0x20, 0x800, 0xd53, 0x6, 0x1, 0x80000001, 0xa63a}, &(0x7f0000000440)={r5, r6+10000000}, &(0x7f00000004c0)={&(0x7f0000000480)={0x80}, 0x8}) [ 160.356934] __kmalloc_reserve.isra.0+0x40/0xe0 [ 160.361620] __alloc_skb+0xcf/0x500 [ 160.365272] ? skb_scrub_packet+0x4b0/0x4b0 [ 160.369612] sctp_packet_transmit+0x351/0x3020 [ 160.374209] ? sctp_packet_config+0x614/0x9f0 [ 160.378743] ? sctp_packet_config+0x9f0/0x9f0 [ 160.383270] ? sctp_transport_burst_limited+0x17b/0x1c0 [ 160.388656] sctp_outq_flush+0xd13/0x31b0 [ 160.393260] ? __sctp_outq_teardown+0xde0/0xde0 [ 160.397949] ? ima_add_template_entry.cold+0x48/0x48 [ 160.403063] ? ima_match_policy+0x84b/0x1180 [ 160.407499] ? sctp_sf_heartbeat.isra.0+0x12a/0x180 [ 160.412542] sctp_outq_uncork+0x60/0x70 [ 160.416528] sctp_do_sm+0x417/0x4a30 [ 160.416540] ? __lock_acquire+0x5f9/0x45e0 [ 160.424475] ? __lock_acquire+0x5f9/0x45e0 [ 160.424493] ? sctp_do_8_2_transport_strike.isra.0+0x8a0/0x8a0 [ 160.424504] ? trace_hardirqs_on+0x10/0x10 [ 160.424515] ? __lock_acquire+0x5f9/0x45e0 [ 160.443154] ? save_trace+0x290/0x290 [ 160.447179] ? trace_hardirqs_on+0x10/0x10 [ 160.451431] ? save_trace+0x290/0x290 [ 160.455250] ? __might_fault+0x110/0x1d0 [ 160.459358] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 160.464650] sctp_apply_peer_addr_params+0x126/0x1000 [ 160.469983] sctp_setsockopt_peer_addr_params+0x34b/0x400 [ 160.475515] ? sctp_getsockopt_assoc_stats+0x540/0x540 [ 160.480790] ? lock_sock_nested+0x8c/0x110 [ 160.485017] ? trace_hardirqs_on+0xd/0x10 [ 160.489155] ? __local_bh_enable_ip+0x99/0x1a0 [ 160.493827] sctp_setsockopt+0xa56/0x3f50 [ 160.498151] ? sctp_setsockopt_paddr_thresholds+0x3b0/0x3b0 [ 160.504995] ? sock_has_perm+0x1ed/0x280 [ 160.509071] ? selinux_tun_dev_create+0xc0/0xc0 [ 160.513731] ? lock_downgrade+0x6c2/0x6e0 [ 160.517977] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 160.523603] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 160.529140] sock_common_setsockopt+0x94/0xd0 [ 160.533629] SyS_setsockopt+0x13c/0x210 [ 160.537677] ? SyS_recv+0x40/0x40 [ 160.541122] ? do_syscall_64+0x53/0x640 [ 160.545180] ? SyS_recv+0x40/0x40 [ 160.548631] do_syscall_64+0x1e8/0x640 [ 160.552512] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 160.557345] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 160.562609] RIP: 0033:0x459279 [ 160.565780] RSP: 002b:00007f283c97fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 160.573479] RAX: ffffffffffffffda RBX: 00007f283c97fc90 RCX: 0000000000459279 [ 160.580740] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 160.590338] RBP: 000000000075bf20 R08: 0000000000000098 R09: 0000000000000000 [ 160.597609] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f283c9806d4 [ 160.605160] R13: 00000000004ceab8 R14: 00000000004dd320 R15: 0000000000000005 18:56:05 executing program 5 (fault-call:4 fault-nth:12): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:05 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_int(r0, 0x28, 0x0, 0x0, &(0x7f0000000040)=0x485) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2800, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)=0x1000000000000, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) 18:56:05 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x5) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x260100) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000201b688611ddd0d2"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b1fb1d2cecd099cf"}}, 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000003940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0}}], 0x4000000000001a2, 0x0, 0x0) 18:56:05 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x8000, 0x0) sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={'ip6_vti0\x00', {0x2, 0x4e22, @empty}}) 18:56:05 executing program 2: mkdir(&(0x7f0000000200)='./control\x00', 0x0) chmod(&(0x7f0000000340)='./control\x00', 0x9c32f69e2caa24ef) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010020000000000002000000000000000"], 0x24, 0x0) setreuid(0x0, 0xee00) r1 = open(&(0x7f0000000240)='./control\x00', 0xc40beb2474dfd22a, 0xf6ffffff) write$evdev(r1, &(0x7f0000000180)=[{}], 0x18) 18:56:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:05 executing program 4: add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) mount(0x0, 0x0, &(0x7f0000000340)='cgroup\x00', 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x105000, 0x0) mkdirat(r3, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000880)={0x0, @reserved}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, r4, 0x0, 0x9, &(0x7f0000000140)=']{cpuset\x00'}, 0x30) r6 = syz_open_procfs(r5, &(0x7f0000000380)='n\x15W\x8fmap\x00') setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, &(0x7f0000000040)=0x5, 0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f00000002c0)={'\xff\xff\xff\xff\xff\xff\xfb\xff\x00', 0x400}) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000080)={0x9, {0x1, 0x0, 0x0, 0x71fa}, {0x8, 0x9, 0x2, 0x1}, {0x2, 0x6}}) ioctl$int_out(r4, 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r6, 0x80345631, &(0x7f0000000180)) 18:56:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept(0xffffffffffffff9c, &(0x7f0000000380)=@caif=@dgm, &(0x7f0000000100)=0x80) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x400, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x292, 0x0, 0x0, 0xdc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) r5 = getegid() setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {0x1, 0x7}, [{0x2, 0x1, r4}], {0x4, 0x4}, [{0x8, 0x4, r5}], {0x10, 0x2}, {0x20, 0x7}}, 0x34, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="b9800000c00f3235000800000f3066bad004edc4c1a3d0b085000000c744240073000000c7442402d7c60000ff2c24460f01d1b9b90900000f320f01df450f01cff3976466450f38817c15d6", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:56:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:05 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 160.748284] FAULT_INJECTION: forcing a failure. [ 160.748284] name failslab, interval 1, probability 0, space 0, times 0 18:56:06 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x10000, 0x4000) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000021c0)='./file0\x00', 0x0, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x0, 0x9, 0x3, 0x0, 0x0, 0x945, 0x10, 0x4, 0x5, 0x4, 0x7, 0x5499127d, 0x1000, 0x4, 0x1f, 0xb57, 0x80000001, 0x2, 0x81, 0x5c, 0x9, 0x6, 0x42, 0xffffffffffffff81, 0x8, 0x2d8f, 0x7f, 0x2, 0x40, 0x1, 0xf046, 0x6416cee7, 0x3, 0x101, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x5, @perf_config_ext={0x0, 0x84}, 0x80, 0xfc1e, 0x2, 0x9, 0x0, 0x954, 0x1}, r3, 0xd, r1, 0x9) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r2, 0x200000000000005) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg(r6, &(0x7f0000000c00), 0x4000000000001e6, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600)='/dev/snd/controlC#\x00', 0x4c1, 0x1) munlockall() shutdown(r0, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000680)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f0000000140)) r7 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x5) [ 160.841853] CPU: 0 PID: 8872 Comm: syz-executor.5 Not tainted 4.14.124 #18 [ 160.848931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.858299] Call Trace: [ 160.860902] dump_stack+0x138/0x19c [ 160.864733] should_fail.cold+0x10f/0x159 [ 160.868898] should_failslab+0xdb/0x130 [ 160.868917] kmem_cache_alloc_node_trace+0x5a/0x770 [ 160.868933] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 160.868946] __kmalloc_node_track_caller+0x3d/0x80 18:56:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 160.883518] __kmalloc_reserve.isra.0+0x40/0xe0 [ 160.883533] __alloc_skb+0xcf/0x500 [ 160.883544] ? skb_scrub_packet+0x4b0/0x4b0 [ 160.883554] ? sctp_transport_burst_limited+0x17b/0x1c0 [ 160.883560] ? sctp_transport_burst_reset+0x90/0xb0 [ 160.883569] _sctp_make_chunk+0x51/0x270 [ 160.883578] sctp_make_control+0x35/0x150 [ 160.883589] sctp_make_heartbeat+0x88/0x250 [ 160.883597] ? sctp_make_violation_max_retrans+0xf0/0xf0 [ 160.883605] ? __sctp_outq_teardown+0xde0/0xde0 [ 160.883614] ? ima_add_template_entry.cold+0x48/0x48 [ 160.883624] ? ima_match_policy+0x84b/0x1180 [ 160.883637] sctp_sf_heartbeat.isra.0+0x26/0x180 [ 160.883648] sctp_sf_do_prm_requestheartbeat+0x27/0x100 [ 160.883657] sctp_do_sm+0xfb/0x4a30 [ 160.883665] ? __lock_acquire+0x5f9/0x45e0 [ 160.883674] ? __lock_acquire+0x5f9/0x45e0 [ 160.883688] ? sctp_do_8_2_transport_strike.isra.0+0x8a0/0x8a0 [ 160.883698] ? trace_hardirqs_on+0x10/0x10 [ 160.883708] ? __lock_acquire+0x5f9/0x45e0 [ 160.896916] ? save_trace+0x290/0x290 [ 160.906593] ? trace_hardirqs_on+0x10/0x10 [ 160.906607] ? save_trace+0x290/0x290 [ 160.906623] ? __might_fault+0x110/0x1d0 [ 160.906647] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 160.923775] kauditd_printk_skb: 13224 callbacks suppressed [ 160.923785] audit: type=1400 audit(1560192966.126:17358): avc: denied { name_connect } for pid=8887 comm="syz-executor.2" dest=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 160.924164] sctp_apply_peer_addr_params+0x126/0x1000 [ 160.934256] sctp_setsockopt_peer_addr_params+0x34b/0x400 [ 160.934269] ? sctp_getsockopt_assoc_stats+0x540/0x540 [ 160.934289] ? lock_sock_nested+0x8c/0x110 [ 160.934300] ? trace_hardirqs_on+0xd/0x10 [ 160.934311] ? __local_bh_enable_ip+0x99/0x1a0 [ 160.934325] sctp_setsockopt+0xa56/0x3f50 [ 160.934339] ? sctp_setsockopt_paddr_thresholds+0x3b0/0x3b0 [ 160.934346] ? sock_has_perm+0x1ed/0x280 [ 160.934354] ? selinux_tun_dev_create+0xc0/0xc0 [ 160.934363] ? lock_downgrade+0x6c2/0x6e0 [ 160.934373] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 160.934383] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 160.934409] sock_common_setsockopt+0x94/0xd0 [ 160.976719] SyS_setsockopt+0x13c/0x210 [ 160.976732] ? SyS_recv+0x40/0x40 [ 160.976746] ? do_syscall_64+0x53/0x640 [ 160.976757] ? SyS_recv+0x40/0x40 [ 160.996842] do_syscall_64+0x1e8/0x640 [ 161.007727] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 161.007748] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 161.007757] RIP: 0033:0x459279 [ 161.007762] RSP: 002b:00007f283c97fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 18:56:06 executing program 5 (fault-call:4 fault-nth:13): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:06 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="9077b57e6397ab4f133f4f793f6980ff1ecc6ba16e118047ff7c21937c3e6322fe14f89ee63fa1e29c4ea6a2058a795fd73523bea4c49e829ad0b3193e9796d013f2fcbbc3f07d1fb7b9be6f759a1b87efb824dab4798b2fa4106e28a0dbed56df4bf2a5c95c4c5f44cdd0dfbf744f5fcf990a65", 0x74, 0x4, &(0x7f0000000380)={0x11, 0x1c, r2, 0x1, 0x574, 0x6, @remote}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001d008183ad5de087185082cf0124b0eba0070060002339a00576f9835b3f00009148700000f85ac47c45", 0x2e}], 0x1}, 0x0) 18:56:06 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x80000080543) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0) 18:56:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r0) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)='F', 0x1, r1) keyctl$read(0x3, r1, 0x0, 0x0) [ 161.069791] RAX: ffffffffffffffda RBX: 00007f283c97fc90 RCX: 0000000000459279 [ 161.078496] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 161.152962] RBP: 000000000075bf20 R08: 0000000000000098 R09: 0000000000000000 [ 161.160334] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f283c9806d4 [ 161.167591] R13: 00000000004ceab8 R14: 00000000004dd320 R15: 0000000000000005 18:56:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:06 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000100)={0x98f904, 0x4, @name="969fe8e7176721240a21c91fb3eae2cdea33e628ff858ce5ccbbcbc8cbc7abdd"}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x1ff, 0x4) 18:56:06 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x40100) fallocate(r0, 0x3, 0x0, 0xc00000) [ 161.290932] FAULT_INJECTION: forcing a failure. [ 161.290932] name failslab, interval 1, probability 0, space 0, times 0 18:56:06 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x100, 0x200) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)='\x00'/11) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x458, 0x0, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, 0xf, 0xffffffff}}}, {{@uncond, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x1) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000002c0)="c0dca5055e0bcfec7be07029d2fd23668e7358acd3869a1fb26a4adf1abed056d2d2fc7aa1fd4220b86129c2f33ee86993c11d402c36ea8969313a2553aec01c19123ef628cf081f7856b58b198b59f70b147d9b512f2b63de10eac7bd27c7e27da162cfc8bfb61d952ae362756b2ded8737aa235cd3efaa9902bb97173f4e921ab213ad59c5f5f2b0030000006c2c2a8ac0d649626e24124a0192a6b1b80b38dce35e7994812ff28e8de714f7587a1ba41263a7b867aa6b517d39bfdf5374a86284b54faa33471f305e05cfdc6d1c557083b59c505fc14d275a0eecc935408a4ff279b2d4710d721783b13b1613dba064dcdb27a4") pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000003c0)='./file0\x00', 0x8, 0x3) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000140)={0x5, 0x100000001, 0x7, 0x101}) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000180)={0x9, 0x7, 0xff, 0x80000000, 0xffff}, 0x14) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000040), 0x10) sendto$inet(r3, &(0x7f00000000c0)='_', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080), 0x14) recvfrom$inet(r3, &(0x7f0000000b40)=""/4096, 0x1000, 0x2, 0x0, 0xfffffffffffffe33) [ 161.374432] CPU: 0 PID: 8910 Comm: syz-executor.5 Not tainted 4.14.124 #18 [ 161.381513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 161.390880] Call Trace: [ 161.393495] dump_stack+0x138/0x19c [ 161.397135] should_fail.cold+0x10f/0x159 [ 161.401300] should_failslab+0xdb/0x130 [ 161.405291] kmem_cache_alloc_node+0x287/0x780 [ 161.409892] __alloc_skb+0x9c/0x500 [ 161.413539] ? skb_scrub_packet+0x4b0/0x4b0 [ 161.417862] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 161.423332] sctp_packet_transmit+0x351/0x3020 [ 161.427922] ? sctp_packet_config+0x614/0x9f0 [ 161.432432] ? sctp_packet_config+0x9f0/0x9f0 [ 161.437034] ? sctp_transport_burst_limited+0x17b/0x1c0 [ 161.442586] sctp_outq_flush+0xd13/0x31b0 [ 161.446760] ? __sctp_outq_teardown+0xde0/0xde0 [ 161.451459] ? ima_add_template_entry.cold+0x48/0x48 [ 161.456573] ? ima_match_policy+0x84b/0x1180 [ 161.461015] ? sctp_sf_heartbeat.isra.0+0x12a/0x180 [ 161.466047] sctp_outq_uncork+0x60/0x70 [ 161.470210] sctp_do_sm+0x417/0x4a30 18:56:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)='G', 0x1) [ 161.473927] ? __lock_acquire+0x5f9/0x45e0 [ 161.478153] ? __lock_acquire+0x5f9/0x45e0 [ 161.482401] ? sctp_do_8_2_transport_strike.isra.0+0x8a0/0x8a0 [ 161.488389] ? trace_hardirqs_on+0x10/0x10 [ 161.492637] ? __lock_acquire+0x5f9/0x45e0 [ 161.496883] ? save_trace+0x290/0x290 [ 161.500695] ? trace_hardirqs_on+0x10/0x10 [ 161.505198] ? save_trace+0x290/0x290 [ 161.509021] ? __might_fault+0x110/0x1d0 [ 161.513111] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 161.518413] sctp_apply_peer_addr_params+0x126/0x1000 18:56:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x5b) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1031, 0x202001) mkdirat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x1ff) connect$inet(r0, &(0x7f0000002bc0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500), 0xffd2}], 0x1}}], 0x469, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000280)={'broute\x00', 0x0, 0x3, 0x4a, [], 0x5, &(0x7f0000000180)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=""/74}, &(0x7f00000000c0)=0x78) [ 161.523623] sctp_setsockopt_peer_addr_params+0x34b/0x400 [ 161.529180] ? sctp_getsockopt_assoc_stats+0x540/0x540 [ 161.534484] ? lock_sock_nested+0x8c/0x110 [ 161.538743] ? trace_hardirqs_on+0xd/0x10 [ 161.542908] ? __local_bh_enable_ip+0x99/0x1a0 [ 161.547512] sctp_setsockopt+0xa56/0x3f50 [ 161.551675] ? sctp_setsockopt_paddr_thresholds+0x3b0/0x3b0 [ 161.557373] ? sock_has_perm+0x1ed/0x280 [ 161.561441] ? selinux_tun_dev_create+0xc0/0xc0 [ 161.566119] ? lock_downgrade+0x6c2/0x6e0 [ 161.570277] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 161.575915] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 161.581213] sock_common_setsockopt+0x94/0xd0 [ 161.585738] SyS_setsockopt+0x13c/0x210 [ 161.589724] ? SyS_recv+0x40/0x40 [ 161.593189] ? do_syscall_64+0x53/0x640 [ 161.597188] ? SyS_recv+0x40/0x40 [ 161.600652] do_syscall_64+0x1e8/0x640 [ 161.604801] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 161.609656] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 161.614848] RIP: 0033:0x459279 [ 161.618038] RSP: 002b:00007f283c97fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 161.625752] RAX: ffffffffffffffda RBX: 00007f283c97fc90 RCX: 0000000000459279 [ 161.633026] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 161.640298] RBP: 000000000075bf20 R08: 0000000000000098 R09: 0000000000000000 [ 161.647571] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f283c9806d4 [ 161.654849] R13: 00000000004ceab8 R14: 00000000004dd320 R15: 0000000000000005 18:56:06 executing program 5 (fault-call:4 fault-nth:14): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:06 executing program 2: r0 = socket(0x11, 0x3, 0x81) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x1) 18:56:06 executing program 0: r0 = fanotify_init(0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) r2 = dup(r0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000080)={0xfffffffffffffd53}, 0xc86f) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x25f8, 0x8167, 0x3ff, 0x11}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r3, 0x95}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r3, 0x7}, &(0x7f00000001c0)=0x8) 18:56:06 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x140, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000080)) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:06 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x0) read$alg(r0, &(0x7f0000000000)=""/183, 0xb7) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000100)={0x8900000000000000, 0x2, 0x10000, 0x1, 0xc}) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000140)) ioctl$int_in(r0, 0x800060c0045005, &(0x7f00000000c0)=0x973b) 18:56:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 161.752887] Unknown ioctl 8840 [ 161.768744] Unknown ioctl 8840 [ 161.787878] FAULT_INJECTION: forcing a failure. [ 161.787878] name failslab, interval 1, probability 0, space 0, times 0 [ 161.814221] CPU: 0 PID: 8959 Comm: syz-executor.5 Not tainted 4.14.124 #18 [ 161.821292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 161.821297] Call Trace: [ 161.821316] dump_stack+0x138/0x19c [ 161.821335] should_fail.cold+0x10f/0x159 [ 161.821352] should_failslab+0xdb/0x130 [ 161.821365] kmem_cache_alloc_node_trace+0x280/0x770 [ 161.821376] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 161.821391] __kmalloc_node_track_caller+0x3d/0x80 18:56:07 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x40) faccessat(r1, &(0x7f0000000080)='./file0\x00', 0xa4, 0x1300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001, 0x0, 0x0, 0x200000000000}}) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) fchdir(r2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:07 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x5) r1 = socket(0x42000000015, 0x805, 0x0) getsockopt(r1, 0x2000000114, 0x2711, 0x0, &(0x7f0000000000)) [ 161.821409] __kmalloc_reserve.isra.0+0x40/0xe0 [ 161.846434] __alloc_skb+0xcf/0x500 [ 161.846447] ? skb_scrub_packet+0x4b0/0x4b0 [ 161.846456] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 161.846470] sctp_packet_transmit+0x351/0x3020 [ 161.862015] ? sctp_packet_config+0x614/0x9f0 [ 161.862032] ? sctp_packet_config+0x9f0/0x9f0 [ 161.862045] ? sctp_transport_burst_limited+0x17b/0x1c0 [ 161.862056] sctp_outq_flush+0xd13/0x31b0 [ 161.862079] ? __sctp_outq_teardown+0xde0/0xde0 [ 161.862090] ? ima_add_template_entry.cold+0x48/0x48 18:56:07 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x5) r1 = socket(0x42000000015, 0x805, 0x0) getsockopt(r1, 0x2000000114, 0x2711, 0x0, &(0x7f0000000000)) [ 161.862099] ? ima_match_policy+0x84b/0x1180 [ 161.862112] ? sctp_sf_heartbeat.isra.0+0x12a/0x180 [ 161.862124] sctp_outq_uncork+0x60/0x70 [ 161.862135] sctp_do_sm+0x417/0x4a30 [ 161.876241] ? __lock_acquire+0x5f9/0x45e0 [ 161.876253] ? __lock_acquire+0x5f9/0x45e0 [ 161.876272] ? sctp_do_8_2_transport_strike.isra.0+0x8a0/0x8a0 [ 161.945978] ? trace_hardirqs_on+0x10/0x10 [ 161.950217] ? __lock_acquire+0x5f9/0x45e0 [ 161.950224] ? save_trace+0x290/0x290 18:56:07 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000080)={{0x6f, @rand_addr=0x8, 0x4e22, 0x3, 'ovf\x00', 0x18, 0x9, 0x65}, {@multicast1, 0x4e23, 0x4, 0x8, 0x3c, 0x3}}, 0x44) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x6}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140)={0x0, 0x1}, 0x8) connect$inet6(r1, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) [ 161.950234] ? trace_hardirqs_on+0x10/0x10 [ 161.950243] ? save_trace+0x290/0x290 [ 161.950256] ? __might_fault+0x110/0x1d0 [ 161.950275] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 161.950287] sctp_apply_peer_addr_params+0x126/0x1000 [ 161.950301] sctp_setsockopt_peer_addr_params+0x34b/0x400 [ 161.950318] ? sctp_getsockopt_assoc_stats+0x540/0x540 [ 161.950337] ? lock_sock_nested+0x8c/0x110 [ 161.950346] ? trace_hardirqs_on+0xd/0x10 [ 161.950355] ? __local_bh_enable_ip+0x99/0x1a0 [ 161.950366] sctp_setsockopt+0xa56/0x3f50 [ 161.950378] ? sctp_setsockopt_paddr_thresholds+0x3b0/0x3b0 [ 162.008880] ? sock_has_perm+0x1ed/0x280 [ 162.008892] ? selinux_tun_dev_create+0xc0/0xc0 [ 162.008906] ? lock_downgrade+0x6c2/0x6e0 [ 162.024280] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 162.024292] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 162.024324] sock_common_setsockopt+0x94/0xd0 [ 162.049924] SyS_setsockopt+0x13c/0x210 [ 162.053911] ? SyS_recv+0x40/0x40 [ 162.053924] ? do_syscall_64+0x53/0x640 [ 162.053934] ? SyS_recv+0x40/0x40 18:56:07 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000005c0)=0xe8) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)=0x0) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000780)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000880)=0xe8) getresgid(&(0x7f00000008c0)=0x0, &(0x7f0000000900), &(0x7f0000000940)) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000b00), &(0x7f0000000b40)=0x0, &(0x7f0000000b80)) r16 = getegid() getgroups(0x3, &(0x7f0000000bc0)=[0xee01, 0xee00, 0xee01]) getgroups(0x8, &(0x7f0000000c00)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0xee01]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0xfffffffffffffffe) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000d40)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r2, @ANYBLOB="02000200", @ANYRES32=r3, @ANYBLOB="02000500", @ANYRES32=r4, @ANYBLOB="02000400", @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32=r6, @ANYBLOB="02000300", @ANYRES32=r8, @ANYBLOB="02000400", @ANYRES32=r9, @ANYBLOB="02000400", @ANYRES32=r10, @ANYBLOB="02000200", @ANYRES32=r11, @ANYBLOB="040004000000000008000000", @ANYRES32=r12, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="ac", @ANYRES32=r14, @ANYBLOB="08000600", @ANYRES32=r15, @ANYBLOB="08000400", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r18, @ANYBLOB="08000300", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="10000200000000002000050000000000"], 0xb4, 0x3) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_SIOCSIFDSTADDR(r21, 0x8918, &(0x7f0000000e40)={@local, 0x36, r7}) r22 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r22, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001, 0x2, 0x0, 0x80000, 0x6}}) syz_mount_image$msdos(&(0x7f0000000e80)='msdos\x00', &(0x7f0000000ec0)='.\x00', 0x3, 0x1, &(0x7f0000000f00)=[{&(0x7f0000001040)="900057e733f9162437e531ce78cc258fba5fa3bd0b740a07641e732e646face637faba2d69051190f29ca73320cafc568ed70fc1689590b717e63df2f598372242d9b1035c300ed3634a4656e4ce10e2f1071c709d99a66f6ad8f9d7aa1c0035ad4090ea778c950e8249e8d634f4895020e4a992d7b56f7f4f319ad7bd534a8633eeca7ef784a0f41628a679003feb56a5dc0604942a4f6714721b365493153f4fb69bf4120f3bc5786b6cce01fbe4fe2a3e6bea276f0bbee319bd9de6e9e5ff6f0c25a80116af52b4559266c690682df9ce8181565699ab3c02c0f7ceec5b026a8cbb1b7b1fbeb78f833b4e056378dde60f0a9f0cc2b7c872893735227a1a1816ab6784ac1a4ceb76bf23658ca1c61f49b79649c1ab72bdfa3dbd892b177151ac2dcb4a04c30baa17bbe4c7f577f5db85f3818f1ef66ae95e45fcdd6bde09b72145067167301b63d15886176126bd007686c557c1fa9407746eedb09be36a1fa82f657324f9c75536e5e840e16c0d2b54d05ef65e6e9c35aaae8f0cbd9bae76168d1502fc2afa1a7682264ff6d866b31ce69d7909045d310b85ca349b6472e07bf2ae9636add182972fa26e21529134da9c556e6dc74aacbb5af6d92f103da4e7be15f142bbc80115cb56e575204445a158f8783ae3c39855faf7ae33f4783763e6480e6c5ae4826d8135b81f719413bebf6ba987813c9bc5359e400cb6cdb8a8b679fa2704aa6c138786bf5f558d5258e237c262165e43175d1f14649ad2a39a8bd9e93654451e6348fb965e83e2724323d796c9f3b021a75ccfe7439f71517c4e2ea0ab09924a23552ad8c7c23f369b619dae62a734f56589904ebf47b44d01ce6ef950d81ecceca63c657cc072257f4bed70e72f012c73a9134daf8d5344250ffec8fb6fff8fd151e2b0d7baf23d4e254e7e988de21101b4751be82dfaa88cceeaf9a917d8c17c52dbaf03ab4663e798634c30dd1c3b5a91074d8b21873f746b87cdfa02d5cdf5a3302acdb8615d899151eda7b13a1833afa21338bfa678336cd7effcdbd8d9c1fb73f8ed1f4a1d136aebdd38bbc1f9f488b78a4c34b0e4c95ab47eb9c346b40632039f3cf1b4f7f714a0a16932c38e86d1246ca94454fd5f7e8b38d912681398a9c3e6a4ccc7cc721c0c2f3fcfff81202440c982b9854cffff3f52b588aa40a5e2aad44bbb7d586187ee3b6363d204d35b8b4c53e1db55e102e64ac8ae93aab588ee1df08667fe0597172fa4c395190aaa2f687ded121f524b96f234f3d918e7577008c4a469d838a79f1dbf66585ed4cd2f4d8fe17113825597b5aeb3f0b36a87cbd741a52e702f5225acf33e1f4d2f690276926dcbef934d0b8845f832522143d1e8ba984cdc10d361e53b97377f7b85b0eec57b2f78ea9f934e17a1cbb19a59ff99eb9e73c35ed0e5e0f45a0ce35f8b300e5d60ffc610c200228a0a3d592997f7d9dcde698a801fc82145036f010ffc0b33af79969cb50d06e25c3234d959dcb6998ded89f65657f6c61b9cabbd0d8f58f7da1d042bb2bb2a788924516c0356dc5f3a17cc440c6aa8c6d3f22370754322b78a1874260fdb8115400dcfe68b5a1aeaa1e134343818c5486027f2aa08d59c53b7c3290289de804d83eae1f86105418deb6060554329e160e5e4158175b63fb4a836f6e52766474b2651b07cb4fea6f610ce170d752003f95de2a9553dfbd68b1ff6f32f3e9d4b7584110b0cf36bcf7e3705924a3b80bdf2b74724a5fc349080760ddd72eb0e9b5d553b2609d15e3588a8b7b97d9d381e2cdbfab3cc651075e7c7e647009149ca8ef8cd1b89363b3a33baa4c3e75e730e31ffa64598ea30e482fb631dddf608ecc3241ad065a53f27d8eb10d7202d06faad93974b6788fcf0ef583465bc622d47f2a1f4766cb880884616253a18959e9863334b1d46f5bbe02994eafb969ec0e8628a1aa72aa279e25fa83f0f6c3baf7ceb48039b56b7b0c7c32ff6de93b2c3519f5bc93a8a53ccbb411f7f8f9b1e950ec01d836b021ca2cec44671ac5f54827c97e89024ba63208b8a6f268f586c15a2aaaef95684d7404bf9d8eb24f80f5c6acca8f08d5fdd2c18c71186f4f8c756cdf038192a15b722d44d6c4924e596d272f1e691600cfd6d3d5425dfe616198b2b5ac3ad99fad600acc5691acb3bd235eeccdfcbad1d5331e8b78df5567752b6f5becc181a4af238b1cda08593563469fb542a31f966dbbc189e1b483f2eb157ed285a5b9a4cea562dec541b89c1bfc054124f5f48e5c18895dc8eccf7c38d470e3b4daed8d6f8e98fe5a616eb4ada96c0226d71a446dded94bd07fd757cb567e12d66f91cb627adac92d83edbc5794192d81e7cdcf5336e4954b0b9ed35eba8896d3b0686471aabc3965e24aa4256480e97e56ff06f59f90108dc13b6b9cafd494f890c009afe85d716a3e44c9e33ee2be2b87ee0e2def12bedda0c1f5c11d5a5cbf49a9b95347a7fd08a3b887ed748a451da1a128c1af9b0bfadcc9f670f773258d6fb12d5c33d21e68a1cc50d7d61d652ac742a4ef97df6bc948027415bd62f4baf8921ea182abd07ad802595159e2c79d0d7240eb6c2b6e9d333cfcfd7f25cb39c4ed7f69b6b3d8eacf9ba2b3c4cb4426381656bab20dfd6a40d9927faddec300c022caef6366f5dc2d5cc890d58d6070968370e11331c498969fe4abee9c7c0c9b30a8f76c170902025db6b84a12a0548365ec1f54e8698a3af5e08cc74ef267069e465f1245da28815764f63329b2b61b2733fc7a2f1dabb993c3fe1eeab42e302b5e52a392295f3d8a95479b25fd3693136a213e1e57f55b350874eafd973e553d49792a5b55ae3b9a0d21f637400942e25ee62efbc9e4f1ad6a614e608c1d4461c2e2fe8bdf7315a2cf3ea8b0f1be8fab676f64ec8910c1a7431231f0b844c02f8018e4477cfa8b879379dc6a3d83c3de8ff1631f1cf8da279ecebe28f6593fbecdc318a0f2232f71866a14ae44244fc5bd563d8c0626e920fd4b667a778f0fd7c3c6c57e548f070496b5ce8aaccfcba207fe0deedfd53194c1e400216a21f24b22946c301bdce1dc033b3b93ef2f2c31ae54b8f608bd860538cc372ca8561e3834918233bdbb42c711ec921873e86b94fa5ed8700eb6f80d90397716ee8d939886b29568897f0a7e417d6a21118b4874992d3bff62a9368545ebc5be0c5cd85e75e50c073bdbe3178c9c9e088f7f0c2490706dcfa6613d0ee8b7ba9d0b0061b763f9a25851ac3fa5d2def227dee31c5b6752830f1990ae713f7f134da9927e994b4fccd646b7558b8a8204e01c3022ce5d7f3b93251dcc8158b0c42919772d7d31c7996017b0a152051349034697fa58806d5e14abdefd15f27ddd4a2ba3d57d21e1284be4a7f33a08c358dba53ec1a4b76b9631479c918b1a5428b345a561da538a99de59b7e78ae61bd6c7be67a443269ecfcacd4f19eec9725106cda40c9b9b551881e0d85928b90d877b52e06c64f2e69f7f9e0e94d536bfcb6519441b26745db5de4c3c13b09e65c6d7877511047999f45a01101eef1a2009e62dbccbe16bf54434f17506ed4d900e66129fc2c47dcacd759166d1d39453eb807f960d4273a2b637f837c892052be17d43263795a3ee28bff41b4ff3a3e1c9a6460f0e6aae0af4bc6e471b33c8da9500744ca5e8ca895e14dba1ec5e00658f9c1e717d7c4787da913150b7c9a34ef814225c697c6350c35345196e1bc35373d5109b09cd4b7ef92d97b171cc54ab3edef8bb5f3cdc86dda16cb64f465c3ac41110656e51cdaba3032bc32434f4e6be56370973f1dbc6a9a6c723df8649a444cd10ee1672063f3fc1fdecc09048ee20a52b1d69b9f1c8e11eb8ca0956742f880f0a52b8302bb864f40ea5033b8af54a6824e4f61324724c95a37dc0e5a49e97210989b043a8e5da0036e2fc122a55b3f90549ee6a4624fb5cf2777a4fb974ccb6bc30c80755f00e8b30d43df3b0266c5f78db2af7915c12c4fee03558db7c42c00ae6cebe583946a23f0e9981610e02eb318e839797ea0a676594dc612f8e98a16d5c9b1bcdd69099f0ceb978fa9e7e1f1b1a960dfca55770f27e6fa0816dec03249413cd7605a9250f74bf30eab57b52b83ce6611fde7e12ce3632b13b67e8d8616754aa8c996d1468b231d9c8511ad0514323cbd1093ed820e8547cf5c91fc7dd6486a5c96526c1676885e49992a79b651b46a6ef6453db90eb02c31e26284c59008a8bab1a14d5c6bc040219dcfb2d4dcc077f9bc1e9ac9090201d8fb3b8800d96cf49adce40964d9b08b7017b564598adccd6d268a0975f40d1b5948b5c719d11e579cf5ea6ec354ba0334d40f01f9728a5baedf56f9c89d5a964a37b8b85a384019f55572a5ef102a0c3ce9253da351beb48584c9357c24dfdb3a17ae420980d7fff9cec1efbdc6c821a013df4bb41302108e68b4c3200c2925dcce62efda5185d09b0a2ed4fa8bb1064cc62db3f295c29b7abaec5ad404f785322a46bc161c6a7947c148aec69e979fb8bd0786d1507401f33eabe38c65510423f57ed3941decf7b43ab9a7028d8b207cbeddd322436e0e9f68cc87bdad57459381d67c8366ed88215d881eb9d12b7676e4cf52107b84d671278cb718c15f2504cddfe1b82ac2dd51b4ec5056fb4d515043e19ff9971889b10477517ca2d11525b46487733bf2fd316023aae841fe11aa3b520879f06cbd742a07d6fb63e922452c54ffa724f58d17352e97e318d013469ede3b06a99a7261191fcdddcc1e8455265c35d53f55f842e225cda3abe6018095573e97a7667b6149849117356ac3b8ecde4b0ec19377708e5068d163ec64274393597d8c01ffe65c377dc3fee13ebe10f22d615f81a81f0f250f4bbd9c0e961358fad5fe55e3f7e768be081364aa98a1481e5b9b0131de5d474af078fce1ae0bd66f853e7dcbc209b2c8cee98793365a7e0f1d637f466ffafb1d7f09a166f1eb3601ff51cdff85093fb5021cfc3e2cf472556985c52ca007f9d3433bdefcaa167be4f6eb677fede5a16e5fdc431cade13f5e754101741f03718dc805011bae502e1ad828a560f3779eddb8996e2ff40dc018988299276f15776341bba40bbf14de28dc689cee4935cff7a1e51aa80f8227de15729d344e462384a68e588e9c0b8ab6c0b20cc31fcdec9ac1b0c73f49355d710fb5ff02714bb747e5d1389f97c7eed7bd981c4256c78819052bfa379ce0fcee92bda6f7545802278eed0a1e28e34d967f1f13072ce944a2342a98d7264456627aacfe4fb2b9d72685d03505bd77ecfc325dac909993206757199dd9af10fab1c10b0f18d6f0dead537fefd459640e71a5e0fff9005b55cf22778fd39137a74d1d69cb15c0ceb7055399bcb4fb347b44a6de86b96a4beb8538944002f129e91001e2e31bbaa68ca3fceafcbfdb8bb562a1e450a1ddec8b2f3b1f4b959c84cdb181c6b1c7be7c9558aee30fe414c35fd0931c580b4efbcd8f24a0e0a8d99ef697539e45eea2368626f3ee376aebf02120762dfb4f39c597a02677a37e430093fef2b2af3e234377d4dbbfc2717b9b3ed6617c72732c7821b2aacff37dccecc796fcb2263477855e6b31d53f40d67a1c02972d2f07117426e0f4ad716044851923d5d51855ea51b6e84d1a2b186c7d83ed0ae1275f98364aee5bf094edf19cc2fbbdc5d51c1eeafbf1ca437ec51c436a773dc30af5750d6da1ab35beaee54c926fd026881f08256aa08cbf8525e6ea327d4c734dc2fc298cbf19b84454564353d7dfa70f6516b195dbfd3575ee0dc8", 0x1000, 0x6}], 0x21048, &(0x7f0000000f40)={[{@dots='dots'}, {@dots='dots'}, {@dots='dots'}, {@dots='dots'}, {@nodots='nodots'}], [{@euid_eq={'euid', 0x3d, r1}}, {@dont_hash='dont_hash'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 162.064900] do_syscall_64+0x1e8/0x640 [ 162.068786] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 162.068806] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 162.068815] RIP: 0033:0x459279 [ 162.068821] RSP: 002b:00007f283c97fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 162.068835] RAX: ffffffffffffffda RBX: 00007f283c97fc90 RCX: 0000000000459279 [ 162.082051] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 162.082057] RBP: 000000000075bf20 R08: 0000000000000098 R09: 0000000000000000 18:56:07 executing program 5 (fault-call:4 fault-nth:15): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 162.082063] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f283c9806d4 [ 162.082069] R13: 00000000004ceab8 R14: 00000000004dd320 R15: 0000000000000005 18:56:07 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000000)={@remote, @local, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @remote, @rand_addr="3ea16d78ccf1875a61eacd70586dce92", @broadcast, @dev={0xfe, 0x80, [], 0x1a}}}}}, &(0x7f0000000080)={0x1, 0x3, [0x56c, 0x3, 0xd08, 0xffa]}) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) 18:56:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:07 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") unshare(0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x1) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x1, 0x4) bind$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000040)) accept4$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c, 0x800) [ 162.229200] FAULT_INJECTION: forcing a failure. [ 162.229200] name failslab, interval 1, probability 0, space 0, times 0 [ 162.268474] CPU: 1 PID: 8997 Comm: syz-executor.5 Not tainted 4.14.124 #18 18:56:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000100)=0x1e) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000140), 0x1000) [ 162.275555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.284930] Call Trace: [ 162.287533] dump_stack+0x138/0x19c [ 162.291268] should_fail.cold+0x10f/0x159 [ 162.295440] should_failslab+0xdb/0x130 [ 162.299430] kmem_cache_alloc_node_trace+0x280/0x770 [ 162.304548] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 162.310030] __kmalloc_node_track_caller+0x3d/0x80 [ 162.314992] __kmalloc_reserve.isra.0+0x40/0xe0 [ 162.319690] __alloc_skb+0xcf/0x500 [ 162.323363] ? skb_scrub_packet+0x4b0/0x4b0 [ 162.327701] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 162.333178] sctp_packet_transmit+0x351/0x3020 [ 162.337775] ? sctp_packet_config+0x614/0x9f0 [ 162.342295] ? sctp_packet_config+0x9f0/0x9f0 [ 162.346878] ? sctp_transport_burst_limited+0x17b/0x1c0 [ 162.346893] sctp_outq_flush+0xd13/0x31b0 [ 162.346916] ? __sctp_outq_teardown+0xde0/0xde0 [ 162.356412] ? ima_add_template_entry.cold+0x48/0x48 [ 162.356426] ? ima_match_policy+0x84b/0x1180 [ 162.356439] ? sctp_sf_heartbeat.isra.0+0x12a/0x180 [ 162.356452] sctp_outq_uncork+0x60/0x70 [ 162.366217] sctp_do_sm+0x417/0x4a30 [ 162.366229] ? __lock_acquire+0x5f9/0x45e0 [ 162.366238] ? __lock_acquire+0x5f9/0x45e0 [ 162.366252] ? sctp_do_8_2_transport_strike.isra.0+0x8a0/0x8a0 [ 162.404001] ? trace_hardirqs_on+0x10/0x10 [ 162.408222] ? __lock_acquire+0x5f9/0x45e0 [ 162.412469] ? save_trace+0x290/0x290 [ 162.416265] ? trace_hardirqs_on+0x10/0x10 [ 162.420509] ? save_trace+0x290/0x290 [ 162.424325] ? __might_fault+0x110/0x1d0 [ 162.428386] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 162.433825] sctp_apply_peer_addr_params+0x126/0x1000 [ 162.439012] sctp_setsockopt_peer_addr_params+0x34b/0x400 [ 162.444555] ? sctp_getsockopt_assoc_stats+0x540/0x540 [ 162.449937] ? lock_sock_nested+0x8c/0x110 [ 162.454172] ? trace_hardirqs_on+0xd/0x10 [ 162.458312] ? __local_bh_enable_ip+0x99/0x1a0 [ 162.462883] sctp_setsockopt+0xa56/0x3f50 [ 162.467016] ? sctp_setsockopt_paddr_thresholds+0x3b0/0x3b0 [ 162.472712] ? sock_has_perm+0x1ed/0x280 [ 162.476798] ? selinux_tun_dev_create+0xc0/0xc0 [ 162.481638] ? lock_downgrade+0x6c2/0x6e0 [ 162.485789] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 162.491921] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 162.497365] sock_common_setsockopt+0x94/0xd0 [ 162.501866] SyS_setsockopt+0x13c/0x210 [ 162.505835] ? SyS_recv+0x40/0x40 [ 162.509272] ? do_syscall_64+0x53/0x640 [ 162.513237] ? SyS_recv+0x40/0x40 [ 162.516676] do_syscall_64+0x1e8/0x640 [ 162.520558] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 162.525506] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 162.530693] RIP: 0033:0x459279 [ 162.533862] RSP: 002b:00007f283c97fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 162.541571] RAX: ffffffffffffffda RBX: 00007f283c97fc90 RCX: 0000000000459279 [ 162.556089] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 162.563368] RBP: 000000000075bf20 R08: 0000000000000098 R09: 0000000000000000 [ 162.570948] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f283c9806d4 [ 162.578316] R13: 00000000004ceab8 R14: 00000000004dd320 R15: 0000000000000005 18:56:07 executing program 4: r0 = accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x800) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '*'}], 0xa, "9605063ca72b1c059a4e6292b445be0a2c54fef6d25778852810adc75dbd53b6bad747815ae5bffa4bdad8bfee828a54f1c24148134a035c5dd1308481ac22d4d6c8d130ddeaa00ed4b9d014ef1200b34813083978b0e49800234bf381336327475fffdb53f027a50a3a40257013384251681d8212a16e2b3a4e2868d79246c85af193f54474f2c79bc84a0616f2e631bc60eb8bc02cc1d19d143a7ee3c3b163cd4176f93aebbc249f491d52db4627cdef8fcd6a9e4ce7c1323344627d0537e005a7b037688d69515daaeba7645c0dc60a17d55e4a860d68a28100acfe32c2016ae31404"}, 0xf1) remap_file_pages(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x0, 0x0) 18:56:07 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0xdee}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x0, 0x1000, 0x0, 0x5, 0x1de}, &(0x7f00000001c0)=0x98) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000200)={0x0, @reserved}) 18:56:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="11dca5055e0bcfec7be070") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000340)=""/1) write$P9_ROPEN(r2, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x0, 0x1, 0x6}}}, 0x18) flock(r0, 0x240001) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e033d66642c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB="3c7700007ee976", @ANYRESHEX=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) getpeername$ax25(r0, &(0x7f0000000280)={{0x3, @rose}, [@default, @remote, @rose, @bcast, @netrom, @rose, @rose, @bcast]}, &(0x7f0000000200)=0x48) poll(&(0x7f0000000100)=[{r1, 0x1100}, {r0, 0x2408}, {r1, 0x40}, {r1, 0x2}, {r2, 0x2000}, {r1, 0x4449}, {r2, 0x202}, {r2, 0x200}], 0x8, 0xffffffffffffff44) 18:56:07 executing program 5 (fault-call:4 fault-nth:16): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:07 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001, 0x2, 0xbb, 0x4, 0x4000000000000000}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:07 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 162.688841] FAULT_INJECTION: forcing a failure. [ 162.688841] name failslab, interval 1, probability 0, space 0, times 0 [ 162.735962] CPU: 0 PID: 9025 Comm: syz-executor.5 Not tainted 4.14.124 #18 [ 162.743231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.743238] Call Trace: [ 162.743262] dump_stack+0x138/0x19c [ 162.743281] should_fail.cold+0x10f/0x159 [ 162.743289] ? sctp_packet_transmit+0xc2a/0x3020 [ 162.743303] should_failslab+0xdb/0x130 [ 162.743317] kmem_cache_alloc_node+0x56/0x780 [ 162.743335] __alloc_skb+0x9c/0x500 18:56:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0x406}, 0xfdef) [ 162.743344] ? skb_scrub_packet+0x4b0/0x4b0 [ 162.743351] ? sctp_transport_burst_limited+0x17b/0x1c0 [ 162.743358] ? sctp_transport_burst_reset+0x90/0xb0 [ 162.743367] _sctp_make_chunk+0x51/0x270 [ 162.743379] sctp_make_control+0x35/0x150 [ 162.743390] sctp_make_heartbeat+0x88/0x250 [ 162.743399] ? sctp_make_violation_max_retrans+0xf0/0xf0 [ 162.743406] ? __sctp_outq_teardown+0xde0/0xde0 [ 162.743415] ? ima_add_template_entry.cold+0x48/0x48 [ 162.743426] ? ima_match_policy+0x84b/0x1180 [ 162.743439] sctp_sf_heartbeat.isra.0+0x26/0x180 [ 162.743452] sctp_sf_do_prm_requestheartbeat+0x27/0x100 [ 162.743463] sctp_do_sm+0xfb/0x4a30 [ 162.743473] ? __lock_acquire+0x5f9/0x45e0 [ 162.743483] ? __lock_acquire+0x5f9/0x45e0 [ 162.743496] ? sctp_do_8_2_transport_strike.isra.0+0x8a0/0x8a0 [ 162.743507] ? trace_hardirqs_on+0x10/0x10 [ 162.743519] ? __lock_acquire+0x5f9/0x45e0 [ 162.743526] ? save_trace+0x290/0x290 [ 162.743540] ? trace_hardirqs_on+0x10/0x10 [ 162.743550] ? save_trace+0x290/0x290 [ 162.743562] ? __might_fault+0x110/0x1d0 [ 162.743582] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 162.743596] sctp_apply_peer_addr_params+0x126/0x1000 [ 162.743612] sctp_setsockopt_peer_addr_params+0x34b/0x400 [ 162.774920] mmap: syz-executor.4 (9035) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. [ 162.774990] ? sctp_getsockopt_assoc_stats+0x540/0x540 [ 162.787953] ? lock_sock_nested+0x8c/0x110 [ 162.787969] ? trace_hardirqs_on+0xd/0x10 [ 162.926303] ? __local_bh_enable_ip+0x99/0x1a0 [ 162.931265] sctp_setsockopt+0xa56/0x3f50 [ 162.935415] ? sctp_setsockopt_paddr_thresholds+0x3b0/0x3b0 [ 162.941299] ? sock_has_perm+0x1ed/0x280 [ 162.945365] ? selinux_tun_dev_create+0xc0/0xc0 [ 162.950061] ? lock_downgrade+0x6c2/0x6e0 [ 162.954222] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 162.959925] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 162.965235] sock_common_setsockopt+0x94/0xd0 [ 162.969735] SyS_setsockopt+0x13c/0x210 [ 162.973706] ? SyS_recv+0x40/0x40 [ 162.977157] ? do_syscall_64+0x53/0x640 [ 162.981149] ? SyS_recv+0x40/0x40 [ 162.984597] do_syscall_64+0x1e8/0x640 [ 162.988654] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 162.993497] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 162.998682] RIP: 0033:0x459279 [ 163.001952] RSP: 002b:00007f283c97fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 163.009667] RAX: ffffffffffffffda RBX: 00007f283c97fc90 RCX: 0000000000459279 [ 163.016995] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 163.024303] RBP: 000000000075bf20 R08: 0000000000000098 R09: 0000000000000000 18:56:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4020000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x0, 0x70bd2a, 0x25dfdbfe, 0x100000001, [@etimer_thresh={0x8, 0xc, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3W8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf\x93\x89t\xf4\x8dB\fI\xe5\xb3\t\x00\x00\x00\x00\x00\x00\x00\x19/?G\xc7\xea\x9a+\x9c5\xbf%32\xe8\x83>\xfa\xb8L\xde\xc6<\x1fs\xe1\xdf\x14\xa2^\xd1\xd9U\xc0\x99$\x8a\'\fx\xa2\xb1\xc9/\xb4\xfdp4\xc3\"\xea\x95\xce\x10R\xa8p\xc6\xdf\xc8|x\x14\xb8\xa2\xbb\xc5\x7f\xe2\x97\x1cr\x84\xc7\xba\x86\x96k1v\x17z{\x91Le~+\xe5r0\x0ez4\x12E\xb2[\xb5\x94\x00\x05\t\xd1o\xcfWR\xe8.\x8b\x83Rh\xd1\xec\x89)Xdig\"2*^\xcd=\xdf\xda\x83%4\xe5_q A!I\xbb\x7f\x9c\x13\xff0G\xc9\x92A\xcf\x03\xaa\xc0G\xaerd\x11\xe6\x00\x00\x00\x00|;\xb1@2\xdbs\x8b4Pk\xc2Sl\xc1\x90\xd9\a2eL\xef\x8eGX\x8c\xbbA\xa6\xf2Y?\xd0\x7fe\x12\x01\x90\x12t\xfe\x02\xa0Xg\x9c,pb\x16\x97e\x90\x12X\xa5\x93\xae\x00\x14y\xdd\xf9\xf5{4GY\xf4@\x92\x05\xe91\x16\xf5\x9a\xf8\x1a>\x11\xe6\xf7q\xec\x9e.\xd6\x05\b\a\xb9\ri\x86\x1d\x8c\xfaO\b8\x0f\xceL!\xcf\x16\xcf\xfd<;\xac\x9b.\xeb\xee]d]\xb2\x0f<\xfb\xa6\x9b\x85\x1b\xaf\xe8\x81n\n\x0f6!\xfa\xe6\xedT\xab\x0e\x18\xc2\x84\xb9\x81\xbd\xc3\x96z\xc6;\x90m\xd2\xbf\f\xd7\xe6\x1c\xd0\xd2\xa7\xde\xc9p\x8e\xd7:U~\x19\xee#\xcb\x1a\xb83QI7\x17~v\x11n6/+\xf8/\xb1V\xc9\xf4\xe4\x82\x88c\xec\xbfs4\x8f=\x8c\b\xbbQ\xf5\x96\x96\xc1\xa1^R\xf5\xe1o\xe2\x87\xfe\xb7\n\xc5\xde\x0ea\xcfi\a|`Z\n\x9e\x91v\x83?.](\xc8#\xa9\xfe\a\x15N\xc8\x17\xba\xb5)\x00\v\x8fQ\x8e:\xad\xcc\x87\xb5\xd4\xccI\xf5K\x02\x89?\xa2\xb9\xeeT\xe5E\x05I\x04\xa3\xeb1\x0f\xeb\xb9+\xeezU\x06\x8f\xdd\xa8\xb3\xe4\xcb\x99\xc9\xbc\xbaa\xc1L\n\xc6\xd7\x1dVITL\xa6\x8a\x86\xaa\xc7\xb0\xd9\xe41\xc1\xe4\xc9G\xf8A]\xd5\xbe\x16C\x06\x81\x9b\"\x16y\xa1_a\'`\xff$\xafJL\x17?\xe0rQ,\xd5z\x7f\x8eF\xf7\xcf;V0.M2\x83\xefk@9\xd0\xf3\x8d+\xa1\xb33\x81J\xd2]\xdc\xfd\xc8<\x1e\xea\x94\xc6\xdb/ \x10z\xbb%mDV\xe0\x81\xe7x\x80v9\xb5\v\b\xa4\xdfp\x96\xa7E#=U\x16\x91\r\xf7\xd4\xd1\"2\x81g\xa4h\x18\xc2\x0f\xbb\xccgEb=0\x80\xb4:\x1f\xa3\x11\xd5\xda\x85\x9f\xe2t\xe4\xdb\x0f\x8c\xa0\x00\xfb\\\xcd\x03\xeeub\rH@\x9c\x9a\x17\x0f\xb9m?K>hr\x16\xa3\xda\x150.Q\xd9\xd9{\xc1\xfc\xff&\x06\x91._P\x17\x04\xb0\xf2\x1a\xf4i\"\xb6\x1c\x97\xfd\x89\xad\xbb\xaa \xb5\xedU\xd6 \xaf\x94G\xe3\x83\xa9\xc1\x9eni\xfe\x8aS9\xcb\xb4\xd2\xd1\xeav\xdby\x9e\x10[\x8f\xd0\xb6\te[\xfc\xac\'z\x8a\x96\xe5\xc0)$\x86x\x96J\xbd\xf3>\xcd\x82\x88\xa9\xe5c\xfb\x1a\xf9\"\x1e\xf9!\xe4dp\x89\xa2o\xece.\xe7\'\xd6/\xfa\x95$H\xb7\xfdfY\f>\x1e\x18\x17\x02G\xf1H\xbc\x97\xf6\x00\xc2#h\'\x1a\x15\\\xb0\x8a\v!5#V\xda\xa0_\xa18_\x14\xfe@7\xfb\x14\xd9)\x14i\xb1\x17\xb7o\x1e8\x18zX\xd8\xf3\x8dx\xaf\xe3') sendfile(r0, r3, 0x0, 0x1) 18:56:08 executing program 4: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) [ 163.031650] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f283c9806d4 [ 163.041807] R13: 00000000004ceab8 R14: 00000000004dd320 R15: 0000000000000005 18:56:08 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000480)='/dev/bus/usb/00#/00#\x00', 0xc8d, 0x800) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000005c0)) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000600)=ANY=[@ANYBLOB="00100000000000000200000000000000000200000000000008000000000000000600000000000000020603040000000000000000000000000000000000000000000000000000000000000000000000000100010000000000b100000000010000020000000000000001ff3f0000000000000000000000000000000000000000000000000000000000000000000000000018c1dbbba71f47157fc82d55e7b8ed0edb23bb6a2fe913337aaf319191976076893e3504f966254becc0d8035ec1a06ea1"]) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x0, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f00000004c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000340)={@host}) socketpair(0x13, 0x80006, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000380), 0x2) sendmsg$nfc_llcp(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x27, 0x0, 0x2, 0x7, 0x9, 0xb1f, "061000c7ca8b8d0f465df9cd97747c15d23e9f229e218259f0758062f9011757b8fc92a22214e059d69b04adc666cff0fc0fa2c8ff2ec6a751fb7f14d5c459", 0x27}, 0x60, &(0x7f0000000300)=[{&(0x7f0000000100)="2c5e0706674b4a828879828b15b3c84fe58f03968655bde034928946b1736e0bc30249a26cb5fb96e447c4795ee0409403706a7aca63f2e94e1412ae7eff3440e8b0d1edc4f091d1fc6d19dc687400c563ad7f2b3c91b00dc7e7d3ae062b0f51f11e6e", 0x63}, {&(0x7f00000001c0)="6bbaa1ff9dd36480c4cd01d8e04bf10b85c33f5b4a7aad0217ad9cce9a89092e318651568fb5a6184ee01cdc256b615aa3e791538245e402ddcb879f6cc7f87de2e78f9705da2fccb57ce79b2d30152a5637ddd1ddc92f22d1f988c625ba", 0x5e}, {&(0x7f0000000240)="a194ba56cb8ae33075b3ff0ec916c2819c0c0d72149356db8155ef46a5a8cc0426e63b7be6cc887d9e8b46d1f5dd60a1036b2182aa09df18d8f7aded8f5b668d09d75aa2a6527217e5ddfd8434fba4460275a1e92ade9104060d6fcc78f7d3058b3d62acd7db64dda33f472173f7b801cdd32a7b9ffab9e0123331644b276ea86078cbc505e0bd267084d519f9afcee660efa41c55b3525a1402390a8579d5ef118a1df4fbcf78a119bfbf", 0xab}], 0x3, &(0x7f0000000600)=ANY=[], 0xfffffffffffffd2e}, 0x4) ioctl$BLKPG(r1, 0x40140921, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x0}) 18:56:08 executing program 5 (fault-call:4 fault-nth:17): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:08 executing program 2: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000080)="b156eb", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000140), 0xff8) keyctl$dh_compute(0x17, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={'michael_mic-generic\x00'}}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x18) 18:56:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, 0x0, 0x0) 18:56:08 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3, &(0x7f00000003c0)="155a744ecaee93a2e911dca5002d000000006f69477c47a94c7f4ec2001f8094da082ce4a603001dc47a1aa51831fd35e3ba5f4e7735fc8eb653e79133e2118fe42eb4084dc79eca2596ab6a3c4cad294ac3ff7cd34f12904ebd01cc434085348b37a8f83719ecf49b0e25ff08795a7a5e988495041bc3db7d58d79628cb40b2c41a315f1d7054cbbfa6dd12b345fdcd07a50b058fb4a86684cf65d6d9da60e7a1d0fef6e770028def7cb2198008deda") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:08 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x1, 0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f908, 0xfffdfffffffffffe, [], @p_u16}}) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x200, 0x40) mkdirat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x1ff) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x4, 0x5, 0x0, 0x140, 0x4, 0xd46e, 0x8}) dup(r0) [ 163.208946] FAULT_INJECTION: forcing a failure. [ 163.208946] name failslab, interval 1, probability 0, space 0, times 0 [ 163.225233] md: invalid raid superblock magic on ram0 18:56:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, 0x0, 0x0) [ 163.232390] audit: type=1400 audit(1560192968.436:17359): avc: denied { map } for pid=9057 comm="syz-executor.2" path=2F6D656D66643A2D42D54E49C56ABA707070F00884A26D202864656C6574656429 dev="tmpfs" ino=32607 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 [ 163.250057] CPU: 0 PID: 9059 Comm: syz-executor.5 Not tainted 4.14.124 #18 [ 163.269138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.278516] Call Trace: [ 163.278892] md: ram0 does not have a valid v0.0 superblock, not importing! [ 163.281113] dump_stack+0x138/0x19c [ 163.281130] should_fail.cold+0x10f/0x159 [ 163.281140] ? sctp_packet_transmit+0xc2a/0x3020 [ 163.281151] should_failslab+0xdb/0x130 [ 163.281162] kmem_cache_alloc_node+0x56/0x780 [ 163.281179] __alloc_skb+0x9c/0x500 [ 163.281187] ? skb_scrub_packet+0x4b0/0x4b0 [ 163.281194] ? sctp_transport_burst_limited+0x17b/0x1c0 [ 163.281202] ? sctp_transport_burst_reset+0x90/0xb0 [ 163.281212] _sctp_make_chunk+0x51/0x270 [ 163.281228] sctp_make_control+0x35/0x150 [ 163.281239] sctp_make_heartbeat+0x88/0x250 [ 163.281247] ? sctp_make_violation_max_retrans+0xf0/0xf0 [ 163.281255] ? __sctp_outq_teardown+0xde0/0xde0 [ 163.281268] ? ima_add_template_entry.cold+0x48/0x48 [ 163.292932] md: md_import_device returned -22 [ 163.296155] ? ima_match_policy+0x84b/0x1180 [ 163.296173] sctp_sf_heartbeat.isra.0+0x26/0x180 [ 163.296186] sctp_sf_do_prm_requestheartbeat+0x27/0x100 [ 163.296196] sctp_do_sm+0xfb/0x4a30 [ 163.296206] ? __lock_acquire+0x5f9/0x45e0 [ 163.296222] ? __lock_acquire+0x5f9/0x45e0 [ 163.313492] ? sctp_do_8_2_transport_strike.isra.0+0x8a0/0x8a0 [ 163.313506] ? trace_hardirqs_on+0x10/0x10 [ 163.328287] ? __lock_acquire+0x5f9/0x45e0 [ 163.328297] ? save_trace+0x290/0x290 18:56:08 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40020000000, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x4e20, 0x40, @mcast1, 0xffff}, {0xa, 0x4e21, 0xffff, @local, 0xfffffffffffffffa}, 0x100000000, [0x6, 0x1, 0x101, 0x3, 0x3f, 0xffff, 0x3, 0x9]}, 0x5c) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x39, 0x3, 0x0, {0x0, 0x18, 0x0, 'eth1-[(ppp0vboxnet1eth1@'}}, 0x39) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400004, 0x0, 0x12, r0, 0x0) sendmsg$unix(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="f5f351da08611043d35e1e1befead2e35c00f3bad7057b6ecf7f2f01612bf83eaad28ab78f5b4f8bbf91640b74a412f7e85c415869a52b00342e41ffa2dae4f045078690f803824fe57565c0a416a69f596e28c3ff9a4ebb68f7ab273d72c95e5ac8674e12b790fd8c1426dc01f43ddf4d9233f681cc", 0x76}, {&(0x7f0000000040)="e3449751d88fea385ffd165fdca3b83c29201481bfe0d4", 0x17}], 0x2, 0x0, 0x0, 0x4010}, 0x20000000) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) [ 163.328311] ? trace_hardirqs_on+0x10/0x10 [ 163.328321] ? save_trace+0x290/0x290 [ 163.328335] ? __might_fault+0x110/0x1d0 [ 163.361021] md: invalid raid superblock magic on ram0 [ 163.361924] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 163.361940] sctp_apply_peer_addr_params+0x126/0x1000 [ 163.367827] md: ram0 does not have a valid v0.0 superblock, not importing! [ 163.371633] sctp_setsockopt_peer_addr_params+0x34b/0x400 [ 163.371649] ? sctp_getsockopt_assoc_stats+0x540/0x540 [ 163.371671] ? lock_sock_nested+0x8c/0x110 [ 163.371680] ? trace_hardirqs_on+0xd/0x10 [ 163.371688] ? __local_bh_enable_ip+0x99/0x1a0 [ 163.371700] sctp_setsockopt+0xa56/0x3f50 [ 163.371712] ? sctp_setsockopt_paddr_thresholds+0x3b0/0x3b0 [ 163.371720] ? sock_has_perm+0x1ed/0x280 [ 163.371728] ? selinux_tun_dev_create+0xc0/0xc0 [ 163.371736] ? lock_downgrade+0x6c2/0x6e0 [ 163.371744] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 163.371756] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 163.386883] md: md_import_device returned -22 18:56:08 executing program 5 (fault-call:4 fault-nth:18): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:08 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) flock(r1, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x7) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 163.389379] sock_common_setsockopt+0x94/0xd0 [ 163.389396] SyS_setsockopt+0x13c/0x210 [ 163.389411] ? SyS_recv+0x40/0x40 [ 163.442811] ? do_syscall_64+0x53/0x640 [ 163.442825] ? SyS_recv+0x40/0x40 [ 163.442836] do_syscall_64+0x1e8/0x640 [ 163.442844] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 163.442858] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 163.442865] RIP: 0033:0x459279 [ 163.442870] RSP: 002b:00007f283c97fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 163.442880] RAX: ffffffffffffffda RBX: 00007f283c97fc90 RCX: 0000000000459279 [ 163.442884] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 163.442889] RBP: 000000000075bf20 R08: 0000000000000098 R09: 0000000000000000 [ 163.442894] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f283c9806d4 [ 163.442899] R13: 00000000004ceab8 R14: 00000000004dd320 R15: 0000000000000005 18:56:08 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0xffffffffffffffff, 0x3, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000080)={0x0, 0x3, @raw_data=[0xffffffff, 0x7, 0xfffffffffffffffc, 0x4, 0x1, 0xff, 0x8, 0x400, 0x4, 0x6, 0x2, 0x4, 0x6, 0xfff, 0x6, 0xa4]}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:08 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000015c0)={0x1d, r1}, 0x10) close(r0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8800, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) 18:56:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r0, 0x0, 0x0) r3 = dup(r2) write$UHID_DESTROY(r3, &(0x7f00000000c0), 0x140) 18:56:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, 0x0, 0x0) 18:56:08 executing program 0: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) io_setup(0x4, &(0x7f0000000040)=0x0) io_getevents(r1, 0x1, 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)={0x0, 0x989680}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x101101, 0x0) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) [ 163.522089] audit: type=1400 audit(1560192968.706:17360): avc: denied { map } for pid=9078 comm="syz-executor.0" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=15360 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file permissive=1 [ 163.625013] FAULT_INJECTION: forcing a failure. [ 163.625013] name failslab, interval 1, probability 0, space 0, times 0 [ 163.694172] CPU: 0 PID: 9080 Comm: syz-executor.5 Not tainted 4.14.124 #18 [ 163.701345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.710824] Call Trace: [ 163.713494] dump_stack+0x138/0x19c [ 163.717137] should_fail.cold+0x10f/0x159 [ 163.721303] should_failslab+0xdb/0x130 [ 163.725293] kmem_cache_alloc_node_trace+0x5a/0x770 [ 163.730320] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 163.736310] __kmalloc_node_track_caller+0x3d/0x80 [ 163.741429] __kmalloc_reserve.isra.0+0x40/0xe0 [ 163.746111] __alloc_skb+0xcf/0x500 [ 163.749761] ? skb_scrub_packet+0x4b0/0x4b0 [ 163.754100] ? sctp_transport_burst_limited+0x17b/0x1c0 [ 163.760186] ? sctp_transport_burst_reset+0x90/0xb0 [ 163.765222] _sctp_make_chunk+0x51/0x270 [ 163.769293] sctp_make_control+0x35/0x150 [ 163.773444] sctp_make_heartbeat+0x88/0x250 [ 163.777782] ? sctp_make_violation_max_retrans+0xf0/0xf0 [ 163.783239] ? __sctp_outq_teardown+0xde0/0xde0 [ 163.787907] ? ima_add_template_entry.cold+0x48/0x48 [ 163.793188] ? ima_match_policy+0x84b/0x1180 [ 163.797594] sctp_sf_heartbeat.isra.0+0x26/0x180 [ 163.802348] sctp_sf_do_prm_requestheartbeat+0x27/0x100 [ 163.807801] sctp_do_sm+0xfb/0x4a30 [ 163.811422] ? __lock_acquire+0x5f9/0x45e0 [ 163.815753] ? __lock_acquire+0x5f9/0x45e0 [ 163.820006] ? sctp_do_8_2_transport_strike.isra.0+0x8a0/0x8a0 [ 163.825973] ? trace_hardirqs_on+0x10/0x10 [ 163.830206] ? __lock_acquire+0x5f9/0x45e0 [ 163.834433] ? save_trace+0x290/0x290 [ 163.838230] ? trace_hardirqs_on+0x10/0x10 [ 163.842464] ? save_trace+0x290/0x290 [ 163.846265] ? __might_fault+0x110/0x1d0 [ 163.850355] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 163.855803] sctp_apply_peer_addr_params+0x126/0x1000 [ 163.861004] sctp_setsockopt_peer_addr_params+0x34b/0x400 [ 163.866628] ? sctp_getsockopt_assoc_stats+0x540/0x540 [ 163.871933] ? lock_sock_nested+0x8c/0x110 [ 163.876978] ? trace_hardirqs_on+0xd/0x10 [ 163.881122] ? __local_bh_enable_ip+0x99/0x1a0 [ 163.885707] sctp_setsockopt+0xa56/0x3f50 [ 163.889945] ? sctp_setsockopt_paddr_thresholds+0x3b0/0x3b0 [ 163.895648] ? sock_has_perm+0x1ed/0x280 [ 163.899803] ? selinux_tun_dev_create+0xc0/0xc0 [ 163.904475] ? lock_downgrade+0x6c2/0x6e0 [ 163.908619] ? selinux_netlbl_socket_setsockopt+0x8f/0x340 [ 163.914265] ? selinux_netlbl_sock_rcv_skb+0x430/0x430 [ 163.919552] sock_common_setsockopt+0x94/0xd0 [ 163.924137] SyS_setsockopt+0x13c/0x210 [ 163.928115] ? SyS_recv+0x40/0x40 [ 163.931605] ? do_syscall_64+0x53/0x640 [ 163.935597] ? SyS_recv+0x40/0x40 [ 163.939054] do_syscall_64+0x1e8/0x640 [ 163.942941] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 163.947795] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 163.952981] RIP: 0033:0x459279 [ 163.956368] RSP: 002b:00007f283c97fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 163.971625] RAX: ffffffffffffffda RBX: 00007f283c97fc90 RCX: 0000000000459279 [ 163.978894] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 163.986158] RBP: 000000000075bf20 R08: 0000000000000098 R09: 0000000000000000 18:56:08 executing program 2: sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x10) getsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0x200000, 0x0, 0x0, 0x70d000) 18:56:09 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x9) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 163.994905] R10: 00000000200004c0 R11: 0000000000000246 R12: 00007f283c9806d4 [ 164.002350] R13: 00000000004ceab8 R14: 00000000004dd320 R15: 0000000000000005 [ 164.011329] audit: type=1400 audit(1560192968.966:17361): avc: denied { map } for pid=9102 comm="syz-executor.2" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=32990 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 18:56:09 executing program 1 (fault-call:7 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:09 executing program 4: r0 = userfaultfd(0xfffffffffffffffe) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001200)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000200)={&(0x7f000022e000/0x2000)=nil, &(0x7f0000321000/0x2000)=nil, 0x2000, 0x5}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x404}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x4}}, ["", ""]}, 0x24}}, 0x4000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000040)=""/180) 18:56:09 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0xf1e2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x8004, 0xff, 0xfffffffffffffbff, r3}, 0x10) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 164.213505] FAULT_INJECTION: forcing a failure. [ 164.213505] name failslab, interval 1, probability 0, space 0, times 0 [ 164.314326] CPU: 1 PID: 9122 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 164.324994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.337330] Call Trace: [ 164.341573] dump_stack+0x138/0x19c [ 164.341593] should_fail.cold+0x10f/0x159 [ 164.341606] should_failslab+0xdb/0x130 [ 164.341620] kmem_cache_alloc_node+0x287/0x780 [ 164.341646] __alloc_skb+0x9c/0x500 [ 164.349940] ? skb_scrub_packet+0x4b0/0x4b0 [ 164.349951] ? process_measurement+0x58a/0xb80 [ 164.349964] alloc_skb_with_frags+0x86/0x4b0 [ 164.349978] ? __might_fault+0x110/0x1d0 [ 164.381794] ? find_held_lock+0x35/0x130 [ 164.385902] sock_alloc_send_pskb+0x5db/0x740 [ 164.390529] ? iov_iter_advance+0x218/0xc60 [ 164.394964] ? sock_wmalloc+0xf0/0xf0 [ 164.394978] ? _copy_from_iter_full+0x1c6/0x6c0 [ 164.394995] packet_sendmsg+0x151a/0x5920 [ 164.403762] ? avc_has_perm_noaudit+0x420/0x420 18:56:09 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) listen(r0, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x0, 0x296a, 0x8, [], &(0x7f0000000000)=0xfff}) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x200000) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000200)={0xc0000000, 0x101, "4352ff47a144f217dbc2d3ac451924cf9a2e38067d0c3057a6220a80931cc32a", 0xae0c, 0x100000000, 0x4, 0x9, 0x8, 0x6, 0x7, 0xfffffffffffff340, [0x9, 0x1, 0x800, 0x3]}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x5, 0xf, 0x1, "e74eb8eefb611837600fb4499631ed118d57e58d99a01ccaa16f09fa384d5a6d", 0x38416761}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:09 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x2, 0x4) r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r1, &(0x7f0000000240)="ce03100001000140ff901efc9fb3d904827c000000007d8599b512fceb92bd30961166bf00000000070000e139b0f46b8bd8be447a6f4c98fb38368381933c1de4fceca5", 0x44, 0x0, 0x0, 0x0) recvfrom$packet(r0, &(0x7f0000000140)=""/25, 0x19, 0x0, 0x0, 0x0) 18:56:09 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) userfaultfd(0x80000) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 18:56:09 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0xf3da, 0xfffffffffffffe0e, 0x10000, 0x100, 0xffffffffffffffff, 0x7fff, [], 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x3c) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x40400) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000740)=""/7) poll(&(0x7f00000001c0)=[{r0, 0x5020}], 0x1, 0x40) r2 = socket$inet(0x2, 0x1000000c9008, 0x862f) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000780)=0x3, 0xfffffffffffffefc) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x401, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x200900) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r4}) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={r5, 0x80000, r3}) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, 0x0, &(0x7f0000000080)=0x35b) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3e8, 0x280, 0xd0, 0x1b0, 0xd0, 0x280, 0x350, 0x350, 0x350, 0x350, 0x350, 0x5, &(0x7f0000000240), {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffffff, 'irlan0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x88, 0x2, 0x56}, 0x0, 0x98, 0xd0}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1d, @multicast2, @local, @gre_key=0xfe, @icmp_id=0x65}}}}, {{@ip={@empty, @loopback, 0xffffffff, 0xffffffff, 'lo\x00', 'veth0_to_team\x00', {}, {0xff}, 0x67, 0x2, 0x10}, 0x0, 0x98, 0xe0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv4=@multicast1, @ipv4=@multicast2, @port=0x4e22, @icmp_id=0x64}}}, {{@uncond, 0x0, 0x98, 0xd0}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @remote, @dev={0xac, 0x14, 0x14, 0x1f}, @port=0x4e24, @gre_key=0xbb6}}}}, {{@ip={@rand_addr=0x6, @empty, 0xffffffff, 0xffffffff, 'veth1_to_bond\x00', 'bcsh0\x00', {}, {}, 0x62, 0x1, 0x2}, 0x0, 0x98, 0xd0}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x11, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @gre_key=0x400, @port=0x4e23}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) socket$unix(0x1, 0x3, 0x0) 18:56:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x10080) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f00000000c0)=0xffffffffffff8001, 0x4) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 164.403777] ? trace_hardirqs_on+0x10/0x10 [ 164.403787] ? save_trace+0x290/0x290 [ 164.403807] ? packet_notifier+0x760/0x760 [ 164.403825] ? selinux_socket_sendmsg+0x36/0x40 [ 164.430268] ? security_socket_sendmsg+0x89/0xb0 [ 164.435278] ? packet_notifier+0x760/0x760 [ 164.439649] sock_sendmsg+0xce/0x110 [ 164.443528] sock_write_iter+0x21d/0x390 [ 164.447729] ? sock_sendmsg+0x110/0x110 [ 164.451746] ? iov_iter_init+0xaf/0x1d0 [ 164.455753] __vfs_write+0x4a7/0x6b0 [ 164.459485] ? selinux_file_open+0x420/0x420 18:56:09 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0xfffffffffffffffd, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 164.463919] ? kernel_read+0x120/0x120 [ 164.468112] ? rw_verify_area+0xea/0x2b0 [ 164.473166] vfs_write+0x198/0x500 [ 164.477958] SyS_write+0xb8/0x180 [ 164.481436] ? SyS_read+0x180/0x180 [ 164.485080] ? do_syscall_64+0x53/0x640 [ 164.489086] ? SyS_read+0x180/0x180 [ 164.493031] do_syscall_64+0x1e8/0x640 [ 164.497379] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 164.502250] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 164.507458] RIP: 0033:0x459279 18:56:09 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xbb, 0x40000) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000200)={0x0, @src_change}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000040)) r3 = fcntl$dupfd(r2, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 164.510687] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.518762] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 164.526052] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 164.533949] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 164.541246] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 164.548976] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:09 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vfio/vfio\x00', 0x0, 0x0) recvfrom$rose(r2, &(0x7f0000000580)=""/19, 0x13, 0x0, &(0x7f00000005c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:09 executing program 1 (fault-call:7 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:09 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x40, 0x5, 0x1b, 0x1, "a5d37ef4605235941a8bfc8fea162eb72f15c3f69e69ddc7d4f22ae5919e58f8e229be4e317ae6ba2fff997fedf01d41fc94471274357e5cc99ad59d36ed48e0", "0daf4dcddd61037c5ce4ae866a55e51310fcd1a476ec2bc726adec6aebcd858a", [0x870, 0xfffffffffffffffd]}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x2, 0x27, 0xcc8000000000000, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={r2, 0x6, 0x1, [0x3]}, &(0x7f00000000c0)=0xa) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0x9a, @dev={0xfe, 0x80, [], 0xb}, 0xf15}}, 0x0, 0x0, 0x0, 0x40002, 0x51}, 0x98) [ 164.658867] FAULT_INJECTION: forcing a failure. [ 164.658867] name failslab, interval 1, probability 0, space 0, times 0 [ 164.685402] CPU: 1 PID: 9167 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 164.692506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.701987] Call Trace: [ 164.702009] dump_stack+0x138/0x19c 18:56:09 executing program 4: openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) futimesat(r0, 0x0, 0x0) [ 164.702028] should_fail.cold+0x10f/0x159 [ 164.702043] should_failslab+0xdb/0x130 [ 164.702054] kmem_cache_alloc_node_trace+0x280/0x770 [ 164.702068] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 164.702080] __kmalloc_node_track_caller+0x3d/0x80 [ 164.702092] __kmalloc_reserve.isra.0+0x40/0xe0 [ 164.702104] __alloc_skb+0xcf/0x500 [ 164.737106] ? skb_scrub_packet+0x4b0/0x4b0 [ 164.737118] ? process_measurement+0x58a/0xb80 [ 164.737133] alloc_skb_with_frags+0x86/0x4b0 [ 164.737145] ? __might_fault+0x110/0x1d0 [ 164.737157] ? find_held_lock+0x35/0x130 [ 164.758663] sock_alloc_send_pskb+0x5db/0x740 [ 164.758682] ? iov_iter_advance+0x218/0xc60 [ 164.758693] ? sock_wmalloc+0xf0/0xf0 [ 164.775657] ? _copy_from_iter_full+0x1c6/0x6c0 [ 164.780347] packet_sendmsg+0x151a/0x5920 [ 164.784510] ? avc_has_perm_noaudit+0x420/0x420 [ 164.789196] ? trace_hardirqs_on+0x10/0x10 [ 164.793633] ? save_trace+0x290/0x290 [ 164.797476] ? packet_notifier+0x760/0x760 [ 164.801736] ? selinux_socket_sendmsg+0x36/0x40 18:56:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x3300, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200201, 0xe4a896a45bfa35b4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000040)="6681da46119a3704bee3874efbbcf014f38717724208191b3c62997609f7b1ff19c184121bfc23acafb2503d6845e4875b7b566a7416a687cb56b7deec347619faa8a0fe", &(0x7f0000000140)="dce4dcfe87f961525bffdfdf349d82578736605680c1fc1552dbf4abffa7bc30f8892227a869f4d2c4ab67c4ba7810f61126cc2320820a31c27a5abe9763df7be0f89b6d217267c23838138643667f0bb8bc9814d554ab62cdcabeb0a70937a59e18214941f3cdfec1e22ab8190a30c06f5e6e21b8d5a0129fc12ee4e55459b2bc3d2b3ac4598850636b6b7cb667936b02610001feb13b81ea24db39ba376bb8a7e31ac7d7faa5adb2edc67340eacc5bd9e0dd89add9", 0x7}, 0x20) close(r0) 18:56:10 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4003ff) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0x10060) fallocate(r0, 0x3, 0x8004, 0x7fff) fallocate(r0, 0x0, 0x0, 0xfff9) r1 = getpgid(0x0) r2 = fcntl$getown(r0, 0x9) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000000)={r0, r0, 0x800}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001240)) [ 164.806596] ? security_socket_sendmsg+0x89/0xb0 [ 164.811368] ? packet_notifier+0x760/0x760 [ 164.815743] sock_sendmsg+0xce/0x110 [ 164.819474] sock_write_iter+0x21d/0x390 [ 164.823998] ? sock_sendmsg+0x110/0x110 [ 164.828003] ? iov_iter_init+0xaf/0x1d0 [ 164.832081] __vfs_write+0x4a7/0x6b0 [ 164.835808] ? selinux_file_open+0x420/0x420 [ 164.840251] ? kernel_read+0x120/0x120 [ 164.844174] ? rw_verify_area+0xea/0x2b0 [ 164.848610] vfs_write+0x198/0x500 [ 164.852257] SyS_write+0xb8/0x180 [ 164.855899] ? SyS_read+0x180/0x180 [ 164.859538] ? do_syscall_64+0x53/0x640 [ 164.863528] ? SyS_read+0x180/0x180 [ 164.867174] do_syscall_64+0x1e8/0x640 [ 164.871078] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 164.876064] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 164.881277] RIP: 0033:0x459279 [ 164.884475] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.892533] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 164.892542] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 18:56:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) unlink(&(0x7f0000000340)='./bus\x00') mkdir(&(0x7f0000001540)='./file0\x00', 0x0) r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, r2, &(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000080)={'syz', 0x3}, r2) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) 18:56:10 executing program 5: r0 = accept$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) write(r0, &(0x7f0000000240)="177a12fb038bbb7d2484840efcef0172b0", 0x11) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x1000}, 0xffffffffffffffb8) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de"}], 0x1}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000040)=""/16) r3 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 18:56:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x2402, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0xfffffffffffd) sync_file_range(r2, 0x0, 0x7, 0x4) 18:56:10 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r2 = accept4$inet(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x1, 0x4) 18:56:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e0000002a000500d25a80648c000000050000001000094002376ee6735e000000053582c137153e370900018000", 0x2e}], 0x1}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f00000001c0)=0x100000004) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x7, 0x0, 0xd4, 0x7}) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000000c0)={0x4, 0x6, 0xf9, 0x8be}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x100000000, 0x4f4a7b1, 0x1e, 0x18c, r1, 0x3, [], 0x0, r1, 0x4}, 0x3c) [ 164.907107] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 164.907114] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 164.907118] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:10 executing program 1 (fault-call:7 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:10 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000080)={0xfd, 0x0, [0x7ff, 0x7fff, 0x4]}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) 18:56:10 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 165.009424] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.035094] FAULT_INJECTION: forcing a failure. [ 165.035094] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 165.064039] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500) 18:56:10 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) sendfile(r0, r0, 0x0, 0x5) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r1, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x7}, 0xf) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x1000000000, 0x0, 0x0, 0x4d}, 0x98) [ 165.085716] audit: type=1400 audit(1560192970.286:17362): avc: denied { ioctl } for pid=9196 comm="syz-executor.4" path="socket:[33105]" dev="sockfs" ino=33105 ioctlcmd=0x660f scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 165.088047] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.154634] FAT-fs (loop0): Filesystem has been set read-only [ 165.165822] CPU: 0 PID: 9204 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 165.172989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.182375] Call Trace: [ 165.184998] dump_stack+0x138/0x19c [ 165.188756] should_fail.cold+0x10f/0x159 [ 165.193013] ? __might_sleep+0x93/0xb0 [ 165.196942] __alloc_pages_nodemask+0x1d6/0x7a0 [ 165.201638] ? __alloc_pages_slowpath+0x2930/0x2930 [ 165.206684] ? __alloc_skb+0x3ee/0x500 [ 165.210688] alloc_pages_current+0xec/0x1e0 [ 165.215047] alloc_skb_with_frags+0x179/0x4b0 [ 165.219572] ? __might_fault+0x110/0x1d0 [ 165.223745] sock_alloc_send_pskb+0x5db/0x740 [ 165.228268] ? iov_iter_advance+0x218/0xc60 [ 165.232618] ? sock_wmalloc+0xf0/0xf0 [ 165.236441] ? _copy_from_iter_full+0x1c6/0x6c0 [ 165.241137] packet_sendmsg+0x151a/0x5920 [ 165.245322] ? avc_has_perm_noaudit+0x420/0x420 [ 165.250016] ? trace_hardirqs_on+0x10/0x10 [ 165.254267] ? save_trace+0x290/0x290 [ 165.258547] ? packet_notifier+0x760/0x760 [ 165.262806] ? selinux_socket_sendmsg+0x36/0x40 [ 165.267491] ? security_socket_sendmsg+0x89/0xb0 [ 165.272267] ? packet_notifier+0x760/0x760 [ 165.276538] sock_sendmsg+0xce/0x110 [ 165.280270] sock_write_iter+0x21d/0x390 [ 165.284361] ? sock_sendmsg+0x110/0x110 [ 165.288558] ? iov_iter_init+0xaf/0x1d0 [ 165.292656] __vfs_write+0x4a7/0x6b0 [ 165.296390] ? selinux_file_open+0x420/0x420 [ 165.300955] ? kernel_read+0x120/0x120 [ 165.304892] ? rw_verify_area+0xea/0x2b0 [ 165.308974] vfs_write+0x198/0x500 [ 165.312536] SyS_write+0xb8/0x180 18:56:10 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x6, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 165.316011] ? SyS_read+0x180/0x180 [ 165.319647] ? do_syscall_64+0x53/0x640 [ 165.323643] ? SyS_read+0x180/0x180 [ 165.327289] do_syscall_64+0x1e8/0x640 [ 165.331190] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 165.336055] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 165.341273] RIP: 0033:0x459279 [ 165.344466] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.352416] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 18:56:10 executing program 5: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fgetxattr(r0, &(0x7f0000000000)=@random={'system.', 'proc\\vmnet1\x00'}, &(0x7f0000000200)=""/206, 0xce) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001600)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[], @ANYRESDEC=r1, @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRESDEC=r0, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESDEC=r0], @ANYPTR, @ANYRESDEC=0x0], 0x9}, 0x1, 0x0, 0x0, 0x801}, 0x200) [ 165.359861] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 165.367223] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 165.374500] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 165.381771] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 [ 165.412668] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500) [ 165.441408] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500) 18:56:10 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:10 executing program 4: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/pid\x00') socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f0000000080)="2400000058001f00ff07f4f9002304000a04f51108000100020100020800038005000000", 0x24) 18:56:10 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000000)=0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x20000000, 0x0) r4 = dup3(r1, r2, 0x80000) close(r4) r5 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x2000) shmdt(r5) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0x10000, 0x8, 0x1, 0x9461]}) r6 = semget(0x0, 0x4, 0xc) semctl$GETNCNT(r6, 0x1, 0xe, &(0x7f0000000340)=""/167) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') fcntl$getownex(r1, 0x10, &(0x7f0000000400)) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r7, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x37}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4840) write$P9_RFSYNC(r0, &(0x7f0000000440)={0x7, 0x33, 0x1}, 0x7) 18:56:10 executing program 5: r0 = socket$inet(0x2, 0x7, 0x5ee2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x2, 0x2) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:10 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x25}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/116, 0x74}], 0x1) mmap(&(0x7f000030e000/0x3000)=nil, 0x3000, 0x3000004, 0x31, 0xffffffffffffffff, 0x0) fcntl$setsig(r0, 0xa, 0x3d) tkill(r1, 0x1000000000016) 18:56:10 executing program 1 (fault-call:7 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:10 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:10 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cp{A\x16\xe7\xa1$\xdc(\x00\x00\x00\x00}D\x93\xbeKW\bmain_level\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x9) 18:56:10 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x111000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:10 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x2302) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0xa) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000300)=0xe8) sendto$packet(r1, &(0x7f0000000100)="92681cc6536030a38bc26f6f61eb6e6ca623c484e2cbcf2bec319115106d8f5724c0b9c160ad98954dfa81ee4276fd04405145449b3e6de1584e3425683ca9a2fe269cdf3277fb8307bd39b84bca6baf6a22272c4e8b515b8881ae4a48ac1cee68c5ab91226fc8a4cbea8ecb6a3a152f73356e299753c58798287a1949f9c3dc42de8ffcf04f4350c02d27c72c8b5a0b710cd03a9e4002e6c13d8d6987ecca63fd06ba256cc72ba8bc62e71e9651495109531d7740a75a424bd70b4c1b0343e29fcf5a0631ebab3718071a64c822fdd2e87755fd9682972e988a3915d994b6473c73a664", 0xe4, 0x20000000, &(0x7f0000000340)={0x11, 0x15, r2, 0x1, 0x7, 0x6, @dev={[], 0x1a}}, 0x14) 18:56:10 executing program 4: syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0xfda6, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) [ 165.691252] FAULT_INJECTION: forcing a failure. [ 165.691252] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 165.740895] CPU: 1 PID: 9271 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 165.747983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.757444] Call Trace: [ 165.760059] dump_stack+0x138/0x19c [ 165.763712] should_fail.cold+0x10f/0x159 [ 165.765227] binder: 9282:9285 unknown command 0 [ 165.767981] ? __might_sleep+0x93/0xb0 [ 165.767996] __alloc_pages_nodemask+0x1d6/0x7a0 [ 165.768010] ? __alloc_pages_slowpath+0x2930/0x2930 18:56:11 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/30}) [ 165.783802] binder: 9282:9285 ioctl c0306201 20008fd0 returned -22 [ 165.786436] ? __alloc_skb+0x3ee/0x500 [ 165.786453] alloc_pages_current+0xec/0x1e0 [ 165.801197] alloc_skb_with_frags+0x179/0x4b0 [ 165.805723] ? __might_fault+0x110/0x1d0 [ 165.809802] sock_alloc_send_pskb+0x5db/0x740 [ 165.814413] ? iov_iter_advance+0x218/0xc60 [ 165.818745] ? sock_wmalloc+0xf0/0xf0 [ 165.818764] ? _copy_from_iter_full+0x1c6/0x6c0 [ 165.824830] binder: 9282:9287 unknown command 0 [ 165.827316] packet_sendmsg+0x151a/0x5920 [ 165.827332] ? avc_has_perm_noaudit+0x420/0x420 [ 165.836229] ? trace_hardirqs_on+0x10/0x10 [ 165.836241] ? save_trace+0x290/0x290 [ 165.843616] binder: 9282:9287 ioctl c0306201 20008fd0 returned -22 [ 165.845137] ? packet_notifier+0x760/0x760 [ 165.845157] ? selinux_socket_sendmsg+0x36/0x40 [ 165.864517] ? security_socket_sendmsg+0x89/0xb0 [ 165.869301] ? packet_notifier+0x760/0x760 [ 165.875100] sock_sendmsg+0xce/0x110 [ 165.878838] sock_write_iter+0x21d/0x390 [ 165.883008] ? sock_sendmsg+0x110/0x110 [ 165.887031] ? iov_iter_init+0xaf/0x1d0 [ 165.891376] __vfs_write+0x4a7/0x6b0 [ 165.895109] ? selinux_file_open+0x420/0x420 [ 165.899543] ? kernel_read+0x120/0x120 [ 165.903462] ? rw_verify_area+0xea/0x2b0 [ 165.907644] vfs_write+0x198/0x500 [ 165.911205] SyS_write+0xb8/0x180 [ 165.914678] ? SyS_read+0x180/0x180 [ 165.918318] ? do_syscall_64+0x53/0x640 [ 165.922306] ? SyS_read+0x180/0x180 [ 165.925945] do_syscall_64+0x1e8/0x640 [ 165.929840] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 165.934707] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 165.939899] RIP: 0033:0x459279 [ 165.943088] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.943098] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 165.943102] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 165.943107] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 165.943111] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 18:56:11 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xa2, 0x8000) ioctl$KDMKTONE(r1, 0x4b30, 0x5) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000580)="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", 0x1000, 0x4000, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:11 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20\x00', 0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000380)={0xb, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x3, 0xffffffffffffffff, 0x9, 0x1, 0x10000, 0x4, "822827"}, 0x11b) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) fchown(r1, r3, r4) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 18:56:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x8004) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x57290300, 0x0, 0x0, 0x0, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc80006000025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd0160ec941a3de45387daf7b1ac786d0e8a75e8904655faf6f2bc6cc487d93a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffffffffffff4116893616105829576914e70bfeb59800f97c97644ab8a7"}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x3, 0xffffffffffffff9c}) r1 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x6, 0x104) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x3, 0x0, @ioapic={0x3000, 0x1, 0x9, 0x3f, 0x0, [{0x56, 0x8, 0x3279be70, [], 0x10001}, {0x58f4, 0x2, 0x80000000, [], 0x9}, {0xfffffffffffffffe, 0x1ff, 0x3aa7, [], 0x9}, {0x46f5, 0x6, 0x1f, [], 0x53}, {0x7, 0x0, 0x2, [], 0x421c}, {0x1, 0x1, 0x2, [], 0x3b08}, {0x0, 0x8000, 0x7e, [], 0x5}, {0x2e2b, 0x8, 0x1, [], 0xffffffff}, {0x6, 0x7, 0x10000, [], 0x9}, {0x3, 0x7, 0x9, [], 0x96a}, {0x2, 0xb960, 0x6, [], 0x2}, {0x0, 0x42e, 0x5, [], 0x5}, {0x8000, 0x5, 0x9, [], 0x5}, {0x8, 0xffffffffffffffff, 0x5, [], 0x4}, {0xd951, 0x9, 0x7f, [], 0x1}, {0x6f, 0x9, 0x0, [], 0x20}, {0x8, 0x1, 0x100000000, [], 0x7}, {0x9, 0x4, 0x0, [], 0x400}, {0x10000000000, 0xeb, 0x800, [], 0x1}, {0x100, 0x5, 0x2, [], 0x1}, {0x81, 0x5, 0x853, [], 0xff}, {0x4, 0x9, 0x8, [], 0x100000001}, {0x100000000, 0x8, 0xd40c, [], 0xd}, {0x2, 0x3, 0xfffffffffffffffb, [], 0x7}]}}) readahead(r0, 0x8, 0x7c000) 18:56:11 executing program 0: r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) shutdown(r0, 0x1) 18:56:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xfffffffffffbffc2, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000001c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xffffffffffffffd1, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x400, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x1ff, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x8040) epoll_pwait(r1, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000280)={0x1}, 0x8) [ 165.943116] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:11 executing program 1 (fault-call:7 fault-nth:4): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:11 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dc030000000000000070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x111000) r3 = getpgrp(0xffffffffffffffff) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f00000001c0)=0xff, 0x4) sched_setscheduler(r3, 0x5, &(0x7f0000000180)=0x2) getsockname$unix(r2, &(0x7f0000000080), &(0x7f0000000100)=0x6e) 18:56:11 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r0 = socket(0x15, 0x805, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x408, 0x0, 0x158, 0x0, 0x0, 0x158, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000240), {[{{@ip={@empty, @empty, 0xffffffff, 0xff0000ff, 'irlan0\x00', 'bcsf0\x00', {0xff}, {}, 0x2d, 0x1, 0x8}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@tcp={0x30, 'tcp\x00', 0x0, {0x80000000, 0x4e24, 0x4e24, 0x4e24, 0x0, 0xe, 0x10, 0x5}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x41, 0x80, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x9c, 0x7, [0x6, 0x29, 0xe, 0x17, 0x2e, 0x5, 0x30, 0x16, 0x3f, 0x39, 0x23, 0x2d, 0x1e, 0x13, 0x3d, 0x27], 0x2, 0x1d, 0xfff}}}, {{@uncond, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@physdev={0x98, 'physdev\x00', 0x0, {'gretap0\x00', {0xff}, 'bcsf0\x00', {0xff}, 0x4, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) getpeername$llc(r0, 0x0, 0x0) connect(r0, &(0x7f0000000040)=@nfc={0x27, 0x0, 0x1, 0x6}, 0x80) [ 166.057893] FAULT_INJECTION: forcing a failure. [ 166.057893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 166.081863] CPU: 0 PID: 9307 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 166.088945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.098838] Call Trace: [ 166.101591] dump_stack+0x138/0x19c [ 166.105251] should_fail.cold+0x10f/0x159 [ 166.109415] ? __might_sleep+0x93/0xb0 [ 166.113416] __alloc_pages_nodemask+0x1d6/0x7a0 [ 166.118207] ? __alloc_pages_slowpath+0x2930/0x2930 [ 166.123260] ? __alloc_skb+0x3ee/0x500 [ 166.127170] alloc_pages_current+0xec/0x1e0 [ 166.131513] alloc_skb_with_frags+0x179/0x4b0 [ 166.136030] ? __might_fault+0x110/0x1d0 [ 166.140113] sock_alloc_send_pskb+0x5db/0x740 [ 166.144641] ? iov_iter_advance+0x218/0xc60 [ 166.148983] ? sock_wmalloc+0xf0/0xf0 [ 166.152802] ? _copy_from_iter_full+0x1c6/0x6c0 [ 166.157495] packet_sendmsg+0x151a/0x5920 [ 166.161652] ? avc_has_perm_noaudit+0x420/0x420 [ 166.161671] ? trace_hardirqs_on+0x10/0x10 [ 166.161682] ? save_trace+0x290/0x290 [ 166.161700] ? packet_notifier+0x760/0x760 [ 166.161717] ? selinux_socket_sendmsg+0x36/0x40 [ 166.161725] ? security_socket_sendmsg+0x89/0xb0 [ 166.161733] ? packet_notifier+0x760/0x760 [ 166.161743] sock_sendmsg+0xce/0x110 [ 166.161753] sock_write_iter+0x21d/0x390 [ 166.161764] ? sock_sendmsg+0x110/0x110 [ 166.161781] ? iov_iter_init+0xaf/0x1d0 18:56:11 executing program 4: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000040), 0x4) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400002, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000c}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="8fa0b6e2161554647f6aa8f87389e63e30b410b9ad7b263a32e36d960c6f0e1b0ccaf6b09b7a970bdf1658b53ba652ef711ee94ad6dadbe055c71b3b0ec29d4b6ed81ccd35d7d2a8375ad40c5eb41f8e74e3b72f1a154b0526742d2b", @ANYRES16=r1, @ANYBLOB="000128bd7000fcdbdf250700000010000600040002000800010000010000240009000800020000000100080001000600000008000100090000000800010008000000240009000800020005000000080001000100000008000100000000000800010081000000100004000c00010073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x40040) 18:56:11 executing program 3: lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x7ff, 0xa, &(0x7f0000000680)=[{&(0x7f0000000180)="bc48f0d1a8b3c2fc4f221237362a72c9b11f480d91172285af2da7feee", 0x1d, 0x4}, {&(0x7f00000001c0)="02b90383db55caefd3f026051c87dc76265ec235f6819a76e412f39fad22e9da758e9ea416dba99e3392c99b4409959c3bb295dc533e9b062ae4144d48b71e8b80ac92566be180c4e8f1d49a259d8ea40db8c231ed9f1b3da3452a5a3c527828ea055691596fc06152325c3bd85648ec289bafdb90bbf7c1b0cc973ab8f93f7d68b347d8e439e952", 0x88}, {&(0x7f0000001040)="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", 0x1000, 0xfffffffffffffffd}, {&(0x7f0000000280)="0b1d4e2805", 0x5, 0x498c}, {&(0x7f00000002c0)="c76aa8d2b3b6b17c55ab7889d8885b7872e8be27f4e8c7e0bc3eadebbfd2773f3dddf32a06ea545ccdb9f1215a670a5dce4434bdd3e88cb0839d686802157526dc1d987a8d2318a996eb39fb99d8828c3bbd7e9dd4e746993619327870ebd6e5219d1998036cdf29139005cdfc1202af2625a1cd3c5b92bff4e4246f10874d9a335064457b3c04b90e04bc049b18732bd12bbbc20e323a", 0x97, 0xfffffffffffffffd}, {&(0x7f0000000380)="09d45fb7bb449e24fd18b5fb42213ce1a8be0873bd30816958d412be45cc3c5903", 0x21, 0x40}, {&(0x7f00000003c0)="76bd7017f7d339f568020f18e9b8808beb9da81b144a2968930669df17ba71a3861b33a89f93ffacaf0f4b11f0328fa45fc773045f2eacb514300987e136824c0e", 0x41, 0x6}, {&(0x7f0000000440)="0a622dbe8d7cdfddce5c5e42d87686b8cf4be5dea34fb20f4bd06b9a369855e8238f1948818b0771241afa7a1a017bf7bc78526e87d71916b52de8e02f74b771b074b3499dd8c0fd99fb04412ecc4bf6a11dba30c9a7100fcbe6341b5963871258cc628cea1fb1c88a459c97550bba9fe62cf660e01c4f7db67c04282bc5727ed9db8b0061bd905ae3cf8a61ceea2322be25359869a227ecda0137d74cbc91888488d10ff6e09a80f53f4e3323e156e36af4ffa2870b03e8e1f5e3865a4e7b9a410bcc2fb9c6efdfd539f1e0322fa336284b7060c2", 0xd5, 0xd107}, {&(0x7f0000000540)="32a62737e3cd6d0883379abc1d4d0bc3dedf92287a5b38de60b24597f81408c94b6a763244cd34c130337c9517f900f3e26093b5cdecabf06a6c0911a015a580e605bfdc58e7b767a242857767b26b33dd5e472ccf5da760c73f875464200c9845e47e9342ec8a90580dcd7094c73c221a832769fa192d6c7622d48c9da73e33b4c812a3f8a9634fbcb6a6079398a1640683d24de147ec6ab9aca004a1b3d9ff", 0xa0, 0x2ce}, {&(0x7f0000000600)="199d52a290175368af180b547b93de6863e35b25e0a15cfa1dde02d8401f527122ae32de2ea21d8c3eef20f42b86c33c6135d3077c8538315b3446ffe70d51066bd4f482ccff8786083473d4f49bd9d509535e00cef1ea5aa29b5fc2ac1f0fe45bbb617d4e57edebc55be1e62303c659d69dc60b13379c101491d22f4a9c", 0x7e, 0x40}], 0x220000, &(0x7f0000000840)={[{@hash_rupasov='hash=rupasov'}, {@data_writeback='data=writeback'}, {@noquota='noquota'}, {@resize_auto='resize=auto'}, {@data_journal='data=journal'}, {@noacl='noacl'}, {@replayonly='replayonly'}], [{@euid_eq={'euid', 0x3d, r0}}, {@permit_directio='permit_directio'}]}) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f0000000080)=0x1) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 18:56:11 executing program 4: keyctl$invalidate(0x15, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000011c0)=0x6, 0x7, 0x1) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="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", 0x1000, 0xfffffffffffffffa) r1 = syz_open_dev$dspn(&(0x7f0000001080)='/dev/dsp#\x00', 0xfffffffffffffff8, 0x20000) keyctl$invalidate(0x15, r0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000001100)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000001200)={0x2, 0x0, @ioapic={0x100000, 0x1, 0x9, 0x7f, 0x0, [{0x0, 0x101, 0x4, [], 0x1f}, {0x1f, 0x0, 0x6, [], 0x8}, {0x3, 0x0, 0x9, [], 0x4}, {0x8, 0xfffffffffffffff9, 0x0, [], 0xfffffffffffffffc}, {0x0, 0x0, 0x12, [], 0x2}, {0xfffffffffffffffa, 0xff, 0xada, [], 0x9}, {0x8, 0x2, 0x100, [], 0xc8}, {0xc8, 0x0, 0x5cb9, [], 0x7}, {0x3ff, 0x6f71, 0x994, [], 0x2e640878}, {0xa9, 0x9, 0x9, [], 0x7f}, {0x439aff35, 0x6, 0x401, [], 0x2}, {0x4, 0x344, 0x3ff, [], 0x3}, {0x8001, 0x80000000, 0x3, [], 0x6}, {0x7, 0x9, 0x7, [], 0xff}, {0x5, 0x1, 0x8, [], 0x9}, {0x6, 0xffffffffffffffff, 0x80, [], 0x8}, {0x7, 0x2, 0x0, [], 0x8}, {0x0, 0x0, 0xfffffffffffffb5b, [], 0x8}, {0x9, 0x3ff, 0xffffffffffffaf97, [], 0x1000}, {0x0, 0x5d7a, 0x0, [], 0x629}, {0x1f, 0x8, 0x3ff, [], 0x8}, {0xffffffffffffff80, 0x1, 0x9, [], 0x9}, {0x8, 0x3f, 0xfffffffffffffffd, [], 0x2}, {0x7f, 0x3, 0x7, [], 0x101}]}}) 18:56:11 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="ed04edff2bdd3abf8fbc97b4304beac1b515f0122e4b56391fcc01b4e747af3c0540f7269b9c29c4f89dde8412f5ee5f946b3e217074fe1d25db4db4e983c1f687410081a15151f54c8659a709de86ffeab2f05b3ede54abb89704af46260890e6b0a518f01900e56454842651337b547ce6d726661eef303177a6a14f7263c35178a3d61befd2f0c29c3a483b0abc248918f9420f703709ff2e0c44940ba85f6b9f2fd00848d9992033", 0xaa}, {&(0x7f0000000300)="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"}, {&(0x7f00000001c0)="af9de03c5697e3f3ef17aa9ed385b5fc3696640b807469c74b413bda6fd829", 0x1f}], 0x10000000000001b1, 0x4) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x0, 0x0, 0x10000101) [ 166.161792] __vfs_write+0x4a7/0x6b0 [ 166.161806] ? selinux_file_open+0x420/0x420 [ 166.174510] ? kernel_read+0x120/0x120 [ 166.174531] ? rw_verify_area+0xea/0x2b0 [ 166.174541] vfs_write+0x198/0x500 [ 166.174555] SyS_write+0xb8/0x180 [ 166.174563] ? SyS_read+0x180/0x180 [ 166.174576] ? do_syscall_64+0x53/0x640 [ 166.239748] ? SyS_read+0x180/0x180 [ 166.243562] do_syscall_64+0x1e8/0x640 [ 166.243572] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 166.243589] entry_SYSCALL_64_after_hwframe+0x42/0xb7 18:56:11 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@local, @dev, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000340)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000380)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000580)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000005c0)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000000600)=0x14) accept$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000006c0)={@remote, 0x0}, &(0x7f0000000700)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000840)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@loopback}}, &(0x7f0000000ac0)=0xe8) getpeername$packet(r1, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000c80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000cc0)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000dc0)=0xe8) getsockname(r0, &(0x7f0000000e00)=@can={0x1d, 0x0}, &(0x7f0000000e80)=0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f0000000ec0)={0x73c, r2, 0x316, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x84, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r4}, {0x12c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x1a4, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x240, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x1, 0x7fff, 0x20, 0x4}, {0xffffffffffffffff, 0x7, 0x101, 0x9}, {0x9, 0x7a, 0xfff}, {0x2, 0x40, 0x4c148169, 0x3}, {0x2, 0x0, 0xfffffffffffffff9, 0x2}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x4, 0x3ff, 0x1f, 0x7}, {0x8c0e, 0x1, 0xc000, 0x1000}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x7f, 0x10001, 0x3, 0x8000}, {0x6, 0x8, 0xd934, 0x8}, {0x100000000, 0x6, 0x9, 0x13c8}, {0x800, 0x1ff, 0x100, 0x8}, {0x1, 0x9, 0x0, 0x5}, {0x4, 0x3, 0x5, 0xf}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x16c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x4, 0x7, 0x101}, {0xfffffffffffffff9, 0x2, 0x3, 0xffff}, {0x0, 0x9207, 0x6, 0x6}, {0x3ff, 0x7ff, 0x7fff, 0x4}, {0x1000, 0x622e, 0x80000000, 0x101}, {0x10001, 0x6, 0x4, 0x2}, {0x4, 0x8, 0x0, 0xfffffffffffffff7}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r17}}, {0x8}}}]}}]}, 0x73c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f000003d000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000034000/0x18000)=nil, 0x0, 0x0, 0x40044, 0x0, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$KVM_RUN(r2, 0xae80, 0x0) init_module(&(0x7f0000000000)='em0eth1,GPL\x00', 0xc, &(0x7f0000000040)='nodev\x00') 18:56:11 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) write$FUSE_ATTR(r0, 0x0, 0x0) [ 166.252399] RIP: 0033:0x459279 [ 166.252405] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 166.252417] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 166.252422] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 166.252427] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 166.252431] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 166.252435] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:12 executing program 0: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@local, @dev, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000340)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000380)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000580)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000005c0)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000000600)=0x14) accept$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000006c0)={@remote, 0x0}, &(0x7f0000000700)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000840)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@loopback}}, &(0x7f0000000ac0)=0xe8) getpeername$packet(r1, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000c80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000cc0)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000dc0)=0xe8) getsockname(r0, &(0x7f0000000e00)=@can={0x1d, 0x0}, &(0x7f0000000e80)=0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f0000000ec0)={0x73c, r2, 0x316, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x84, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r4}, {0x12c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x1a4, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x240, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x1, 0x7fff, 0x20, 0x4}, {0xffffffffffffffff, 0x7, 0x101, 0x9}, {0x9, 0x7a, 0xfff}, {0x2, 0x40, 0x4c148169, 0x3}, {0x2, 0x0, 0xfffffffffffffff9, 0x2}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x4, 0x3ff, 0x1f, 0x7}, {0x8c0e, 0x1, 0xc000, 0x1000}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x7f, 0x10001, 0x3, 0x8000}, {0x6, 0x8, 0xd934, 0x8}, {0x100000000, 0x6, 0x9, 0x13c8}, {0x800, 0x1ff, 0x100, 0x8}, {0x1, 0x9, 0x0, 0x5}, {0x4, 0x3, 0x5, 0xf}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x16c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x4, 0x7, 0x101}, {0xfffffffffffffff9, 0x2, 0x3, 0xffff}, {0x0, 0x9207, 0x6, 0x6}, {0x3ff, 0x7ff, 0x7fff, 0x4}, {0x1000, 0x622e, 0x80000000, 0x101}, {0x10001, 0x6, 0x4, 0x2}, {0x4, 0x8, 0x0, 0xfffffffffffffff7}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r17}}, {0x8}}}]}}]}, 0x73c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:12 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") r2 = dup2(r0, r1) r3 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmdt(r3) connect$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x1f}, 0x7f}}, 0x24) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x2400) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000100)={0x8, 0x8, [0x1001, 0x7fffffff, 0x8, 0x1, 0x401], 0x7}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc000, 0x3, &(0x7f0000ff4000/0xc000)=nil) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000180)={0x2b, 0x3}) syncfs(r0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x0, 0x2, 0x1, r2}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) 18:56:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000440)="0f20e06635040000000f22e0d8e56c66b9800000c00f326635000800000f300f013f0f01bb03000fc76e000f090ffe5600baf80c66b85f2fe18f66efbafc0cb007ee", 0x42}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x1, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000040)) 18:56:12 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@local, @dev, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000340)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000380)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000580)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000005c0)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000000600)=0x14) accept$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000006c0)={@remote, 0x0}, &(0x7f0000000700)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000840)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@loopback}}, &(0x7f0000000ac0)=0xe8) getpeername$packet(r1, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000c80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000cc0)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000dc0)=0xe8) getsockname(r0, &(0x7f0000000e00)=@can={0x1d, 0x0}, &(0x7f0000000e80)=0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f0000000ec0)={0x73c, r2, 0x316, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x84, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r4}, {0x12c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x1a4, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x240, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x1, 0x7fff, 0x20, 0x4}, {0xffffffffffffffff, 0x7, 0x101, 0x9}, {0x9, 0x7a, 0xfff}, {0x2, 0x40, 0x4c148169, 0x3}, {0x2, 0x0, 0xfffffffffffffff9, 0x2}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x4, 0x3ff, 0x1f, 0x7}, {0x8c0e, 0x1, 0xc000, 0x1000}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x7f, 0x10001, 0x3, 0x8000}, {0x6, 0x8, 0xd934, 0x8}, {0x100000000, 0x6, 0x9, 0x13c8}, {0x800, 0x1ff, 0x100, 0x8}, {0x1, 0x9, 0x0, 0x5}, {0x4, 0x3, 0x5, 0xf}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x16c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x4, 0x7, 0x101}, {0xfffffffffffffff9, 0x2, 0x3, 0xffff}, {0x0, 0x9207, 0x6, 0x6}, {0x3ff, 0x7ff, 0x7fff, 0x4}, {0x1000, 0x622e, 0x80000000, 0x101}, {0x10001, 0x6, 0x4, 0x2}, {0x4, 0x8, 0x0, 0xfffffffffffffff7}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r17}}, {0x8}}}]}}]}, 0x73c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:12 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) msgget$private(0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:12 executing program 1 (fault-call:7 fault-nth:5): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 166.917814] FAULT_INJECTION: forcing a failure. [ 166.917814] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 166.957457] CPU: 1 PID: 9367 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 166.964703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.974186] Call Trace: [ 166.976787] dump_stack+0x138/0x19c [ 166.980446] should_fail.cold+0x10f/0x159 [ 166.984620] ? __might_sleep+0x93/0xb0 [ 166.988501] __alloc_pages_nodemask+0x1d6/0x7a0 [ 166.993160] ? __alloc_pages_slowpath+0x2930/0x2930 [ 166.998172] ? __alloc_skb+0x3ee/0x500 [ 167.002499] alloc_pages_current+0xec/0x1e0 [ 167.006857] alloc_skb_with_frags+0x179/0x4b0 [ 167.012298] ? __might_fault+0x110/0x1d0 [ 167.016382] sock_alloc_send_pskb+0x5db/0x740 [ 167.021575] ? iov_iter_advance+0x218/0xc60 [ 167.027220] ? sock_wmalloc+0xf0/0xf0 [ 167.031536] ? _copy_from_iter_full+0x1c6/0x6c0 [ 167.036475] packet_sendmsg+0x151a/0x5920 [ 167.040673] ? avc_has_perm_noaudit+0x420/0x420 [ 167.045558] ? trace_hardirqs_on+0x10/0x10 [ 167.050047] ? save_trace+0x290/0x290 [ 167.053889] ? packet_notifier+0x760/0x760 [ 167.058766] ? selinux_socket_sendmsg+0x36/0x40 [ 167.063426] ? security_socket_sendmsg+0x89/0xb0 [ 167.068871] ? packet_notifier+0x760/0x760 [ 167.073101] sock_sendmsg+0xce/0x110 [ 167.076806] sock_write_iter+0x21d/0x390 [ 167.080859] ? sock_sendmsg+0x110/0x110 [ 167.085017] ? iov_iter_init+0xaf/0x1d0 [ 167.089021] __vfs_write+0x4a7/0x6b0 [ 167.093078] ? selinux_file_open+0x420/0x420 [ 167.097478] ? kernel_read+0x120/0x120 [ 167.101376] ? rw_verify_area+0xea/0x2b0 [ 167.105432] vfs_write+0x198/0x500 [ 167.109056] SyS_write+0xb8/0x180 [ 167.112541] ? SyS_read+0x180/0x180 [ 167.116535] ? do_syscall_64+0x53/0x640 [ 167.120642] ? SyS_read+0x180/0x180 [ 167.124265] do_syscall_64+0x1e8/0x640 [ 167.128274] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 167.133118] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 167.138337] RIP: 0033:0x459279 [ 167.141526] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.149239] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 167.156623] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 18:56:12 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000080)=0x9, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 167.164197] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 167.171807] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 167.179085] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:12 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={'veth0_to_team\x00', 0xa2e2, 0x1a}) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000080)={0x1, 0xfffffffffffffffd, 0x6, 0xfffffffffffffffb}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffffffffff8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="d096887a3f04e1b1f58174a24b6128a2"}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd57}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000890) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e10000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd00000009000100050c0c00fcff0000040e05a5", 0x58}], 0x1) readahead(r0, 0x1ff, 0x5) 18:56:12 executing program 1 (fault-call:7 fault-nth:6): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:12 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000080)={0x0, 0xfff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r3, @in={{0x2, 0x4e20, @broadcast}}, 0x8, 0x5, 0x87, 0x7ff, 0x44}, 0x98) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:12 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7ff) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000400)=""/148, 0xfffffeba}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000269, 0x0) 18:56:12 executing program 5: openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000007fff7, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000000)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000140)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e20, 0xff, @local, 0x9}}, 0xfffffffffffffffd, 0x1fffffffffc, 0x0, 0x0, 0x4d}, 0x98) [ 167.344644] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pig=9389 comm=syz-executor.0 [ 167.363812] FAULT_INJECTION: forcing a failure. [ 167.363812] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 167.405099] CPU: 1 PID: 9393 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 167.412352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.422335] Call Trace: [ 167.424944] dump_stack+0x138/0x19c [ 167.428596] should_fail.cold+0x10f/0x159 [ 167.432937] ? __might_sleep+0x93/0xb0 [ 167.436848] __alloc_pages_nodemask+0x1d6/0x7a0 [ 167.441538] ? __alloc_pages_slowpath+0x2930/0x2930 [ 167.446584] ? __alloc_skb+0x3ee/0x500 [ 167.450497] alloc_pages_current+0xec/0x1e0 18:56:12 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x280041, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r2, 0x80000, r3}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 167.454939] alloc_skb_with_frags+0x179/0x4b0 [ 167.459537] ? __might_fault+0x110/0x1d0 [ 167.463715] sock_alloc_send_pskb+0x5db/0x740 [ 167.468226] ? iov_iter_advance+0x218/0xc60 [ 167.472637] ? sock_wmalloc+0xf0/0xf0 [ 167.472647] ? _copy_from_iter_full+0x1c6/0x6c0 [ 167.472662] packet_sendmsg+0x151a/0x5920 [ 167.472672] ? avc_has_perm_noaudit+0x420/0x420 [ 167.472685] ? trace_hardirqs_on+0x10/0x10 [ 167.472695] ? save_trace+0x290/0x290 [ 167.472711] ? packet_notifier+0x760/0x760 [ 167.472730] ? selinux_socket_sendmsg+0x36/0x40 [ 167.472739] ? security_socket_sendmsg+0x89/0xb0 [ 167.472748] ? packet_notifier+0x760/0x760 [ 167.516843] sock_sendmsg+0xce/0x110 [ 167.520686] sock_write_iter+0x21d/0x390 [ 167.524793] ? sock_sendmsg+0x110/0x110 [ 167.528795] ? iov_iter_init+0xaf/0x1d0 [ 167.532797] __vfs_write+0x4a7/0x6b0 [ 167.536644] ? selinux_file_open+0x420/0x420 [ 167.541075] ? kernel_read+0x120/0x120 [ 167.546035] ? rw_verify_area+0xea/0x2b0 [ 167.550207] vfs_write+0x198/0x500 18:56:12 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) io_setup(0x1, &(0x7f0000000000)=0x0) io_destroy(r2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 167.553775] SyS_write+0xb8/0x180 [ 167.557517] ? SyS_read+0x180/0x180 [ 167.561941] ? do_syscall_64+0x53/0x640 [ 167.566021] ? SyS_read+0x180/0x180 [ 167.569666] do_syscall_64+0x1e8/0x640 [ 167.573688] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 167.578557] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 167.583848] RIP: 0033:0x459279 [ 167.587047] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.594911] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 18:56:12 executing program 2: keyctl$get_keyring_id(0x0, 0x0, 0x0) pipe(0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0xfffffffffffffff8}, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) shutdown(r3, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x2) sendto$inet6(r4, &(0x7f00000000c0), 0x93bce242, 0x1, 0x0, 0xfe57) [ 167.594917] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 167.594922] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 167.594927] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 167.594935] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 [ 167.644372] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pig=9410 comm=syz-executor.0 18:56:12 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@local, @dev, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000340)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000380)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000580)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000005c0)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000000600)=0x14) accept$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000006c0)={@remote, 0x0}, &(0x7f0000000700)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000840)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@loopback}}, &(0x7f0000000ac0)=0xe8) getpeername$packet(r1, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000c80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000cc0)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000dc0)=0xe8) getsockname(r0, &(0x7f0000000e00)=@can={0x1d, 0x0}, &(0x7f0000000e80)=0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f0000000ec0)={0x73c, r2, 0x316, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x84, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r4}, {0x12c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x1a4, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x240, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x1, 0x7fff, 0x20, 0x4}, {0xffffffffffffffff, 0x7, 0x101, 0x9}, {0x9, 0x7a, 0xfff}, {0x2, 0x40, 0x4c148169, 0x3}, {0x2, 0x0, 0xfffffffffffffff9, 0x2}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x4, 0x3ff, 0x1f, 0x7}, {0x8c0e, 0x1, 0xc000, 0x1000}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x7f, 0x10001, 0x3, 0x8000}, {0x6, 0x8, 0xd934, 0x8}, {0x100000000, 0x6, 0x9, 0x13c8}, {0x800, 0x1ff, 0x100, 0x8}, {0x1, 0x9, 0x0, 0x5}, {0x4, 0x3, 0x5, 0xf}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x16c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x4, 0x7, 0x101}, {0xfffffffffffffff9, 0x2, 0x3, 0xffff}, {0x0, 0x9207, 0x6, 0x6}, {0x3ff, 0x7ff, 0x7fff, 0x4}, {0x1000, 0x622e, 0x80000000, 0x101}, {0x10001, 0x6, 0x4, 0x2}, {0x4, 0x8, 0x0, 0xfffffffffffffff7}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r17}}, {0x8}}}]}}]}, 0x73c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:12 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000200)) sendto$unix(r2, &(0x7f0000000080)="e555841aabd99be2ed2d46bb1211fb2618df1a7017b00e5476f929e19e7ce1a136c6f23026d75df7aaaafcebe5eb8e6b86212b73765c8f5852cd2c17efdc66", 0x3f, 0x20008084, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000180)={{0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, 0x7}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:12 executing program 1 (fault-call:7 fault-nth:7): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000000100)) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x800) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000040)={0xfffffffffffffffb, 0x28, 0xfffffffffffffffb, 0x7}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) [ 167.778634] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) [ 167.779065] FAULT_INJECTION: forcing a failure. [ 167.779065] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 167.816075] CPU: 0 PID: 9423 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 167.823231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.832596] Call Trace: [ 167.832615] dump_stack+0x138/0x19c [ 167.832632] should_fail.cold+0x10f/0x159 [ 167.832646] ? __might_sleep+0x93/0xb0 [ 167.838903] __alloc_pages_nodemask+0x1d6/0x7a0 [ 167.838916] ? __alloc_pages_slowpath+0x2930/0x2930 [ 167.838932] ? __alloc_skb+0x3ee/0x500 [ 167.838945] alloc_pages_current+0xec/0x1e0 [ 167.865497] alloc_skb_with_frags+0x179/0x4b0 [ 167.870020] ? __might_fault+0x110/0x1d0 18:56:13 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x4e20, @local}}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x5, 0x10d9491, 0x647, 0xffffffffffffeb36, 0x0, 0x82, 0x40400, 0xe, 0x74d, 0x5, 0x2, 0x9, 0x20, 0x1f, 0x0, 0x7fffffff, 0x7, 0x9, 0x70, 0x8, 0x4, 0x1, 0x2, 0x401, 0x9, 0x101, 0x0, 0x1, 0x7, 0x5, 0x0, 0x7, 0x400, 0x0, 0xff62, 0x1, 0x0, 0x310d66ed, 0x0, @perf_config_ext={0x7f, 0x880a}, 0x8, 0x9, 0x6, 0x3, 0x7f, 0x6c2, 0x2}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) [ 167.875585] sock_alloc_send_pskb+0x5db/0x740 [ 167.880110] ? iov_iter_advance+0x218/0xc60 [ 167.884499] ? sock_wmalloc+0xf0/0xf0 [ 167.888599] ? _copy_from_iter_full+0x1c6/0x6c0 [ 167.893295] packet_sendmsg+0x151a/0x5920 [ 167.897648] ? avc_has_perm_noaudit+0x420/0x420 [ 167.903599] ? trace_hardirqs_on+0x10/0x10 [ 167.907951] ? save_trace+0x290/0x290 [ 167.912406] ? packet_notifier+0x760/0x760 [ 167.916676] ? selinux_socket_sendmsg+0x36/0x40 [ 167.921380] ? security_socket_sendmsg+0x89/0xb0 18:56:13 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e23, @broadcast}}, 0x2, 0x7}, &(0x7f0000000180)=0x90) 18:56:13 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000200)={0x2, {{0xa, 0x4e21, 0x4, @remote, 0x5}}, {{0xa, 0x4e21, 0x3, @mcast1, 0x1}}}, 0x108) [ 167.926458] ? packet_notifier+0x760/0x760 [ 167.932995] sock_sendmsg+0xce/0x110 [ 167.933007] sock_write_iter+0x21d/0x390 [ 167.933016] ? sock_sendmsg+0x110/0x110 [ 167.933033] ? iov_iter_init+0xaf/0x1d0 [ 167.933045] __vfs_write+0x4a7/0x6b0 [ 167.933056] ? selinux_file_open+0x420/0x420 [ 167.941043] ? kernel_read+0x120/0x120 [ 167.973293] ? rw_verify_area+0xea/0x2b0 [ 167.977539] vfs_write+0x198/0x500 [ 167.981105] SyS_write+0xb8/0x180 [ 167.984580] ? SyS_read+0x180/0x180 [ 167.988422] ? do_syscall_64+0x53/0x640 [ 167.992508] ? SyS_read+0x180/0x180 [ 167.996168] do_syscall_64+0x1e8/0x640 [ 168.000430] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 168.005960] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 168.011168] RIP: 0033:0x459279 [ 168.014374] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.022780] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 18:56:13 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:13 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") geteuid() lstat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000340)='/dev/snd/timer\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x80000, &(0x7f0000000380)={'trans=xen,', {[{@access_any='access=any'}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, '@'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@seclabel='seclabel'}, {@context={'context', 0x3d, 'system_u'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@hash='hash'}, {@obj_role={'obj_role', 0x3d, 'posix_acl_access/vboxnet0'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}]}}) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:13 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x4603000000000000]}}}}, 0x108) fdatasync(r0) r2 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) write$FUSE_DIRENT(r2, &(0x7f0000000280)={0x38, 0x0, 0x2, [{0x1, 0x2, 0xe, 0x2, 'keyring!md5sum'}]}, 0x38) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x2, 0x2000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x100, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0xfffffffffffffffd, @remote, 0x1}, 0x1c) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)=0xc1, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x20a, 0x6000000) [ 168.030417] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 168.037881] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 168.046915] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 168.054463] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:13 executing program 1 (fault-call:7 fault-nth:8): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 168.149746] FAULT_INJECTION: forcing a failure. [ 168.149746] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 168.171013] CPU: 1 PID: 9454 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 168.178170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.187813] Call Trace: [ 168.190516] dump_stack+0x138/0x19c [ 168.194178] should_fail.cold+0x10f/0x159 [ 168.198366] ? __might_sleep+0x93/0xb0 [ 168.202284] __alloc_pages_nodemask+0x1d6/0x7a0 [ 168.206971] ? __alloc_pages_slowpath+0x2930/0x2930 [ 168.206987] ? __alloc_skb+0x3ee/0x500 [ 168.207000] alloc_pages_current+0xec/0x1e0 [ 168.220745] alloc_skb_with_frags+0x179/0x4b0 [ 168.225256] ? __might_fault+0x110/0x1d0 [ 168.225274] sock_alloc_send_pskb+0x5db/0x740 [ 168.225290] ? iov_iter_advance+0x218/0xc60 [ 168.225304] ? sock_wmalloc+0xf0/0xf0 [ 168.242200] ? _copy_from_iter_full+0x1c6/0x6c0 [ 168.246892] packet_sendmsg+0x151a/0x5920 [ 168.251158] ? avc_has_perm_noaudit+0x420/0x420 [ 168.255847] ? trace_hardirqs_on+0x10/0x10 [ 168.260100] ? save_trace+0x290/0x290 [ 168.264501] ? packet_notifier+0x760/0x760 [ 168.268953] ? selinux_socket_sendmsg+0x36/0x40 [ 168.273666] ? security_socket_sendmsg+0x89/0xb0 [ 168.278452] ? packet_notifier+0x760/0x760 [ 168.282986] sock_sendmsg+0xce/0x110 [ 168.287450] sock_write_iter+0x21d/0x390 [ 168.291826] ? sock_sendmsg+0x110/0x110 [ 168.296015] ? iov_iter_init+0xaf/0x1d0 [ 168.300014] __vfs_write+0x4a7/0x6b0 [ 168.303740] ? selinux_file_open+0x420/0x420 [ 168.308259] ? kernel_read+0x120/0x120 [ 168.312287] ? rw_verify_area+0xea/0x2b0 [ 168.317333] vfs_write+0x198/0x500 [ 168.321018] SyS_write+0xb8/0x180 [ 168.324833] ? SyS_read+0x180/0x180 [ 168.328723] ? do_syscall_64+0x53/0x640 [ 168.332800] ? SyS_read+0x180/0x180 [ 168.336554] do_syscall_64+0x1e8/0x640 [ 168.340628] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 168.345480] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 168.350668] RIP: 0033:0x459279 [ 168.353854] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.361652] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 168.369188] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 168.376480] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 168.384018] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 168.391436] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:13 executing program 2: r0 = msgget(0x3, 0x10) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/61) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) 18:56:13 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@local, @dev, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000340)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000380)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000580)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000005c0)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000000600)=0x14) accept$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000006c0)={@remote, 0x0}, &(0x7f0000000700)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000840)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@loopback}}, &(0x7f0000000ac0)=0xe8) getpeername$packet(r1, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000c80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000cc0)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000dc0)=0xe8) getsockname(r0, &(0x7f0000000e00)=@can={0x1d, 0x0}, &(0x7f0000000e80)=0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f0000000ec0)={0x73c, r2, 0x316, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x84, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r4}, {0x12c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x1a4, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x240, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x1, 0x7fff, 0x20, 0x4}, {0xffffffffffffffff, 0x7, 0x101, 0x9}, {0x9, 0x7a, 0xfff}, {0x2, 0x40, 0x4c148169, 0x3}, {0x2, 0x0, 0xfffffffffffffff9, 0x2}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x4, 0x3ff, 0x1f, 0x7}, {0x8c0e, 0x1, 0xc000, 0x1000}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x7f, 0x10001, 0x3, 0x8000}, {0x6, 0x8, 0xd934, 0x8}, {0x100000000, 0x6, 0x9, 0x13c8}, {0x800, 0x1ff, 0x100, 0x8}, {0x1, 0x9, 0x0, 0x5}, {0x4, 0x3, 0x5, 0xf}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x16c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x4, 0x7, 0x101}, {0xfffffffffffffff9, 0x2, 0x3, 0xffff}, {0x0, 0x9207, 0x6, 0x6}, {0x3ff, 0x7ff, 0x7fff, 0x4}, {0x1000, 0x622e, 0x80000000, 0x101}, {0x10001, 0x6, 0x4, 0x2}, {0x4, 0x8, 0x0, 0xfffffffffffffff7}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r17}}, {0x8}}}]}}]}, 0x73c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:13 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x10001, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:13 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000180)=""/81) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f00000000c0)={0x10000, 0x3001, 0x1e, 0x1, 0x6}) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000100)={0x4, 0x0, 0x5, 0xff, 0x2}) chdir(&(0x7f0000000000)='./file0\x00') r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x28007d) 18:56:13 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x181000, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f00000000c0)) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) delete_module(&(0x7f0000000000)='/dev/snd/timer\x00', 0xa00) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 18:56:13 executing program 1 (fault-call:7 fault-nth:9): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:13 executing program 2: r0 = open(&(0x7f00000000c0)='.\x00', 0x400000, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0xbf0000, 0xa4c, 0x8000, [], &(0x7f0000000140)={0x9e0905, 0x3, [], @value=0x100}}) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x26d, 0x400000) creat(&(0x7f0000000040)='\x00', 0x24) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x8000) nanosleep(&(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)) mkdirat(r1, 0x0, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) 18:56:13 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) fcntl$getownex(r1, 0x10, &(0x7f0000000340)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000380)={0x3}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8004a100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x14c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x34, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_BEARER={0x68, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x4}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x70, @mcast2, 0x7fff0000000}}}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x1}, 0x4800) 18:56:13 executing program 0: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x9, 0x8001) [ 168.629489] FAULT_INJECTION: forcing a failure. [ 168.629489] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 168.671500] CPU: 0 PID: 9480 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 168.678946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.688382] Call Trace: [ 168.690989] dump_stack+0x138/0x19c [ 168.694646] should_fail.cold+0x10f/0x159 [ 168.698822] ? __might_sleep+0x93/0xb0 [ 168.702845] __alloc_pages_nodemask+0x1d6/0x7a0 [ 168.708065] ? __alloc_pages_slowpath+0x2930/0x2930 [ 168.713462] ? __alloc_skb+0x3ee/0x500 [ 168.717348] alloc_pages_current+0xec/0x1e0 [ 168.721828] alloc_skb_with_frags+0x179/0x4b0 [ 168.726840] ? __might_fault+0x110/0x1d0 [ 168.731111] sock_alloc_send_pskb+0x5db/0x740 [ 168.735632] ? iov_iter_advance+0x218/0xc60 [ 168.740043] ? sock_wmalloc+0xf0/0xf0 [ 168.743851] ? _copy_from_iter_full+0x1c6/0x6c0 [ 168.748529] packet_sendmsg+0x151a/0x5920 [ 168.752686] ? avc_has_perm_noaudit+0x420/0x420 [ 168.757351] ? trace_hardirqs_on+0x10/0x10 [ 168.761577] ? save_trace+0x290/0x290 [ 168.765381] ? packet_notifier+0x760/0x760 [ 168.770000] ? selinux_socket_sendmsg+0x36/0x40 [ 168.774702] ? security_socket_sendmsg+0x89/0xb0 [ 168.779903] ? packet_notifier+0x760/0x760 [ 168.784140] sock_sendmsg+0xce/0x110 [ 168.787876] sock_write_iter+0x21d/0x390 [ 168.791937] ? sock_sendmsg+0x110/0x110 [ 168.795957] ? iov_iter_init+0xaf/0x1d0 [ 168.799947] __vfs_write+0x4a7/0x6b0 [ 168.803942] ? selinux_file_open+0x420/0x420 [ 168.808364] ? kernel_read+0x120/0x120 [ 168.812270] ? rw_verify_area+0xea/0x2b0 [ 168.816486] vfs_write+0x198/0x500 [ 168.820116] SyS_write+0xb8/0x180 [ 168.823625] ? SyS_read+0x180/0x180 [ 168.827257] ? do_syscall_64+0x53/0x640 [ 168.831228] ? SyS_read+0x180/0x180 [ 168.836194] do_syscall_64+0x1e8/0x640 [ 168.840081] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 168.844925] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 168.850118] RIP: 0033:0x459279 [ 168.853384] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.861168] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 18:56:14 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000580)="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") setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x5db, 0x5, &(0x7f0000000400)=[{&(0x7f0000000140)="f1fa56b15e60fe3d1a24bad98da5099e5686fbd3cb288d7b40429f2b86aa94f64edf855e1d95a9204b5d51667a1f7c2dd20fb4f3299ebc9b21460a703079ee9a3f1ca834c73709ea8cba282c0c22a3aa655e082dcccd8254c5b675bb9680f8d4c954494882779218473ac7b229b71b29df", 0x71, 0x4}, {&(0x7f0000000200)="bedcb5cc93b1f9f24791e93a1b2696f0fb6e13f96860dba34e99be798b7b25f057a891363ec9c91cc712a17d28d0d1263e3cd4e3f5e6a3fa2e3e7d08637d8b873ca203c367fc376907f90e2629ccd8236dd8e708aed0402160276555c467d6928020ee185f6ec0a6e2a7c046ebaf1412bdda7ef5a6a2e6594d913870e67710718a20ebb93b83ec43f953e1f6ab97b4b9c1093eb917696bc68aa7d367dd2db8126694ba92392a64c2b58e70e5a0fd1e2a402a5c8de7b09f0cb17d96871f73963cedb379", 0xc3, 0x4}, {&(0x7f0000000300)="7f9da8650c955c910587a52573b17a5ccc8ffd30639d9821fe187508e1d8bb47b33f2e894e99686780bef6ad173ad564be77c1d726a10fb68ff6d0c5df16aa59d6e112a6348bf54f56e2358ae25635416778c01ebb8e7b3f0f0e9327db6d2e0402a1ff9bcdb739c52a1221a451", 0x6d, 0x8000}, {&(0x7f0000000380)="8799ad3cdaf454aaa0f88fa562b9a8c98d7230059711127a4dd0540d2c7f16a970f4494910797871d17d42cc8961a7fa311d6b48c31fc3979ce0fc8125fd9d925266c5f5534d57ae650cd451588f11d4e11ad6312b99284e1e830f75a60168ed6f401c42ad17", 0x66, 0x1}, {&(0x7f00000000c0)="60c0ca", 0x3, 0x5ffa}], 0x114000, 0x0) 18:56:14 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 168.868575] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 168.875856] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 168.883284] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 168.890554] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:14 executing program 1 (fault-call:7 fault-nth:10): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:14 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 168.977127] FAULT_INJECTION: forcing a failure. [ 168.977127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 169.028328] CPU: 0 PID: 9504 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 169.035496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.045153] Call Trace: [ 169.045176] dump_stack+0x138/0x19c [ 169.045194] should_fail.cold+0x10f/0x159 [ 169.045205] ? __might_sleep+0x93/0xb0 [ 169.045219] __alloc_pages_nodemask+0x1d6/0x7a0 [ 169.045230] ? __alloc_pages_slowpath+0x2930/0x2930 [ 169.045243] ? __alloc_skb+0x3ee/0x500 [ 169.045255] alloc_pages_current+0xec/0x1e0 [ 169.045269] alloc_skb_with_frags+0x179/0x4b0 [ 169.051565] ? __might_fault+0x110/0x1d0 [ 169.051586] sock_alloc_send_pskb+0x5db/0x740 [ 169.051605] ? iov_iter_advance+0x218/0xc60 [ 169.051620] ? sock_wmalloc+0xf0/0xf0 [ 169.051633] ? _copy_from_iter_full+0x1c6/0x6c0 [ 169.051651] packet_sendmsg+0x151a/0x5920 [ 169.106355] ? avc_has_perm_noaudit+0x420/0x420 [ 169.106375] ? trace_hardirqs_on+0x10/0x10 [ 169.106387] ? save_trace+0x290/0x290 [ 169.115344] ? packet_notifier+0x760/0x760 [ 169.115367] ? selinux_socket_sendmsg+0x36/0x40 [ 169.115377] ? security_socket_sendmsg+0x89/0xb0 [ 169.115387] ? packet_notifier+0x760/0x760 [ 169.141824] sock_sendmsg+0xce/0x110 [ 169.145536] sock_write_iter+0x21d/0x390 [ 169.149606] ? sock_sendmsg+0x110/0x110 [ 169.153591] ? iov_iter_init+0xaf/0x1d0 [ 169.157565] __vfs_write+0x4a7/0x6b0 [ 169.161271] ? selinux_file_open+0x420/0x420 [ 169.165757] ? kernel_read+0x120/0x120 [ 169.169697] ? rw_verify_area+0xea/0x2b0 [ 169.173760] vfs_write+0x198/0x500 [ 169.177300] SyS_write+0xb8/0x180 [ 169.188492] ? SyS_read+0x180/0x180 [ 169.192128] ? do_syscall_64+0x53/0x640 [ 169.196098] ? SyS_read+0x180/0x180 [ 169.199768] do_syscall_64+0x1e8/0x640 [ 169.203667] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 169.208522] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 169.213705] RIP: 0033:0x459279 [ 169.216925] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 169.224633] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 169.231899] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 169.239302] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 169.246577] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 169.254104] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:14 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") r2 = dup2(r0, r1) ioctl$CAPI_NCCI_OPENCOUNT(r2, 0x80044326, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0xfffffffffffffff4, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000340)="be69db0efe18b1ef25c971e8bdcd89d5fbc68d005a1cd545e770ebf45bd853cdbeaa5f68e6cb576da182b891a55d02c8d3a209e3f945da8f1d3768195c9798fc5046db178f518c8d0a", 0x49}], 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) kcmp(r2, r3, 0x3, r0, r1) 18:56:14 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:14 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4040, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000480)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800002}, 0xc, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="50010000", @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR=&(0x7f0000000840)=ANY=[@ANYPTR, @ANYBLOB="ac643e7942e8b9fe6f44b743619816c1c836068ad1ec"]], @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="0f6e9ea8990d5150eefc9f59a51b6e24f20f9b02b6372329b0d0cd9c32b0207be70708ce20d1cee80d7c70f1a61e09112b84e82046c935b84a676c673ea775f430f5207028bac8ffc26288e600a8d409048da9c249c7baf255b8c7d428972cd1768fed0af73d1db9427de12e02a8acb69778d13a99fbd028d10c74b6dddb4de12f10ca6fe80e065bb4c34b2a43a65f24cdba94d3bbb1d23e177ad49337465ba56d03222e9c80aa211ae1617d3e5a060b177e683112c13006bc7e849ffbc817562dbe3e40042b60358e37cd95b5aff626ee0d7a92f8010d05fbe745191621fa", @ANYBLOB="8f17d78545ee4dbc5677760c97f1d8d9bf8e04ecd7db1e122d7ddc83df23a61ef39721d3cb45c4ce0be2243d631799e8dffecf3674f087c0bba45191eb025b13e2df6c8774ed84a87f8bba48fc29939b27d038461326057cb6ac55b65c2418126aeb7b0ce8840473edaba7eb394b13caf42b89e2b2c811dbc3dba787722ede403182db4694e676c46666a04c4fff8102cc6f37e006a512e93ac3a660395f0b2fdcaefb342663c4e7808f495c65ef27ce52e7f91abc419c634f3b5ffc26ea1c793644fa2f3254", @ANYRES16=r2, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r0, @ANYBLOB="7668f68c660813aa419ad1fa0e38c41be73965a8563889f770f68bf93320383d140fecd23d53be63a4690233922f855a9df3b1bafcd9f0b64e4ed5139d07923e6bca9d61a672b64016d09d6b467aa3ef1666a73cb5940b97f2469c38155c371a835b09c87ab25abd7a8e0420c54f05771aa9000f746d876db3f626d1287bbbfb5241e1f7b86e473d", @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYPTR64, @ANYRES64=r1, @ANYRES16=0x0, @ANYRESDEC=r2], @ANYRES32=r2]], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockname(r0, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000440)={r3, &(0x7f00000003c0)=""/83}) 18:56:14 executing program 1 (fault-call:7 fault-nth:11): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 169.461638] FAULT_INJECTION: forcing a failure. [ 169.461638] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 169.484073] CPU: 1 PID: 9532 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 169.491157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.500543] Call Trace: [ 169.503154] dump_stack+0x138/0x19c [ 169.506811] should_fail.cold+0x10f/0x159 [ 169.510977] ? __might_sleep+0x93/0xb0 [ 169.514882] __alloc_pages_nodemask+0x1d6/0x7a0 [ 169.519662] ? __alloc_pages_slowpath+0x2930/0x2930 [ 169.524761] ? __alloc_skb+0x3ee/0x500 [ 169.528679] alloc_pages_current+0xec/0x1e0 [ 169.533017] alloc_skb_with_frags+0x179/0x4b0 [ 169.537529] ? __might_fault+0x110/0x1d0 [ 169.541610] sock_alloc_send_pskb+0x5db/0x740 [ 169.546120] ? iov_iter_advance+0x218/0xc60 [ 169.550430] ? sock_wmalloc+0xf0/0xf0 [ 169.550441] ? _copy_from_iter_full+0x1c6/0x6c0 [ 169.550456] packet_sendmsg+0x151a/0x5920 [ 169.550465] ? avc_has_perm_noaudit+0x420/0x420 [ 169.550479] ? trace_hardirqs_on+0x10/0x10 [ 169.550489] ? save_trace+0x290/0x290 [ 169.550505] ? packet_notifier+0x760/0x760 [ 169.550521] ? selinux_socket_sendmsg+0x36/0x40 [ 169.550530] ? security_socket_sendmsg+0x89/0xb0 [ 169.550539] ? packet_notifier+0x760/0x760 [ 169.550550] sock_sendmsg+0xce/0x110 [ 169.550561] sock_write_iter+0x21d/0x390 [ 169.550569] ? sock_sendmsg+0x110/0x110 [ 169.550584] ? iov_iter_init+0xaf/0x1d0 [ 169.550597] __vfs_write+0x4a7/0x6b0 [ 169.550604] ? selinux_file_open+0x420/0x420 [ 169.550614] ? kernel_read+0x120/0x120 [ 169.621801] ? rw_verify_area+0xea/0x2b0 [ 169.625850] vfs_write+0x198/0x500 [ 169.629554] SyS_write+0xb8/0x180 [ 169.632997] ? SyS_read+0x180/0x180 [ 169.636611] ? do_syscall_64+0x53/0x640 [ 169.640564] ? SyS_read+0x180/0x180 [ 169.644172] do_syscall_64+0x1e8/0x640 [ 169.648042] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 169.652893] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 169.658077] RIP: 0033:0x459279 [ 169.661256] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 169.668948] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 169.676203] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 169.683480] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 169.691010] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 169.698272] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:14 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f00000000c0)=0x80000000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='9', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000340)={0x28, 0x2, 0x0, {0x1}}, 0x28) 18:56:14 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getpeername$netlink(r2, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x100000001, 0x0, 0x0, 0x2000000000000}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8000, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000000c0)=0x8, 0x4) 18:56:14 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) rt_sigsuspend(&(0x7f0000000000)={0x9}, 0x8) fcntl$setflags(r0, 0x2, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66b8ea000f00d8eadd5484f88a00f0833600660f71d50066ba4100edb8010000000f01d90f0866b8bd008ee0b94d0200000f32360f07", 0x36}], 0xaaaaaaaaaaaabce, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000100)="ed916a789c1607d0b357de1dbb070f6a891abcee7d5a84bba4a73cb8b4dcec4bd930ad8e7a532217d7f7690631770915b2281723a08fd66c65a83dd91392c5b8709f38fc86c0af423ad5", 0x4a, 0x40, &(0x7f00000002c0)={0x11, 0x1f, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 18:56:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="a5ad796efd2f973cc870bd6488a8", 0x0, 0x6000}, 0x28) getitimer(0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000100)) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x6, 0x2400) ioctl$UI_DEV_CREATE(r1, 0x5501) 18:56:14 executing program 1 (fault-call:7 fault-nth:12): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:15 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x28800, 0x0) read(r0, &(0x7f00000000c0)=""/70, 0x46) getegid() ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xe2319462b6043cf7}) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000180)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000200)={0x4, 0x10001, 0x100}) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000300)={0x4, 0x20, &(0x7f0000000280)="9b1da7d1c64c29cdd033522fb7872decb57b9c091cad941f8e3ba3aa333bfd9f44383c141ee5d132725fd8d3cf922ed5423ade8931b0e8e142ed674b0fa19530ce561b1fac7e610418d51e", {0x6, 0x800, 0x7f7f7f79, 0x7, 0x938, 0x0, 0x8, 0x3}}) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x3) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000340)=0x5) clone(0x100000, &(0x7f0000000380)="5a6701f0d75762e46ca94916c6a19c984c73fe87df281c33e3a6e393c8ed7d3b22cdbf17eb5874b853ba88", &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="b49c3cc55528776ea6b8e9f3fa3a3e831045a8c27de1592e192d2d8b4d8890115d77460a724e9adc7af1a5d9c2c50d117107e077725238b18ccf1d8324d210ddeddfe67c4f86d436f46b43422717daf2fe893eddbc058f8376ead156b7ae2e39a20732133ff6a08323f24ced194cda1cb0233dfd0fc07f4586d244a6e0a52404d4a0ff48ea291de01b3987776a8f307ce399e460219e9863beee133f47e5741bbfd89afe870956868fe5d44fd6415668afe98910fdd8cc58a30f7b61b745") ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000580)={0x3, 0x0, 0x4, 0x40072000, {r3, r4/1000+30000}, {0x7, 0xc, 0x5, 0x6c0, 0x8, 0x100, "bffdafa1"}, 0x3ff, 0x3, @offset=0xffffffff, 0x4}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000600)={0x40, 0x0, 0x3}, 0x10) r5 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/access\x00', 0x2, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000680)=""/235) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000780)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000900)={0x5}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000980)={&(0x7f0000000940)=[0x0, 0x0], 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000ac0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a80)={0xffffffffffffffff}, 0x113, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000b00)={0xb, 0x10, 0xfa00, {&(0x7f00000009c0), r7, 0x4}}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000b80)={0x9}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000bc0)={0x7, 0x0, &(0x7f0000ffe000/0x1000)=nil}) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r6, 0xa00, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800) 18:56:15 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000100)={0x0, 0x0, 0x69c4}) r3 = dup2(r2, r2) read$FUSE(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 169.800381] FAULT_INJECTION: forcing a failure. [ 169.800381] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:56:15 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, 0xffffffffffffff9c, 0x0, 0xffffffe6, 0x0}, 0xd) r2 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000300), &(0x7f0000000340)=0x4) ptrace$setopts(0x4200, r1, 0xb6, 0x0) 18:56:15 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffdf3, 0x0, 0x0, 0xc9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000440)=0xc) setreuid(r3, r4) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000005000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000240)="640f01d166baf80cb83f6ec089ef66bafc0cecf0292966b88c000f00d866410f2895e1000000c4a3550de23364460f01d1c74424000c000000c744240200800000c7442406000000000f011c24c441bddeffb9b90a0000b807000000ba000000000f30", 0x63}], 0x1, 0x30, &(0x7f0000000300)=[@flags={0x3, 0x4}, @flags={0x3, 0x100}], 0x2) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r2, &(0x7f0000000480)={'syz1\x00', {0x2d, 0xfffffffffffffffb, 0x100000001, 0x5}, 0x54, [0x1, 0x1, 0x7fffffff, 0x8, 0x40, 0xfffffffffffffffe, 0x7c, 0xfff0000000000000, 0x5, 0x7, 0x7, 0x3252, 0x2, 0x7, 0x3f, 0xffff, 0x4, 0x1, 0x200, 0x1f, 0x401, 0x4, 0x80000001, 0x9, 0x7, 0x100000000, 0x14, 0x8, 0x1ff, 0x8, 0x80, 0x10001, 0x1, 0x6, 0xffff, 0xb639, 0x1, 0x100, 0x7, 0xfffffffffffffffb, 0x80, 0x6, 0x3, 0x80000000, 0x4, 0x9, 0x7f0, 0x8, 0xff, 0xffff, 0x9, 0x6, 0x2, 0x80, 0x0, 0x0, 0x2, 0x229, 0x40, 0x1, 0x4, 0x71, 0xbeb, 0xf9], [0x8, 0x10001, 0x4, 0x2, 0x1ff, 0x80000000, 0x3, 0x4, 0x7, 0x4, 0x8, 0x4, 0x1, 0x0, 0x9, 0x9, 0x80e, 0x1, 0x60, 0x9, 0x4, 0x5, 0x6, 0x20, 0x10001, 0x4, 0xfff, 0xf80, 0x9, 0x1000, 0x4, 0x1, 0x9, 0x4, 0x847, 0x8, 0x1b00000000000, 0xdb, 0xed3, 0x80, 0x20, 0x6, 0x9, 0x0, 0x1614c7de, 0xffffffffffff41b0, 0x0, 0x7, 0x81, 0x8, 0x0, 0x3f, 0x29, 0x800, 0x2000000000, 0x2, 0x10001, 0x400, 0x9, 0x8, 0x4, 0x7, 0x6, 0x8], [0x1, 0xad2d, 0x7d, 0x6, 0x6, 0x4, 0x10001, 0x10000, 0xfffffffffffffc00, 0x3ff, 0x4, 0x21dc, 0xfffffffffffffffb, 0x8, 0xaa, 0x4, 0x2, 0xff, 0x1, 0xfffffffffffffffa, 0x0, 0x3b400000, 0x2, 0x7, 0x3, 0x3, 0x101, 0x7, 0x5, 0x81, 0x101, 0x7f, 0x3, 0x0, 0x4, 0x7, 0x7, 0x7fffffff, 0x5, 0x0, 0x7, 0x7, 0x4, 0x7ef6, 0x0, 0x9, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x20e, 0x0, 0x5, 0x8, 0x400000000000000, 0x4, 0x7, 0x7, 0x81, 0xc900000000000000, 0x4, 0x1ff, 0x200, 0x7be], [0xffffffff, 0xd36, 0x8, 0x1, 0x7ff, 0x5, 0x7, 0x3, 0x6, 0x1, 0x6, 0x9, 0x101, 0xa1, 0x4, 0x1, 0x6, 0x4, 0x7ff, 0x0, 0xffffffffffffff01, 0x4, 0x7, 0x0, 0x7fffffff, 0x5, 0x9, 0x2, 0x3, 0x5e, 0x9, 0x10000, 0x5ebf, 0x4, 0x8, 0x6, 0x5811, 0x7ff, 0x67da1813, 0x5, 0x1f, 0x7ff, 0x3, 0x8, 0x8, 0x7ff, 0x12, 0x200, 0x20, 0x1, 0x76b8, 0x7, 0x9, 0x8f9c, 0x0, 0x80000001, 0x1, 0x4, 0x1, 0x7fffffff, 0x6, 0x7, 0x800, 0x33]}, 0x45c) [ 169.892594] CPU: 1 PID: 9553 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 169.899670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.909215] Call Trace: [ 169.911830] dump_stack+0x138/0x19c [ 169.915475] should_fail.cold+0x10f/0x159 [ 169.919629] ? __might_sleep+0x93/0xb0 [ 169.923556] __alloc_pages_nodemask+0x1d6/0x7a0 [ 169.928336] ? __alloc_pages_slowpath+0x2930/0x2930 [ 169.933386] ? __alloc_skb+0x3ee/0x500 [ 169.937291] alloc_pages_current+0xec/0x1e0 [ 169.941636] alloc_skb_with_frags+0x179/0x4b0 [ 169.946140] ? __might_fault+0x110/0x1d0 [ 169.950912] sock_alloc_send_pskb+0x5db/0x740 [ 169.963670] ? iov_iter_advance+0x218/0xc60 [ 169.967999] ? sock_wmalloc+0xf0/0xf0 [ 169.971795] ? _copy_from_iter_full+0x1c6/0x6c0 [ 169.976462] packet_sendmsg+0x151a/0x5920 [ 169.980620] ? avc_has_perm_noaudit+0x420/0x420 [ 169.985276] ? trace_hardirqs_on+0x10/0x10 [ 169.989496] ? save_trace+0x290/0x290 [ 169.993291] ? packet_notifier+0x760/0x760 [ 169.997529] ? selinux_socket_sendmsg+0x36/0x40 [ 170.002181] ? security_socket_sendmsg+0x89/0xb0 [ 170.006922] ? packet_notifier+0x760/0x760 [ 170.011143] sock_sendmsg+0xce/0x110 [ 170.014841] sock_write_iter+0x21d/0x390 [ 170.018884] ? sock_sendmsg+0x110/0x110 [ 170.022851] ? iov_iter_init+0xaf/0x1d0 [ 170.026818] __vfs_write+0x4a7/0x6b0 [ 170.030518] ? selinux_file_open+0x420/0x420 [ 170.034914] ? kernel_read+0x120/0x120 [ 170.038802] ? rw_verify_area+0xea/0x2b0 [ 170.044387] vfs_write+0x198/0x500 [ 170.047916] SyS_write+0xb8/0x180 [ 170.051351] ? SyS_read+0x180/0x180 [ 170.054960] ? do_syscall_64+0x53/0x640 [ 170.058922] ? SyS_read+0x180/0x180 [ 170.062533] do_syscall_64+0x1e8/0x640 [ 170.066405] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 170.071238] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 170.076431] RIP: 0033:0x459279 [ 170.079602] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 18:56:15 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000100)={0x80000000, 0x101, "d24d858170137a30b89e8fc18940d4982da95b3fb36138e2b433b05c081a8bcf", 0x7, 0xe4, 0x8, 0x9, 0x1, 0x3, 0x2, 0x1ff, [0x3, 0x5, 0x5, 0x3d]}) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7ff, 0x800) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x5518c0}) 18:56:15 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x80) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x98a7, 0x6}) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f00000000c0)=0x9, 0x4) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x102, 0x84, 0xf9, 0x0, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) read(r0, &(0x7f0000000540)=""/102, 0x1e9) [ 170.087305] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 170.094744] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 170.102002] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 170.109607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 170.116859] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:15 executing program 1 (fault-call:7 fault-nth:13): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:15 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x38b) [ 170.177696] vhci_hcd: default hub control req: c018 v0055 i0000 l0 [ 170.199310] vhci_hcd: default hub control req: c018 v0055 i0000 l0 [ 170.243379] FAULT_INJECTION: forcing a failure. [ 170.243379] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 170.256578] CPU: 0 PID: 9589 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 170.263802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.273172] Call Trace: [ 170.275781] dump_stack+0x138/0x19c [ 170.279435] should_fail.cold+0x10f/0x159 [ 170.283719] ? __might_sleep+0x93/0xb0 [ 170.287613] __alloc_pages_nodemask+0x1d6/0x7a0 [ 170.292282] ? __alloc_pages_slowpath+0x2930/0x2930 [ 170.297368] ? __alloc_skb+0x3ee/0x500 [ 170.301252] alloc_pages_current+0xec/0x1e0 [ 170.305561] alloc_skb_with_frags+0x179/0x4b0 [ 170.310046] ? __might_fault+0x110/0x1d0 [ 170.314145] sock_alloc_send_pskb+0x5db/0x740 [ 170.318639] ? iov_iter_advance+0x218/0xc60 [ 170.323030] ? sock_wmalloc+0xf0/0xf0 [ 170.326812] ? _copy_from_iter_full+0x1c6/0x6c0 [ 170.331469] packet_sendmsg+0x151a/0x5920 [ 170.335616] ? avc_has_perm_noaudit+0x420/0x420 [ 170.341144] ? trace_hardirqs_on+0x10/0x10 [ 170.345363] ? save_trace+0x290/0x290 [ 170.349215] ? packet_notifier+0x760/0x760 [ 170.353498] ? selinux_socket_sendmsg+0x36/0x40 [ 170.358154] ? security_socket_sendmsg+0x89/0xb0 [ 170.362911] ? packet_notifier+0x760/0x760 [ 170.367156] sock_sendmsg+0xce/0x110 [ 170.370856] sock_write_iter+0x21d/0x390 [ 170.374903] ? sock_sendmsg+0x110/0x110 [ 170.378893] ? iov_iter_init+0xaf/0x1d0 [ 170.382859] __vfs_write+0x4a7/0x6b0 [ 170.386560] ? selinux_file_open+0x420/0x420 [ 170.390959] ? kernel_read+0x120/0x120 [ 170.394834] ? rw_verify_area+0xea/0x2b0 [ 170.398877] vfs_write+0x198/0x500 [ 170.402399] SyS_write+0xb8/0x180 [ 170.405867] ? SyS_read+0x180/0x180 [ 170.409506] ? do_syscall_64+0x53/0x640 [ 170.413559] ? SyS_read+0x180/0x180 [ 170.417432] do_syscall_64+0x1e8/0x640 [ 170.422306] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 170.427166] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 170.432359] RIP: 0033:0x459279 [ 170.435529] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.443224] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 170.450495] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 170.457749] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 170.465019] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 170.472282] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:15 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x9, 0x100000001, 0x0, 0x5, 0x10001}, 0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) sendto$packet(r1, &(0x7f0000000200)="d465a5b3da932d62f60c4afbc446a9ab74b6bd6c95d1912ae3aafe8f3081273ab898acdaa4db4225e1fb699d7406c0c3859cb0e9eebfd8f052d1a42172905309d10bd8b12082139e893271576e456b5c6d6dbc9f5e0491342ecfe691302d70a5c63041b8bb6cfe7009c6ac065b61dc04e413dd804205d1ed79d2df00068201269fe8d8a885363bb6dd404e44af2feda45a71394367a69d7d51ac53f76f44d1edf185cbf2db4438b7b01c70", 0xab, 0x0, &(0x7f0000000480)={0x11, 0xf7, r2, 0x1, 0x16c4000000000}, 0x14) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) 18:56:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000891b, &(0x7f00000001c0)="11dca5055e0bcfec7be07074d657ea5351d2686785f8ab4f06cc33db91422302fae40c65834c93ff2021e25f2791ecfed5387d74790d5d8f8afdb63b393ead6a36664fc6dfd9029957d8c9b5ce72910d024819cc268e72561105ebce13f2101d65122ab87a2b") r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f80)=""/26, 0x1a}], 0x1}, 0x0) r2 = accept$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000002c0)={r3, 0x4, 0x10, 0x3, 0x8}, &(0x7f0000000300)=0x18) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x298240) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000080)=0xde8, &(0x7f00000000c0)=0x2) 18:56:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x50000000) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1ff, 0x2) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4) 18:56:15 executing program 1 (fault-call:7 fault-nth:14): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 170.629182] FAULT_INJECTION: forcing a failure. [ 170.629182] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 170.647143] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 170.675577] CPU: 0 PID: 9604 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 170.682647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.682654] Call Trace: [ 170.682679] dump_stack+0x138/0x19c [ 170.682696] should_fail.cold+0x10f/0x159 [ 170.702774] ? __might_sleep+0x93/0xb0 [ 170.706679] __alloc_pages_nodemask+0x1d6/0x7a0 [ 170.711353] ? __alloc_pages_slowpath+0x2930/0x2930 [ 170.711372] ? __alloc_skb+0x3ee/0x500 [ 170.711384] alloc_pages_current+0xec/0x1e0 [ 170.711395] alloc_skb_with_frags+0x179/0x4b0 [ 170.711405] ? __might_fault+0x110/0x1d0 [ 170.711418] sock_alloc_send_pskb+0x5db/0x740 [ 170.711432] ? iov_iter_advance+0x218/0xc60 [ 170.711443] ? sock_wmalloc+0xf0/0xf0 [ 170.711457] ? _copy_from_iter_full+0x1c6/0x6c0 [ 170.750484] packet_sendmsg+0x151a/0x5920 [ 170.754646] ? avc_has_perm_noaudit+0x420/0x420 [ 170.759348] ? trace_hardirqs_on+0x10/0x10 [ 170.763604] ? save_trace+0x290/0x290 [ 170.767424] ? packet_notifier+0x760/0x760 [ 170.771687] ? selinux_socket_sendmsg+0x36/0x40 [ 170.776368] ? security_socket_sendmsg+0x89/0xb0 [ 170.781130] ? packet_notifier+0x760/0x760 [ 170.785712] sock_sendmsg+0xce/0x110 [ 170.789431] sock_write_iter+0x21d/0x390 [ 170.793511] ? sock_sendmsg+0x110/0x110 [ 170.797505] ? iov_iter_init+0xaf/0x1d0 [ 170.801505] __vfs_write+0x4a7/0x6b0 [ 170.805224] ? selinux_file_open+0x420/0x420 [ 170.809645] ? kernel_read+0x120/0x120 [ 170.813557] ? rw_verify_area+0xea/0x2b0 [ 170.817983] vfs_write+0x198/0x500 [ 170.821520] SyS_write+0xb8/0x180 [ 170.821530] ? SyS_read+0x180/0x180 18:56:16 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioprio_set$uid(0x3, 0x0, 0x0) [ 170.821539] ? do_syscall_64+0x53/0x640 [ 170.821547] ? SyS_read+0x180/0x180 [ 170.821557] do_syscall_64+0x1e8/0x640 [ 170.821565] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 170.821582] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 170.832620] RIP: 0033:0x459279 [ 170.832625] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.832635] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 170.832639] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 170.832643] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 170.832648] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 170.832653] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:16 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:16 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffff9c, 0x10, &(0x7f00000002c0)={&(0x7f00000001c0)=""/229, 0xe5, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x10, &(0x7f0000000340)={&(0x7f0000000100)=""/138, 0x8a, r1}}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x7f3, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000000)) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x100, 0x0) setsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f0000000080)=0x6, 0x4) 18:56:16 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x0, 0x7, 0xcd36}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x3f}}, 0x2, 0x0, 0x0, 0x0, 0x4d}, 0x98) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f00000000c0)) 18:56:16 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) eventfd(0x4) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000040), 0x4) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) 18:56:16 executing program 1 (fault-call:7 fault-nth:15): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 170.952990] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 18:56:16 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80, 0x200040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@empty, @multicast2, r3}, 0xc) r4 = getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) kcmp(r4, r5, 0x2, r0, r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@empty, @mcast1, @remote, 0x0, 0xbc6, 0x4, 0x500, 0x5, 0x80, r6}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)={0x4, 0x7ff, 0x4, 0x2, 0x8, [{0x0, 0x400, 0x6, 0x0, 0x0, 0x484}, {0x4, 0x5, 0x4, 0x0, 0x0, 0x2000}, {0x5, 0x9, 0x0, 0x0, 0x0, 0x800}, {0xfffffffffffffffb, 0x8, 0x10000, 0x0, 0x0, 0x800}, {0x8, 0x4, 0x6, 0x0, 0x0, 0x1}, {0x7, 0x6, 0x2, 0x0, 0x0, 0x204}, {0x0, 0x2, 0xffff, 0x0, 0x0, 0x200}, {0x9, 0x3ff, 0x40, 0x0, 0x0, 0x1000}]}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000004c0)) r7 = perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x5, 0x4f, 0x3db, 0x4, 0x0, 0x7ff, 0x2000, 0xe, 0x200, 0x2, 0xffff, 0x0, 0xff, 0x80000001, 0x9, 0x5, 0x32f4, 0xffffffff, 0x4, 0x3ff, 0x1, 0x4, 0x8, 0xffffffff, 0x5, 0x6, 0x0, 0x3, 0x8, 0x1, 0x200, 0x1000, 0x101, 0x8, 0x0, 0x4, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x400}, 0x800, 0x80, 0x1, 0x5, 0x2, 0x40, 0x961f}, 0x0, 0x6, 0xffffffffffffff9c, 0x1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000580)={0x0, 0x41ed}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000600)={r8, 0xa}, 0x8) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000640)={r0, 0x4}) r9 = accept4$nfc_llcp(r0, 0x0, &(0x7f0000000680), 0x800) sendmsg$sock(r9, &(0x7f0000000b80)={&(0x7f00000006c0)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x4, 0x2}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000740)="0a8c78a9b8931f7147895c43f96919f6131f1abad96d541a1fc221e4ba608cb8ddca04c8da35981f84682286b20c3fa0532f9aa10eea79e74fc2db0043a7909fc04f8df30a33813a86be44a1845d488ce63dfd00707f860c89f51a854b5ab8a2210b1fb74f277445682fc215c83aa669bbdda8ec5c747b9a7b3e8bc5", 0x7c}, {&(0x7f00000007c0)="6854bf2a4620d0dab342bf651912fcbaef09e640cc3383ba69575c8454d72b7088ee97f35905f2ef4331ca4529a21667a4a7b55d63995ca89cebc9825fa77f95c304c2c68cbcfc2abfe888ef3d8be06b07b223f141c04b3b368926240f9c08dbe38ba6066c6b69e579a0e922341dc36eed8d0a", 0x73}, {&(0x7f0000000840)="136d8fa19009bdb3b0ec790759be3e72a24b674de6222560172faf382547fb04d730aac500e6ca86686ec58ebf19878586733543166bcf90210b29def0e821103893453699f1571f70d657e1d59265", 0x4f}, {&(0x7f00000008c0)="6a4e8c5d14c48dd7372d3d93dec7dc23e60b3b7c586bebdefa099837cd1f6b68e1eb46efa8d247b8a2ffa7975979a712801158d6ec8eed5e25b2d6c122856bd6101cc71087707b0ab5d534c4f19f82c66ddd920939f8404d04cfec9f46c70156e1cb03396c45b5e0d93a9c7dc113", 0x6e}, {&(0x7f0000000940)="e9", 0x1}, {&(0x7f0000000980)="1a6b0d4dc996dd641c5e6942874b5e2cac23c34d46046b95c38747db327207c2d136625b41aa1258f2936fcfcd63f12cd951", 0x32}, {&(0x7f00000009c0)="a4f12cbe363e6db8b7c811b5133c879a02eaed4d2fa19f552562b9b2c2872ff1ddcf1fad6f7ec69aac3b682b0fbc316df52d907fd8ebb1c71e35c1991e0b3506b8e2fef2dafdb2ce349b952cffab65c7929023e78356cdd50e1cb0b910ca74b91065efadc45e1ab77b7f67001d09e1c4a5e74c71e64d6b70687f76c185e2f11a2453113b738688a40d2aa9085eff956c036f728e11c797", 0x97}], 0x7, &(0x7f0000000b00)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x1c}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}], 0x48}, 0x41) fsetxattr$security_ima(r0, &(0x7f0000000bc0)='security.ima\x00', &(0x7f0000000c00)=@md5={0x1, "ec10c64e0de0d6e68884c7fd5802e559"}, 0x11, 0x1) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000c40)) ioctl$SIOCRSGL2CALL(r7, 0x89e5, &(0x7f0000000c80)=@netrom) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000cc0)={0xa, [0x40, 0x8, 0x4, 0x7ff, 0x100, 0x7, 0x2, 0x2, 0x1, 0x100000000]}, &(0x7f0000000d00)=0x18) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000d40)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000d80)=0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/uinput\x00', 0x802, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000e00)={0x7, 0x8, 0x8, 0x100000000, 0x12, 0xf3, 0x542e, 0x3800000000000000, 0x5a9, 0x4010000000000000, 0x1ff, 0xffffffffffffff7f}) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000e40)={{0x800, 0x8}, 0x2}, 0x10) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001140)={0x0, 0xffffffffffffffff, 0xe6, 0x10000, @buffer={0x0, 0xf2, &(0x7f0000000e80)=""/242}, &(0x7f0000000f80)="879fec9308a5aea816ac9099823db7d5614dd162e90f2c0b181ba3d1845a0c90f658e1c83f46328fc8c964befe7e382313dc404c129643af63bdba30fcd6346a81791a5b82e2b23853d9c704302efc95cc905d4d2d1363b361d9564cbbfdabf2591967b829824b89ddd8ca1807231c9f993bcd3ae483a6450c5564021ecb9423863b5a9c0c0fd8f4671dc0977e92e8d57bb09e97fd4810bec6593c43ccf03b613a37359b20c40e535832a218cb24ea65522993329eb3956178ff3aa409b97679507016780c0200ef2c0b4d8b440ec444df7fecd660fd2796211c31980eaaebe6fcedefe5b3d6", &(0x7f0000001080)=""/119, 0x25, 0x1, 0xffffffffffffffff, &(0x7f0000001100)}) [ 170.998743] FAULT_INJECTION: forcing a failure. [ 170.998743] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 171.054516] CPU: 0 PID: 9639 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 171.061597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.070964] Call Trace: [ 171.073569] dump_stack+0x138/0x19c [ 171.077214] should_fail.cold+0x10f/0x159 [ 171.081370] ? __might_sleep+0x93/0xb0 [ 171.085271] __alloc_pages_nodemask+0x1d6/0x7a0 [ 171.089950] ? __alloc_pages_slowpath+0x2930/0x2930 [ 171.094972] ? __alloc_skb+0x3ee/0x500 [ 171.098872] alloc_pages_current+0xec/0x1e0 [ 171.103206] alloc_skb_with_frags+0x179/0x4b0 [ 171.107712] ? __might_fault+0x110/0x1d0 [ 171.111786] sock_alloc_send_pskb+0x5db/0x740 [ 171.116306] ? iov_iter_advance+0x218/0xc60 [ 171.120658] ? sock_wmalloc+0xf0/0xf0 [ 171.124476] ? _copy_from_iter_full+0x1c6/0x6c0 [ 171.129163] packet_sendmsg+0x151a/0x5920 [ 171.133323] ? avc_has_perm_noaudit+0x420/0x420 [ 171.138000] ? trace_hardirqs_on+0x10/0x10 [ 171.142237] ? save_trace+0x290/0x290 [ 171.142257] ? packet_notifier+0x760/0x760 [ 171.150270] ? selinux_socket_sendmsg+0x36/0x40 [ 171.150278] ? security_socket_sendmsg+0x89/0xb0 [ 171.150286] ? packet_notifier+0x760/0x760 [ 171.150297] sock_sendmsg+0xce/0x110 [ 171.150307] sock_write_iter+0x21d/0x390 [ 171.150316] ? sock_sendmsg+0x110/0x110 [ 171.150333] ? iov_iter_init+0xaf/0x1d0 [ 171.150345] __vfs_write+0x4a7/0x6b0 [ 171.150353] ? selinux_file_open+0x420/0x420 [ 171.150364] ? kernel_read+0x120/0x120 [ 171.150384] ? rw_verify_area+0xea/0x2b0 [ 171.150395] vfs_write+0x198/0x500 [ 171.199411] SyS_write+0xb8/0x180 18:56:16 executing program 5: r0 = socket$inet(0x2, 0x80001, 0xffffffffffff1320) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) ftruncate(r0, 0x6) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="de", 0xffffffffffffffe5}], 0x1}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x5d710654) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:16 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x200000) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000080)={0x6, 0x51, "8ec83faf0a0cba1bdd8433b412da910ca3c9d2ec362adc1f557821bc16903bbb840618c449741d9cd7469bd09de5946a7b8960667ee65e40426d1503ab8d40932e4a2a9997c382c21709d25d79599121c2"}) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dce9dada935782573f70") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:16 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x66, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x262}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) r2 = request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='trusted.overlay.opaque\x00', 0xfffffffffffffffa) r3 = request_key(&(0x7f0000000380)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)='\x00', 0xfffffffffffffffd) keyctl$reject(0x13, r2, 0x5, 0x7, r3) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="aa2a000000", @ANYRES16=r4, @ANYBLOB="26092abd7000fddbdf250300000008000400ccffffff0c0003000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48014}, 0x4008000) 18:56:16 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000001c0)={r2}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)=@gcm_128={{0x307}, "750fcc0d337039c3", "7cc2655b0bd16cc1efdb8c19730a9599", "d3f35a5b", "c3d0a40adfb0289c"}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl(r3, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x113}}, 0x20) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) [ 171.202878] ? SyS_read+0x180/0x180 [ 171.206514] ? do_syscall_64+0x53/0x640 [ 171.210494] ? SyS_read+0x180/0x180 [ 171.214132] do_syscall_64+0x1e8/0x640 [ 171.218118] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 171.222981] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 171.228179] RIP: 0033:0x459279 [ 171.231718] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.239446] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 171.246725] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 18:56:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xffffffffffffff11) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x2f, 0x4) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 171.254006] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 171.261293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 171.268573] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:16 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000078091d9d7eb9a6b7cb1041606951c3dc204b13d624ca1a50d7eb9dd522ab0000d9cb7be177c408a4efdbf8128ca2e4f7539832f02e38c829df144b2b5db92b9145f1846039a44d381d3dd49c13b2905f46bad5a1d193a1ac141a56476e1181400032f94f8311b605775301c9a29511c5d811ef39601d8e3874df858d2a0d6a29e800bcedffe1b89efd42aa5028e8f586e6510162094485b51a33ca5f85ff82ccce29a11f92224061b932ecc7a321dd91a33b464954b2284f908586b5733f5d97425012803489919b3372c49fe1a4af72fe2c", @ANYRES16=r2, @ANYBLOB="20002cbd7000fcdbdf25100000000c00020008000b000a000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000006000)=@nfc={0x27, 0x1, 0x1, 0x7}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:16 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x8, 0x20000) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000200)={0x2, 0x2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x3, 0x9, 0x3, 0x6, 0x7fffffff}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="85fa6f02000000000000000000040100"/26], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x401, @loopback, 0x400}}, [0x6, 0x4b7, 0x3, 0xb7a, 0x6, 0x6, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1f, 0x6, 0x800, 0xffffffffffffffe1]}, &(0x7f0000000340)=0x100) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380)={r3, 0x5}, &(0x7f00000003c0)=0x8) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x3, 0x80) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000001c0)=0x2, 0x4) 18:56:16 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00030000400000000025010000000c000400f50000000000000077dad3832c456075e2402682415f4ee09a760733fd6968f2fda5a6aee90030f6af6115f84d0bd71deceb98971257cfc5685929d397fbbd12173e772dee088edb0855670d21ce630efe6c70cb188aa6fa218429cd55e3e30c3aab43aa9b607f9999643539c2ccb6c18962e53603228850851c719886aa1c01c5cebda08a7305654bd0119500df"], 0x20}}, 0x20000800) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000040)={0x1, 0x1, @start}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') sendfile(r2, r0, &(0x7f0000000100)=0x4000000000000000, 0x1) r3 = semget$private(0x0, 0x1, 0x408) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000200)=[0x8, 0xff, 0x3f]) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x10000, 0x0) sendfile(r0, r2, &(0x7f00000000c0), 0x1ff) 18:56:16 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000100)={0x8, "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", 0x1000}, 0x1006) ioctl(r0, 0x1000008912, &(0x7f0000001240)="11dca5055e0bcfec7be070216bec8896ff64943d73f351b563f31d4022e7970cdcd717c12c7786bcf1624206baad4753c52e4e78110a32ff3957e653b8b151f665deaa876e19b62a6e1581219b1e8fffdeb73c87d1a9644d8cadcf5593fd9860155c824ebdc6") r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x205, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r2, 0xc00c5512, &(0x7f0000000000)={0x0, 0xffffffff}) 18:56:16 executing program 1 (fault-call:7 fault-nth:16): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:16 executing program 0: r0 = socket$kcm(0xa, 0x40000000003, 0x11) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100), &(0x7f00000003c0)=0x4) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xc2) close(r0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x3c, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x5, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x5, 0x11, 0xffffffffffffd457, 0x0, 0xffffffff, 0xfffffffffffffffa, 0x4, 0xd4, 0x81}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000500)=r3) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x400000) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1}}}, 0x80, 0x0, 0xffffffffffffffe4}, 0x4000010) 18:56:16 executing program 2: r0 = msgget$private(0x0, 0x480) msgctl$IPC_SET(r0, 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000080)={r2, 0x3}) 18:56:16 executing program 5: r0 = socket$inet(0x2, 0xa, 0x9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x80000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000440)=0x84) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000880)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000fbdbdf25010000000c00040000000000df0300000800030040000000080005000400000008000600fd000000080005000200000014000100fe8000000000000000000000000000bb0800050000000000000000000000000025282879bad1472a045c2490ef1efdcec8b9c0882e8ff11c46306dad45"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000480)={r2, 0x11, "3545c1081008f201766f3d43371588ed71"}, &(0x7f0000000780)=0x19) ioctl$TIOCNOTTY(r1, 0x5422) getpeername$inet(r1, &(0x7f00000008c0)={0x2, 0x0, @broadcast}, &(0x7f0000000900)=0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f00000002c0)={'erspan0\x00', 0x7}) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000c2abd7000fcdbdf250300000008000600050000000c00040009000000070000000800050001080000000000000000000014000100ff020000000000000000000000000001585d350a2e7264fe4c85c9fb1e9ca1ffe3427552be94121427926db8d1856e1dffa2acfedae757a2a10a6dbb1da099a1b2bdad02a889152127d64573ab1aa8456981764e4c57d69c9143feb5f53d64148ebf8107c79d997b8f19b33686e230fe40e4295a981817e0eff3808d5c6c8a8eab94ed9c80e4de93a0b6a87de9488b8f2099ba5fc3a2fbec80e48d72250790ca11b65d648c3fcd39b606e9898b81e776b2bd827ad24316d16d0e36d3d36337b495b30fe02a8c5f1b05afde2b4deaa8aeea915df67168dbbb97c49ea8cfd1049631135f6b9be4"], 0x4c}}, 0x4000) ioctl$KDDELIO(r1, 0x4b35, 0x4) r5 = getpid() capget(&(0x7f00000000c0)={0x39980732, r5}, &(0x7f0000000140)={0x101, 0xfffffffffffffffd, 0x1000, 0x39, 0x80, 0x3}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x7, 0x2, [0x6a7e, 0x3]}, &(0x7f00000003c0)=0xc) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000400)={r6, 0xffffffffffffff7d}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) syz_open_dev$sndctrl(&(0x7f00000007c0)='/dev/snd/controlC#\x00', 0x5, 0x2302) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000800)={r2, 0x8}, 0x8) 18:56:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfc5c, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="40750010011fffdd4b4726a1e75387d2eef2a1c4000000000000000000000000000000cfc009b603171decfb2057be706594d94fe840132ee00888f9692ebfc553789bf8f12deb46af2fef80c207fb73914f896b8e2780d43cb6ea4a5686d37b57752593b3f2d4cf229eac5fd14e22c6b00ecaa18f6081ba9b0898b61d9b4742d4c9da809fd91439a5fda175efb716348ff925393ba589a9e98efced20b5ea2f15dfba893505b6f6046e4b74d9fbec7e68138b9befb8b9cd6b644e3478aac3783c4709ad6a57d9bdd4bd8c9f9868b6e5488d597153e9b79c5df4363a7259cf773c08ccbcb87203dac17c77955c33d02a10a8e18d6901137cb72d76857230d3e5c595fd1aa546cc8606e1e5f898", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000300010069703665727370616e0000000c0002000800030000000000"], 0xc1}}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x4, 0x1}}, 0x20) pwritev(r0, &(0x7f00000000c0), 0x0, 0x11) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r2, 0x3a, "01004a", "c2e8114c9fabdc7b18892fb3721d5f35cf4ab975e3dcfe07d25a1fed381227c8959c1064d0041f267db62e55432be4858885f0f36353fb1bdd26ba531188ded800383ed29dfeade351d0910dedfd334274a2507dd4763142acbe4a8d1fb6c76dbda1b2ee22f5a4f3193dd1a7454f31b9d382dbb244431bb2fc75897e1741298a2425004ff807413b18d2cf13c3aa4ce2ecf79984e6f97ae46af5844a223bf83d3c52550ce29381c6f3820853910a3dc246c7959ea4d79c09beab879bd5b23a66d6d94a3e0c91151865b4585f04ba8439c74565ee1d0eb1e6034b56e3a7a7f048d43113562d1c17918919373b773f42889e7303c2b9bd9315b2270cf9f07e61e7"}}, 0x110) 18:56:17 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="9ce0d6a9bd090000002470") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:17 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x103, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x40000000015, 0x805, 0x0) close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) [ 171.797947] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 171.815717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7937 sclass=netlink_route_socket pig=9714 comm=syz-executor.4 [ 171.834937] FAULT_INJECTION: forcing a failure. [ 171.834937] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:56:17 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x17, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000022000000070000000000000095000000000000003132458e4c89384f970e8f17ac089a4721a94901c36a19875b01358605c4c7b29da2a7067bb67bad0e706dda510e56ecaa21024019132bd29188e6f8d052fd59f6a9a75d851410d0756742195dfe257d6aced9af819935aaf011ec3331e5d6972b967f4aba2c7383edfbc5f23ae76370eb023152fd2db14a217934ee8855ecea83a38ef1d95582c6bff9ec8fafe6f49d21d2f295b9a3dc845918b8a79fb2c8d33e1967c3"], 0x0, 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x3a, 0x0, &(0x7f0000000040)="e46acdfbef24080200000a9386dd6a00000000072feb3014cdc7dba755c1ff10000040501e66ef4635b9e13800810dffad000000e8d52c008864", 0x0, 0x2}, 0x28) [ 171.878834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7937 sclass=netlink_route_socket pig=9714 comm=syz-executor.4 [ 171.898502] CPU: 0 PID: 9713 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 171.905577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.914946] Call Trace: [ 171.917553] dump_stack+0x138/0x19c [ 171.921202] should_fail.cold+0x10f/0x159 [ 171.925393] ? __might_sleep+0x93/0xb0 18:56:17 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 171.929292] __alloc_pages_nodemask+0x1d6/0x7a0 [ 171.933978] ? __alloc_pages_slowpath+0x2930/0x2930 [ 171.939018] ? __alloc_skb+0x3ee/0x500 [ 171.942916] alloc_pages_current+0xec/0x1e0 [ 171.947251] alloc_skb_with_frags+0x179/0x4b0 [ 171.958190] ? __might_fault+0x110/0x1d0 [ 171.962612] sock_alloc_send_pskb+0x5db/0x740 [ 171.967103] ? iov_iter_advance+0x218/0xc60 [ 171.971440] ? sock_wmalloc+0xf0/0xf0 [ 171.975245] ? _copy_from_iter_full+0x1c6/0x6c0 [ 171.980019] packet_sendmsg+0x151a/0x5920 [ 171.984181] ? trace_hardirqs_on_caller+0x400/0x590 [ 171.989215] ? _raw_spin_unlock_irq+0x5e/0x90 [ 171.993727] ? finish_task_switch+0x178/0x650 [ 171.998247] ? finish_task_switch+0x14d/0x650 [ 172.002761] ? switch_mm_irqs_off+0x5e1/0xec0 [ 172.007281] ? retint_user+0x15/0x18 [ 172.011013] ? packet_notifier+0x760/0x760 [ 172.015271] ? retint_kernel+0x2d/0x2d [ 172.019169] ? packet_notifier+0x760/0x760 [ 172.023792] ? packet_notifier+0x760/0x760 18:56:17 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f0000000000)=""/55, 0x37}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x3, 0x5e) [ 172.028035] sock_sendmsg+0xce/0x110 [ 172.031762] sock_write_iter+0x21d/0x390 [ 172.035828] ? sock_sendmsg+0x110/0x110 [ 172.041329] ? iov_iter_init+0xaf/0x1d0 [ 172.045313] __vfs_write+0x4a7/0x6b0 [ 172.049035] ? selinux_file_open+0x420/0x420 [ 172.053450] ? kernel_read+0x120/0x120 [ 172.057364] ? rw_verify_area+0xea/0x2b0 [ 172.061430] vfs_write+0x198/0x500 [ 172.061442] SyS_write+0xb8/0x180 [ 172.061451] ? SyS_read+0x180/0x180 [ 172.061460] ? do_syscall_64+0x53/0x640 [ 172.061468] ? SyS_read+0x180/0x180 [ 172.061477] do_syscall_64+0x1e8/0x640 [ 172.061485] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 172.061500] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 172.061510] RIP: 0033:0x459279 [ 172.068505] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.068519] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 172.068524] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 172.068531] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 18:56:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b60000000000000061104c00000000006200000098c5000010bc3ef8b858d60d"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 18:56:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x60000019}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)) [ 172.126752] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 172.134031] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:17 executing program 1 (fault-call:7 fault-nth:17): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:17 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0xfffffffffffffffc, r0) socket$inet(0x2, 0x7, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:17 executing program 3: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x8000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x2, r3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 172.245771] audit: type=1400 audit(1560192977.446:17363): avc: denied { block_suspend } for pid=9741 comm="syz-executor.2" capability=36 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 172.269207] FAULT_INJECTION: forcing a failure. [ 172.269207] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.343865] CPU: 0 PID: 9751 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 172.350941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.360340] Call Trace: [ 172.360362] dump_stack+0x138/0x19c [ 172.360377] should_fail.cold+0x10f/0x159 [ 172.360388] ? __might_sleep+0x93/0xb0 [ 172.360401] __alloc_pages_nodemask+0x1d6/0x7a0 [ 172.360414] ? __alloc_pages_slowpath+0x2930/0x2930 [ 172.360430] ? __alloc_skb+0x3ee/0x500 [ 172.360443] alloc_pages_current+0xec/0x1e0 [ 172.360454] alloc_skb_with_frags+0x179/0x4b0 [ 172.360464] ? __might_fault+0x110/0x1d0 [ 172.360479] sock_alloc_send_pskb+0x5db/0x740 [ 172.375268] ? iov_iter_advance+0x218/0xc60 [ 172.415427] ? sock_wmalloc+0xf0/0xf0 [ 172.419408] ? _copy_from_iter_full+0x1c6/0x6c0 [ 172.424155] packet_sendmsg+0x151a/0x5920 [ 172.428294] ? avc_has_perm_noaudit+0x420/0x420 [ 172.433762] ? trace_hardirqs_on+0x10/0x10 [ 172.438606] ? save_trace+0x290/0x290 [ 172.442404] ? packet_notifier+0x760/0x760 [ 172.446881] ? selinux_socket_sendmsg+0x36/0x40 [ 172.451882] ? security_socket_sendmsg+0x89/0xb0 [ 172.457404] ? packet_notifier+0x760/0x760 [ 172.461885] sock_sendmsg+0xce/0x110 [ 172.465586] sock_write_iter+0x21d/0x390 [ 172.469635] ? sock_sendmsg+0x110/0x110 [ 172.473601] ? iov_iter_init+0xaf/0x1d0 [ 172.477564] __vfs_write+0x4a7/0x6b0 [ 172.481352] ? selinux_file_open+0x420/0x420 [ 172.487764] ? kernel_read+0x120/0x120 [ 172.494548] ? rw_verify_area+0xea/0x2b0 [ 172.499822] vfs_write+0x198/0x500 [ 172.505034] SyS_write+0xb8/0x180 [ 172.510323] ? SyS_read+0x180/0x180 [ 172.514556] ? do_syscall_64+0x53/0x640 [ 172.518610] ? SyS_read+0x180/0x180 [ 172.522331] do_syscall_64+0x1e8/0x640 [ 172.530346] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 172.536404] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 172.546984] RIP: 0033:0x459279 [ 172.552365] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.562277] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 172.571315] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 172.580924] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 18:56:17 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x200000) close(r0) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 18:56:17 executing program 4: getpid() r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x7, {0x0, r1, 0x1000000000000001}}, 0x18) 18:56:17 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x103, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x40000000015, 0x805, 0x0) close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) [ 172.594931] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 172.604269] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:17 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$TIOCCBRK(r0, 0x5428) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:17 executing program 3: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200000, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@local, 0x1, 0x2, 0x0, 0x4, 0x401, 0x9}, &(0x7f00000000c0)=0x20) r2 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x6f45, &(0x7f0000000000)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000140)={{0x0, 0x0, 0x401, 0x3, 0x9}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) 18:56:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000000c0)=0x3a04a497, 0xfe5c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000003440)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003600)={0x0, 0x48, &(0x7f0000003580)=[@in={0x2, 0x4, @multicast1}, @in6={0xa, 0x4e21, 0xffffffffffffffff, @rand_addr="767e81cb597f6d2ddef188d3a46deecd", 0x7ff8000000}, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x9}, 0x7f}]}, &(0x7f0000003640)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000003680)={r3, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000003740)=0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003540)={'gretap0\x00', r2}) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="bb74c56dc556aad5e2f07a834a984f2f260cca1984a7baea00a0f859b41912e88d84cd82c50bd22ae39befd3220bb9da1b603178e1dbfef6708f6fe6a96c386971c4c6f74b7d8ba2132211e3b9980603e83ed6568e9218aa71e049900f77d19b4bc432a41e1f23c2db9a517e6b023b2c3501629cbde9afb422525203e2e9ae77800bfe411176dd8335342872e5f8370a985fee501abf1a99afbb6a40e5acd6bc94beaa81619b00dc5947e722398dc6af11e024f1da67064fd92bf86c618f427e2280728f8a340f0a2d4cbbe5f6b27a446979b36b1be7897c98f4ee1100ca976d27aa6dcbb5d691b96eb8ae6dcbe3b1fd0989c4fdaf769fde67e4ceffc2e051"}, {&(0x7f0000000280)="66d3e438aa5819cb81b2eab53a0ecf7b7d7b70dc7497d0034839f4b02c297e0f4cde4864af43e46aceb71e0891ade17ec1b9c9743ac1aaa6a2ea47b45a4245aa87b24d1e92e840c716426200e15dfd24b69bc66e1c3801e57034a969a7d0a5779e5710299ab1608e7b90d3e441ab1ceb9d46ddc41cc538ca5267b2fbfb616570a6ec45a777aba143083c33f8c96801b511b53715e528f80e3015f04e0bc2a68718a81e862469ce27652db922f3df69ff15833f36598d"}, {&(0x7f0000000340)="9d08821b1f2064c9db8d385c3c894b85c8e39e980e3bdaf375694cb1879f8a7f8c10075a5bd2d27ac6e8d31400010a25c2f7c5609587cdf03a51bcb777b10646edbc77fa46c111e2c018e4b09302a0cd0aa79ffb21e429c62212dcf0032f26e59f2db920a7fb83c10fb764e7f4d7c63f7c1d1f69d18baccf8d29b51656cb8bb84e477569f7460db1734760a13d275bab57a504d3c88277a66dd4d3496bc72f10b653b0009cd2c2917cf27143fe287c"}, {&(0x7f0000000400)="f999cedc709122ffcb149b5159e730a9e5ccce30e96d6352afee0060279d74726cd517c196e988c7439de83b1129b1a86b613a2dc8ad5c33c3b7f94b09f2e9aef751f3007cdda63a3730954917b875a48abd3fa49ca334a262f93427cc6f1a9f44ae5021830186c43dec7e8fdb4e68b19116191a3a1b04ec47cfe6bbc8fc65844712f2bbc0239486036cc3bc6b4b0a6ecd81f553314e52d5529810be98297f7a83260c27e603bd271f3489befa0c2f99e91e1da156b9515721e61d4fea0bdb52a7fe8920aeefddf641e17fe9"}, {&(0x7f00000033c0)="47b58c91a1efe9aa1f5d27767cf8778463bb6e850e79f98332f97273800a0a61e9e63e0822f55b6e38f6cd647ee94b8ba57f2c623749e1fa6c8dbecf18503e02596609130271b55d"}], 0x0, &(0x7f0000000580)=[{0x0, 0x11f, 0x0, "4df1a236d78c7199a60312e428ccaf1ac2494936a65a2bdeaf51538cb289c95f5ee46374cb4ffcb9debc3d9b5355c7f76a9fd4eed0d5e99024c5a88b5ae635da2a41e280f8bf2831fe7a3322159ba513c1c76f462e3ce98ec2971782617afa17ce2bef5319d270c7f5ebddedb38f09b879d368421aaa6c3aeb2298042c62adebf469b58d882fdf13016d36310195a34771f0c190f5835cbdd444c2efcd31f859f794cc239d08a886a8cf761be3ac"}, {0x0, 0x84, 0x7c0, "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"}, {0x0, 0x84, 0x3, "a07869a779aadee32efe3225778c63a195ac534d3323fad0a8ce4c678d486c85"}]}}, {{&(0x7f0000001680)=@in={0x2, 0x4e22, @multicast1}, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000080)="a9c8bf591ed42006d4306e764dd91bbe7d4343e1fda7489d70ebba2e908e5e679472"}, {&(0x7f0000000100)="a1b70c93a0e06e66af56a420bf149ca3e002b92703421da9488ff85c76e8094efbc2d6"}, {&(0x7f0000001700)="362bc3fdf93dafd2d7124bac1827be93509bd50927866f5a4f7bfb11403070882ed86b4b8585a5a128d87adc95f0227d6f148f502b64ec4339c84db91065e028e390797b49b3d5a3e42c24ff0740406874bfb72c28183652575ca7d3cac1cef8a0871d0fcd224c18d6130183e81a1119a69ae1617686c9d61164d1296c7ec891b61b428bacd0f19f213d10a16b9701b4cfc05af7f36ea92f8b04f1a03a9be381ddc14c1466276ec1eeb07c9904f3bf201541a12b7987fb7dc2f2583cc530df45b1b71012998c4660535fc1a602612485b3402db0879fae00"}, {&(0x7f0000001800)="ed583bdeb022c7dd3bf6e8e6614a2c2e7bf87ad49fe4729b199b210357609f43736b56f20e1339d0e4d5b30b4a7eea2d9939f652ee0648eb41eeaaff3adb0ebac66e6d194a885dbffc0856fee4c8a372268bacf9fd2b3b093d723827fc6b1b7569876f446ee52bee7febbee3090dac84078391972598ba5246de388c04b4e3ad244eb3ed834b5f020c08ed87a855ec07c7bc196cec1e"}, {&(0x7f00000018c0)="fc996ca1812f2bb89d79d734c2b4465873877747edce6f04df1286763b04283e8d3d54e1df68178e3ab4393f50d5c02225cfeab607e19c687e23f39b61fb2658c41428377e3f225280fc390c86a5acca1922b77b9688ac31ede5f885df82d66c01846d9e6c711db02d3af6495d243ea3d0271717a8074c74d0863910d69a5341dc8c9439ae7d50294ca148200772ba089fda09de5a8e7226a5be67b069723ff28d9e726568530b346e6965c93cdf64a9bf32ede03882575836592747db16bc27917b1a6c086a5b7fb92b8d6864da91ad5d324cc39f4c1e2f908bb161182dbbe6db61a7ec58086e5a8ea169cd515bb84c848e0a6417ff8fc6"}], 0x0, &(0x7f0000001a40)=[{0x0, 0x18d, 0xd5, "f82da19bc589b0307ea13b9479fb0bc1a9c0f74648510572bc60cbb1103b87806ac03b6907b47f71f262e1380e04671fce7b1daeff0802e93a5b214113aeb5672a4d1b94227f0af3"}]}}, {{&(0x7f0000001ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x4, {0xa, 0x4e24, 0xa5f1, @mcast2, 0x5d}}}, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001b40)="0817d122aeba684a4d82ea2a17541c0bc15e62a89e348f9a58ccd1b2cb3856840319687a85d87fd4fec6c529f90d9692ef18096990ec496d337b82ce70af931509490eb951b30f77dc659837e654f98dcb71da00f42dcf6089ad62e3c08a858399c59be911919ae7ab26d686a2a851e1906f163c9da6f683c8e673d2c5fe346557ce9bde1e7180915d107a967788f5f22bcdd6cec72368a59ea6b0ef659230ed2fdc7237d1f0319f69d85d94420b1101e5d4245a"}, {&(0x7f0000001c00)="7e67951cbb28b6d2bcfe690d02150bd6c203772e1a76728096393af8cc77078ce8b2ae2e7639608444c6d795edc17aaac82ae6974f6c912c362cb1b4c95f9bc091d303f8f30b4d3d816f3f9acad94102fc305e85b90126aa034f6912f77b72ce9182ccc20c7d9850561848030f73b7564716ee557ee3b81d4f0ae29b3ee6865ced726b37e2d927488cdc4d3c480d60136085db82cf434136cd25e0e462fb2d3fa3b08ae3e86132f542"}, {&(0x7f0000001cc0)="95089307d93fe33cd5096548ed330338dadc9f2f0d4d1479e1bb1112b6aacc4f7be65cd9e4630168ca2afc575cad33e55805afed9afd667bd61531b4825a8fa7687c2455b5693ef3cf1ef61de24e480a2d1dad52d88cc1e1cceed1ac7bcf372fdca67fecb4e37f94ac8274c219f91d8a762ca8831e9927c92c636f9f2231fec4a8fdf5a9c77c2caa3937e2217b8a0f299a607dda75793a211fcfd65268a03366343a51fea2cae1076012dac85a306e489db3149c243e430d3a202b73c69771e81debf783fc90cd4c8517ea2a6637bfb10a32c49a4e10f7560797936e94feab04aac12478"}], 0x0, &(0x7f0000001e00)=[{0x0, 0x114, 0x100000001, "1eda6a04a2752a5653f53ee4f702921c63788d269ab5fa3c7e3eb6a0107a82ca982e5fa51195070d60ea4c069b7dbdb35b732dd3123d73ef51a301ceb336df672fca0c5fe6d0d979bd1161a6bbed360b1426c900969e612b0ebf7ff4358f9b954b85de62cc21b359a479b7a8ea311bbfb894feff634884743fb2"}, {0x0, 0x117, 0x9, "9a56525aaab7d91ae894fba8e8ac3ae12f13bd41b45861caef08cd8bcc659b476e2d1c0fcc68cf5157fc46fb8b911d444ed7ce642ae1d8373cc48d6192e4d06638e79d3016e596c7c33e705da889d6a09c6c5e83ada1c2ad00903e602478df36abbf4485e69b2ef03eccad7285dc8cc534a846c299c4ca9a46b274634682b54c847541f397a9a3c676edb1de9a7d1b0bc98a5b7650015644a8f7ee7e05ebf4fa5ae8a732938dd456fea31fed3a20df444efa8f79"}, {0x0, 0x0, 0x72, "e5980bf5179a37de804f0bfb43407b9050e7e2b6131aaf8a37418a1ee8644bb8d754e37fff9420516d52d8cb982f9d24c5c29ea12b19a291adbbe0c50ebaeec5e2127845039586f6"}, {0x0, 0x1, 0xdd, ' |W'}, {0x0, 0x104, 0x5, "473848aaead37269dabc5a977049b0211a048562fc3b05ea4b1e99612a64a8de69aa0630a3bd35d65ca76f6ba034e07e98b3e6cd9320a4d9fe90e54eb49c062ba86fc76698c2f24cc3f4acc5393b56ce405b6355f87c680716b80068670df0605206ff56c71699eb2c6aceace7afb54425802e8cd553ce6004d434bf8a64f337a1594fd6c57ca2c4c8edb69014da7589e785c8a76ebe1dbdf30c16afae51b2d56ff03ba402260d2ebead9f344c9c88bd91c53381566139f16e3167536476621be695f35d0c0d660fed6f2e441d3b4bddd9de720add"}, {0x0, 0x11f, 0x0, "d657a6ae8b04ef9849399e78692d1c98f550ec34553988c4103f19c989f468e14d86dc993a6863b9423b04f8157f9f47cee60c15e232e9cff2ea32059435ff7dd0a71556df7fa2f308cb7de91c3ddc690d4eb418fde813478de23923d2e333330938273ed77ef4e725e0f79d49410dd78384a74d1b5417b2fc795005a1f115ae897f65c5e537586eb54663f29e0ea4a1ddcebaf1f87123682e5b0e799385ab5d67ccbdec386528c812a51d32eec9d73ec6ae59721d6571c97df4f1395254c092440c2d545a4bae32d8c322332e3f9aa49882679bebd7c904601497921f3e0a153a7475ee0addb7e51e1832fff37e26af1f4fd45d0ebd5496661dc2222640d833c7193d71495229d6959eba95b510a14bc565d166d83bf91f3b249de388b213b5a4ea67876c34b9d7d00c835a44194550c40399f649c59fa54361236844cd56f32a4de6a036339f3ba7bd8262a2b9fbc21c71d22ff8712c5dd4ced938d8e11feee252524a9ff3451c81ef3c637f5449e9362ab47e40ea0442b512e15073917955816d571ab6f61071496cc20126bcf69b1185ba6ab03055f2d0e0aa0cd008b8abd2818befc8541992d4ce90eff82c38912afbec61c537f50d17c741245d96399ea45e704cbfe1591e8eb630470892b023e83d89955c7004af9a3fd0129381459afa5f990086174297b148c34dd744bf38a210c8434e0fb1eca5a87d253695d77585e4cb7622d7aa0a267bf738ac0ec5a0da35d85a2f3d5f408643f06c6a2400ddf0c78cdf9597e8995387c026a019774636fa4ca178db65212b3483e6752aae38add11000063734cee9609c6f451dacc9fe080964730d251e080252b3bf9f84d119c21f5e33e709759773464266f47a143ece87a88327b7555c9bb8c558e735966f13c4efe7a3a4477db90bf6cf12d8483b8e833a4ca0c5035c7c7157362639c64226db99ea52245ebd4dcac749ad71c5f9879989d8dc9ba6750df162d22c5f42ca5139c4dfb91f1aee0e648b656b6ebc234bac8ba0d7935597dfbbd2391d4139a24d036ecdb5dfbaf5fe326f2038222369b4519172a98070f3c0c157d282a126055ffc01a876d7c391c2da6cef0ed39e23de57e9dc94a028ff18b5498c6ca10aad088a32a5de6f3703a8771eac05c99860576277b75e9c49adeb1adf65ab2fb2bbabe9577e30c083395e3477649cd9ce87812e1fbe5acd9aebac83c3af1e5173e23b7a53b79de3babcc29807c361eb4937eb29f8992c0744993556cff579aa1effa655f3dc3dff8762e0f5fcdf9d37f99a090a0db48749e7a8a1214fc426060396222eb96decdb6dc0dede141132e856381556d40b16b0f92c9685a2a8699c53184cd1397c1df91d95b17170b61c15966c7ed079aee4fcd42dcf5ed71cdec0f02a7b656382b149ddc15ae0e18e30b952bf5db8b39e22a7af9aa00a0377d8e3f4a5f4a419e68b3b553e83b0ba830b14cb22f1c1c2389e84ee8ad3e6380328ac77fd942b16ca35b22edf3060bddc3d908947369de6a3aa8d0a77d4ba0ba0f19fc3f7f958e88ff9f64e917038f12424e3d1c283ef3766301c662cb6846b0c3c125eb253f850f66964f416e2e430d275be2ca9bb95a99016dd6afeac2f032cc33edb10c4cabe9082c55acc5a5bf6e86cc0e1194b48cece425e2bbce5c66b278ed6e5caaa0a1045e85532484510676d70ef040ca086a2c6920ae36f12929eb495030219587389bc158c486c73d9ec97227ddb229ff45560347355b84d77c958ecb385aa316eb81d522b7a8d38c62ee9f527fc7eadb5b20347b4a55a33b11708c8f6fc799bf7a206c38164fc646754b0e99edd7b3f7d7cf58132b16330e683e6e34ede1d5bb5a17c57b972fdef5e4ca371e5d0c3a920cbed5e8b490e9b029adb1e7632d74aa46a9b82648209a943da43c2150878488bcb921069e90e53c70a74c54be931bf8498ae3ef4ae2806237379e0da363d093dd4e49791640ccb2c719d737f6b3433ed3b87004ee11276cbdb08f55b9e32723c811d2ccb7345e73ac1a2181f7c8d02a3c7fe8fc69889f15c2b07005c5e66f9cac86a128340dfcc08bf85bee4d23f86f33d40aa4dc7a6081955ff9fdf3bed42500cb6c35a267dc242cf6541417d817792d19260bcd535ad4a576690e64d8fb43e223f663ad41baf878a54eff9bd1fac67229edeb474843947c349f01e2f11cf6f02b9b7bcadfb82060fbd4c3db6294d78fa9aee9fc762d4a09d9ffc7abb5deed46485782ce6415cc67b2a6461104b290da27d363c4da3ee7d90ca9471368f90fe438d4231fe2214adbbb326b7bafd1d627156ce65a86dbf0d4b1689916ddaf281bd36322c7e810f3f269c2658d8ca6820070a96c670946d8909ae2dfdc7a2d21a90e5140bc5b5cc816bcda8b953988b5bcb7b137a5de47ed95ee685e9e2ff7c3a09f71bf5f24f0e5c69671a5f0fb15f4ac031cf079a23c4fdda3544ea8d8dd42f84541e154c73d50b46193d7aefffb801e18e7c1e2680d8b92a3c26235bc8c9456013f18c78bbfc1971e53d75b1f79ac4840b949883192b17f4fb44f4055da54f2eb5a8c2248616d7fc594df2378784592c1746ff2820d56e9e323b285f551ea2d82e0d445715da9df989528124eccba6f1b7b1f3b91e088ab0705261dfbe01db10ea32dc968055058559c090ead1873304060ea72e628a685ea5510433f97b9958f3887fc8d85342f42f6467afc99093fd15f0a5296ee05be29782f61c82eb340e6595e0d40b970764272560d511463cb6134997146ff9a7c42ee3b1319b2356eddce4fd89b0ab894d24326f1ba18415e947ebc91df97282d54a42509d18ee342e58c33314664f359a4eb4b01fc17b0fb784a2ff27c23fb1143c75dcad623b3a1f0d5aef630dbb9a5b435ba2b05e6b9044efd989166918272072429bdcabc1632e978fd5785022eb9cb2df17338c51e38fd9036f682da06bd79b3888e07ad8910fef716c7cea63a4d4df74b8a9d7e7ef3539eae37a0560310489709f11d82beee557f2860e69a593dfa06a0f808c252479ef9fa760d0c8194e7577f0a1ba4189ecbbc3bca3b1699926aae2072d81727634479250e29d79f0e2f0a91fc59e9df5197641d6e786355c8647f89242458f8eb144a2e284c28827d1f8985bf0650f8acaf94447ba281cb55bebe69eaf4efe94acbc418c6a48bef79fd6b69f4a0e23424c1c746a4b2d38981efba31a1b0539f63ec51e34c881ef58e3c84c7b52f1dc0bf5cc9068b5f443ab7fbdf5c87438be07b53288b7d3e2e71980e12c3da12d99758860e4cbd924c6828f3ad1514d3bf58295fe9e29f83c4dfc21e19d6da508bcd538adee4fe33e39e78514152888987cb9208c0d98ed55a48de0fa02d081731c480226c5639f771ed11742fe2197ab9caff97af0769f3a809a8e24946f6d26db53da22b1c42e76a8c4729b67af7726136da133bbecdd792007cc61d3425d4c234ba4418bea66bc3b727a3471cd0b90448fadcb69fbf5ef10e5ccd8a9d8504321a078e4213963d9c80e809288832d77981491d9a173aa44917a5aacef1a982be85688353b0a65be8bb226043e6568dba121573cc19ed82c881b2fa0f1bf9d0639475cd4a5f240608853800928218d992d921e3e64a4d7af9c08da626e2764988eace39a3011687f6b343eb25048df264283bd732902c44ba69bcdd28b6f6a3c6f23db5832b28f4872e84bd591bc2e2018735adaad151123ef4d24faf1c28bc4d39bc67a7b71a6a8efffd03c9cb32fed046138dbb0dbcdb79f3f4459dddbcc590ecb46884f69c6c2261d4d6d3cc8fcbe0a6b2cdd921af1cee27f5fab24472a4fb8235d12a037d7401ef4e7411a7c19453b59848f2506efc6ee40fbead483a5367e2ae6a05178649b82f08637e7296475689b8f178b81092cf31683f8822a3d6e0085d05495442513deb7253cb41d9b0aa11c9d1a861da7deae6da2cf24030306d0bb979913a8240d880f62283333052c94eb8cfeb72ab5c9875a4b186418879d24f88b63851fccf464f7f3c0001e76622c3b6825279a5a27770a0bf4529a5602688ea031de752ffde3c59670eda674a332aee9f98dfa347ea156b09751e4ad0a2c0d40ea42630a55cf6e0a1ac266fa49cb89ce4f324f538dc270e0fd7a3ee0c8638dc11da78900933a2e7a16aa2a16c1dca3c9e4b248a514bf47feeadae1d0b89342191b2c76582ab6679475d3ade0a609d8af6bab8d8c7bceffefea119bf0368e3d804af3c47d0e980582fa0c6c2e42e678a4d716f1b2e43510151aa6555040c942bd41dcb9f7b2f065b2eba8fa5151dca1b98b4073be451bab18f87e1169bf55465e2904ecdae25029a2149d309448957e870094089835f355e70b01837726cc0dcfad371b037dd708edd49b918f20b2b5d12cd730635e6ebea3e2db98495eb8b471a32f8c58e6d99d0f4a59bb75f823c0cb62d0b7a1b818136688308aacaeea8f838feccd5abdd2215fd8b8df7edb9d4b4ba48e1a12a65da9d1794126fe89f6af23fe619acfbfc2002330465965224c2001eb1f6cd5a62f07010685146786e5b7fcfb97419018fc0a1d90a70902e82bee1dc6313d9a4778da6186385f71b442d0532bdd51367c7a9f3b8c9d4088f597c6193025c07c1d4edc5f5fd5d8c53d0d2c01f440ddb3d901827e51e2a2135aabf61f505bcd88d9325010d732d24a097439b459c218b3dc3a03ec32759857a418d9d5842ff4b3c8234c137697426713727c1ed979f9a31a25798ccf3566f8dfc15c255a2e4147f7945a016fffd80090a5820a6671fd44421594fb580076a3eb7b56cff7c1d76a07537c6d334e5dc146b3bb5ade0af4c429c77a3c99bc35b7419a768d3ab9a296e2171d39c3f03f7da2d328afd1c35b0e769d516ad198b7892bc55ed54a99bbc246cacef475cb9c5cceb1ec52df604f69b96cc577eeacf9b89a35cfb189f6ccc0326eaca16f7554142ef56cd85f293b9369b683f523ec33a93d3d111f857a31dff9ec5b9db6ca7d09eb8258e3c1ba2554b64bc9f20a8aec9aa2e1d611b33ce6f17220006d5832b25ba79cc4114bc7b3f83e40c7c6e484137953e224a55fe64f9381db2aedfdce66cee5e29824c848ad024ccea54720e3c6844d8c175335ca2bddd92b3a93322486a6c1217f9d011425f4375c4745a96a512adc315f0d4bd92f435fee2e8d7a6a6936f831da7fd4e49bbabb30f5910a63e2a557c53bbcefe6a32ab77eaf863e1c335c834e6a24c555bd206eeb04f2d55580602f57a555870127b97d354133456ae21642e0360205d6f1a29ce3d9184e314094808e7c4e2296020881cdd24da87859a8a229b85e9e5650899253cd855a4ef330b17a4110677a3ce1f01287fc364aeabc9fec6110802049f0a1fa0f8ce30f2fa0550c8444032d90cc83bd4ccf771ff173805aded1a9f5cdfeee7d3d901461359b8695b98b428961fb7019a24dfe43f5c7bc23355082b11dcb0d2117b68a3e575c65abfcc94a89c5ca51282e041cf8a904917a8d0b94127e04df5ca98c76d538e052b841d0f9ce9cff26886d1e787cb45b9e16e6b8d0638d0c7d62da600312c10d4ed2075eafc89864dd08446c294ccaf617d3e31435e88abd50310a7ebca415131ee073c552069cb4b4c8ed74f2ae551005b1620bc784456acf12309a33bc0ecd9298af2dc4dc41f9f518500d66abf387483be95b59165b2bcffc0a6b09dd2f9a4219b7f21840ed33a1b08d91769acc9604da2912d4c388b37f417c5995eed31581fec1aba93ce290ba6fef8557806cfd51415e63a55397493849353b7b71d78b"}, {0x0, 0x11d, 0x7fe00000, "f36e19b57d1ccab2f30ec53a31ec3205cd42bacbb39016b869becd80084743debe8fbd8470de7b161a1b388f09934be6678b41487a04f125dfc902bf2930df7d17c98c97acc6da40ee4e51a38cf5073dc3bb469f1ff60fe8a850d82f69e0a6f0e7f6d0a65dcbe433824f644fefd117822e2719de60c563e98bc43da3424bd7359d7d75d978fad411fc0e97de44d83142"}, {0x0, 0x116, 0x401, "049df206ff6c1883126097fd2aebaa5b7049514a4c84f7d841fc4113aa7e8348883d39b3e9ad3d7c48d5605b1fa5a362e6f6fafbeea92fb013fb7d06e8c175c2c4770515f5b701c6829bde7e7394883db79815ec8cce8f80faa75b18160b97ddb3d41a7ab561aea9be18fe48533b2079fbf99a27ded203d694f15f0ddd39f0451025ee8b1f66ddc3db15a33210c8f5a2ddb0a99c4f620293eb143c613963e99357817c13a5c439353616"}, {0x0, 0x10d, 0x77180fac, "0c16f8a837f4e23b4d949854b12a73133ef7bceb0430ff5edb1686c54552ecb140596c281c0c61876c5df8f463910f3abb2c5d65a5bf92173b13db239e8f766e76437577215d7e1b8713929f7748291d8f1072034508335ea3bdc6ab41d906cac74baac575056f57d3a83b3f691e30982cc0ccba9144b4fd40ec9d5057935d729083e58a15240d1a96113b0700ad50b5f73459654c18195ba97ed24597aea5e5c5a3"}]}}], 0x64b, 0x0) 18:56:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "b8422aacb0b5ba8d7a59b83b448589c6"}, 0x11, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x3, 0x1, 0xfffffffffffffbff, 0x7, 0x1}, 0xc) ioctl$KIOCSOUND(r1, 0x4b2f, 0x70) syz_open_pts(r0, 0x0) 18:56:18 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x0, 0x0, 0x1, r4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000039000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffe91) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x200000, 0x0) getdents(r6, &(0x7f0000001040)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000002, 0x0, 0x0, 0x1, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) r8 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x197e, 0x204000) ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f00000000c0)={0x3, r8}) 18:56:18 executing program 1 (fault-call:7 fault-nth:18): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:18 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000300)='security.selinux\x00', &(0x7f00000002c0)='system_u:o\x00\x80ect_r:hwdata_p:s0\x00', 0xf9, 0x0) 18:56:18 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x100000001) unshare(0x40600) r1 = timerfd_create(0x0, 0x0) timerfd_gettime(r1, &(0x7f0000000280)) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x3, [0x5, 0x9, 0x8]}, &(0x7f0000000140)=0xa) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000040)=0x3f) [ 173.045634] FAULT_INJECTION: forcing a failure. [ 173.045634] name failslab, interval 1, probability 0, space 0, times 0 [ 173.057418] CPU: 0 PID: 9808 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 173.065312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.076401] Call Trace: [ 173.076429] dump_stack+0x138/0x19c [ 173.076444] should_fail.cold+0x10f/0x159 [ 173.076458] should_failslab+0xdb/0x130 [ 173.076469] kmem_cache_alloc_node_trace+0x5a/0x770 [ 173.076479] ? kernel_text_address+0x73/0xf0 [ 173.076488] ? __unwind_start+0x1f6/0x3d0 [ 173.076507] ? __kernel_text_address+0xd/0x40 [ 173.076520] __kmalloc_node_track_caller+0x3d/0x80 [ 173.134246] __kmalloc_reserve.isra.0+0x40/0xe0 [ 173.139425] pskb_expand_head+0x116/0xc10 [ 173.143562] __pskb_pull_tail+0xd8/0x13c0 [ 173.147704] ipv6_gso_pull_exthdrs+0x233/0x450 [ 173.155810] ipv6_gso_segment+0x2e9/0xf30 [ 173.161379] ? sit_ip6ip6_gro_receive+0x100/0x100 [ 173.166733] skb_mac_gso_segment+0x253/0x520 [ 173.171139] ? sit_ip6ip6_gro_receive+0x100/0x100 [ 173.176076] ? skb_network_protocol+0x450/0x450 [ 173.181692] ? netif_skb_features+0x579/0xa10 [ 173.186350] __skb_gso_segment+0x301/0x660 [ 173.191497] validate_xmit_skb+0x495/0x9d0 [ 173.197281] ? check_preemption_disabled+0x3c/0x250 [ 173.203581] ? check_preemption_disabled+0x3c/0x250 [ 173.211954] __dev_queue_xmit+0x8d9/0x25e0 [ 173.217051] ? netdev_pick_tx+0x300/0x300 [ 173.221974] ? copy_page_from_iter+0x4f7/0x720 [ 173.226912] dev_queue_xmit+0x18/0x20 [ 173.232386] ? dev_queue_xmit+0x18/0x20 [ 173.238864] packet_sendmsg+0x328f/0x5920 [ 173.243346] ? avc_has_perm_noaudit+0x420/0x420 [ 173.248375] ? trace_hardirqs_on+0x10/0x10 [ 173.254222] ? save_trace+0x290/0x290 [ 173.258740] ? packet_notifier+0x760/0x760 [ 173.264508] ? security_socket_sendmsg+0x89/0xb0 [ 173.269859] ? packet_notifier+0x760/0x760 [ 173.275600] sock_sendmsg+0xce/0x110 [ 173.281057] sock_write_iter+0x21d/0x390 [ 173.285710] ? sock_sendmsg+0x110/0x110 [ 173.290644] ? iov_iter_init+0xaf/0x1d0 [ 173.294610] __vfs_write+0x4a7/0x6b0 [ 173.298322] ? selinux_file_open+0x420/0x420 [ 173.302815] ? kernel_read+0x120/0x120 [ 173.306781] ? rw_verify_area+0xea/0x2b0 [ 173.311608] vfs_write+0x198/0x500 [ 173.316447] SyS_write+0xb8/0x180 [ 173.320581] ? SyS_read+0x180/0x180 [ 173.324211] ? do_syscall_64+0x53/0x640 [ 173.328270] ? SyS_read+0x180/0x180 [ 173.332334] do_syscall_64+0x1e8/0x640 [ 173.336230] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 173.341601] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 173.347063] RIP: 0033:0x459279 [ 173.350779] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.362497] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 173.372833] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 173.385715] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 18:56:18 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x800000bf) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000240)=0xfffffffffffffe00, 0x4) getresgid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) fchown(r0, r2, r3) [ 173.397094] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 173.408099] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:18 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x4}, 0x2d, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={r0, 0xa6, 0x40}, &(0x7f00000002c0)={'enc=', 'raw', ' hash=', {'md4-generic\x00'}}, &(0x7f0000000380)="95e55745319008c22a6e5af4d7f46848fca386aee41c79112dd80289d1407aad4dabc6a819b92c5d3f8add6ed703426ac2759f6beddded24f6cc6208d1c750192a23bc77ef9876ca754576bd40185b9949513187ae10432fa9af0f73dd18a67a2c6a0c52c3d95a67ad1ecdfbccae09d743c666cbf579b763916a3d5849e72f46c508a0e3d7ae9d9b095afe235d84a340466ae19536a91b703d95b85006504380f2d9fa795370", &(0x7f0000000440)=""/64) add_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)="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", 0xff, 0xfffffffffffffff9) add_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000300), 0x0, 0xfffffffffffffffe) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x40000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000540)=0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000005c0)=0x5) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000640)={&(0x7f0000000600)=[0x9, 0x1000, 0x3, 0x8000, 0x4], 0x5, 0x10000, 0x6b2, 0x5, 0x8, 0x80000001, {0x400, 0x9, 0xe69bb62, 0x1, 0x401, 0x7fff, 0x5, 0x7, 0xff, 0x2, 0x8, 0x56, 0x7f, 0x8, "9e8d9980a63edc84b6c9e3b0d491126983e93cbddd5ac2fc376e35fc9c788f5b"}}) prlimit64(r2, 0x6, 0x0, &(0x7f0000000580)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000004c0)={0x100000000, 0x0, 0x2, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000500)={0x137, r3}) 18:56:18 executing program 0: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) sched_getparam(r0, &(0x7f0000000000)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000004c0)={0x2000000000101, 0xfffbffffffffffff, 0x0, 0xffffffffffffffff, 0x400000000000000}) 18:56:18 executing program 1 (fault-call:7 fault-nth:19): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:18 executing program 2: r0 = memfd_create(&(0x7f0000000280)='ppe\x00ppp0vmnet1pro\x00\x00\x00\x00\x00\x00l\x00\x00', 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000100)={0x9, 'syz1\x00'}) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000000)={0x80, 0x0, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$binfmt_aout(r1, &(0x7f0000000b00)={{0x10f, 0x10001, 0x0, 0x390, 0x1a9, 0x1ff, 0x38c, 0xc097}, "52e63f7114687c049e33b90f5693343b704538c7771176528c0c089b5f6fda1eae498255e996e0e58424dd9481f1062625d5fd6b0a3fcaeff8e88714495c0f104991efb1fdfcdcf2acbaa060d4bdd680c440453b297ca1be96a70176b9e05278bc0647f6705e47760caaf0ad58be9cfe96d9ba55069762e11987dcc41289a6bcf0e9b831046964241b8b7150860b210743156969a3f55bcfda053fcb21c4846ea49c7e7733c83f0a30b92978cb53d41d252f3b97d9a7d8"}, 0xd7) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000140)="b6561a354a2a26757aad4b5ec0dc3d85ee12c1ab3deefc59f25565ec93d2c10ea49ac9cfc9920143d23d146c873cfb32b082613ad161f5a8f00eb97957672a3f4513191d442b4d01e9cb1e28ca8358d141a12bceefea5ac30b54afd987365f6920a6080b858bcc9b2b416fd5c481fb5e418d0b59cc3a74ce18bb7d672480849115570fc51dfc1d9c11622c020519c17ac618e66dedcda014dde96267a9ca533516329e606eae8b34b962c6b691353ca86380878efea1c2d1d72268bc8e6c946dc36f2a8c1f3f92eb2931adb8b7419a31e6bf23b43791d1d4331cb1e86f97082ce28e88d853f74d0543a0a2b28735d08a63bd462bd138018e3206700f85c758fd") ioctl$VIDIOC_G_ENC_INDEX(r3, 0x8818564c, &(0x7f00000002c0)) 18:56:18 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x200200, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="00000000060087fc64721abf137c2beb00d9dc328a673c29b4b65cc6bc92a299518b34b11363891af5cdd6b63aa11f3bf642e87759a7f49ad5ffbcbaa6161a0e5bb8187d3a902bbdbd257ce6dcc540a0d87226bfb7d0330e6fbea29f94f5eb5957b86323418b559a26e92c2fd75c1a310118e9fcb4eca8d0ccfbb747ee73979ed8104adeffd20589eb25c934a9cd1b62d4d7ffc04dd1bea95400000080116d9df7091b63a788149d7447ef0d720ea2a1be3ab34725a5e2b21d84868dc95d8aab8cdf6781cf24febda88ebda6e8c0ff38e08db518727c7943c7afb5312f10f018bc58995143dc8ae0"]) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0xf8a, @mcast1, 0x7}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 173.563542] FAULT_INJECTION: forcing a failure. [ 173.563542] name failslab, interval 1, probability 0, space 0, times 0 [ 173.576199] CPU: 0 PID: 9833 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 173.583221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.583227] Call Trace: [ 173.583245] dump_stack+0x138/0x19c [ 173.583262] should_fail.cold+0x10f/0x159 [ 173.583276] should_failslab+0xdb/0x130 [ 173.583289] kmem_cache_alloc_node_trace+0x5a/0x770 [ 173.583299] ? trace_hardirqs_off+0xd/0x10 [ 173.583307] ? quarantine_put+0xfa/0x1a0 [ 173.583320] __kmalloc_node_track_caller+0x3d/0x80 [ 173.583334] __kmalloc_reserve.isra.0+0x40/0xe0 [ 173.583345] pskb_expand_head+0x116/0xc10 [ 173.583360] __pskb_pull_tail+0xd8/0x13c0 [ 173.612210] ? __lock_is_held+0xb6/0x140 [ 173.612231] ipv6_gso_pull_exthdrs+0x274/0x450 [ 173.612242] ipv6_gso_segment+0x2e9/0xf30 [ 173.612255] ? sit_ip6ip6_gro_receive+0x100/0x100 [ 173.612267] skb_mac_gso_segment+0x253/0x520 [ 173.612274] ? sit_ip6ip6_gro_receive+0x100/0x100 [ 173.612283] ? skb_network_protocol+0x450/0x450 [ 173.612290] ? netif_skb_features+0x579/0xa10 [ 173.612300] __skb_gso_segment+0x301/0x660 [ 173.612311] validate_xmit_skb+0x495/0x9d0 [ 173.612323] ? check_preemption_disabled+0x3c/0x250 [ 173.612331] ? check_preemption_disabled+0x3c/0x250 [ 173.612342] __dev_queue_xmit+0x8d9/0x25e0 [ 173.612355] ? netdev_pick_tx+0x300/0x300 [ 173.612367] ? copy_page_from_iter+0x4f7/0x720 [ 173.661344] dev_queue_xmit+0x18/0x20 18:56:18 executing program 4: pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={0x4}, &(0x7f00000000c0), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) 18:56:18 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x20, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 18:56:18 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x0, 0x0, 0x1, r4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000039000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffe91) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x200000, 0x0) getdents(r6, &(0x7f0000001040)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000002, 0x0, 0x0, 0x1, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) r8 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x197e, 0x204000) ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f00000000c0)={0x3, r8}) 18:56:18 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x100000001) unshare(0x40600) r1 = timerfd_create(0x0, 0x0) timerfd_gettime(r1, &(0x7f0000000280)) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x3, [0x5, 0x9, 0x8]}, &(0x7f0000000140)=0xa) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000040)=0x3f) [ 173.670991] ? dev_queue_xmit+0x18/0x20 [ 173.671002] packet_sendmsg+0x328f/0x5920 [ 173.671013] ? avc_has_perm_noaudit+0x420/0x420 [ 173.671026] ? trace_hardirqs_on+0x10/0x10 [ 173.671036] ? save_trace+0x290/0x290 [ 173.671052] ? packet_notifier+0x760/0x760 [ 173.671070] ? security_socket_sendmsg+0x89/0xb0 [ 173.671079] ? packet_notifier+0x760/0x760 [ 173.671090] sock_sendmsg+0xce/0x110 [ 173.671101] sock_write_iter+0x21d/0x390 [ 173.671110] ? sock_sendmsg+0x110/0x110 [ 173.671127] ? iov_iter_init+0xaf/0x1d0 [ 173.671138] __vfs_write+0x4a7/0x6b0 [ 173.671149] ? selinux_file_open+0x420/0x420 [ 173.714867] ? kernel_read+0x120/0x120 [ 173.723657] ? rw_verify_area+0xea/0x2b0 [ 173.723667] vfs_write+0x198/0x500 [ 173.723677] SyS_write+0xb8/0x180 [ 173.723687] ? SyS_read+0x180/0x180 [ 173.723695] ? do_syscall_64+0x53/0x640 [ 173.723703] ? SyS_read+0x180/0x180 [ 173.723712] do_syscall_64+0x1e8/0x640 [ 173.723719] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 173.723734] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 173.723744] RIP: 0033:0x459279 18:56:19 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000c3000)=ANY=[@ANYBLOB="20000000000000008400000001000000000003020000000008000000", @ANYRES32=0x0], 0x20}], 0x1, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) sendmsg$inet_sctp(r1, &(0x7f0000000340)={&(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x4}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="50f91fd62c4a8a56a58f63eeed8c239debcce4d9e45dece05a8770514388354a70b8af559095a1eff49e", 0x2a}, {&(0x7f00000000c0)="1107036470c4107b0c9271836350a6a5eceaac2511078a1402e999e18471882a666ddcbe7284ce8a21f3a48bf63150336a9b26e531260dc1df4307a25f4522a2c3a450ef4b5ec071cb33c84ab5f2", 0x4e}], 0x2, &(0x7f0000000200)=[@sndrcv={0x30, 0x84, 0x1, {0x1, 0x47110e7f, 0x8000, 0x8000, 0x81, 0x0, 0x7, 0xfff, r2}}, @init={0x18, 0x84, 0x0, {0x4, 0x100000001, 0x3, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x17}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x1}}, @authinfo={0x18, 0x84, 0x6, {0x20}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x1}}, @prinfo={0x18, 0x84, 0x5, {0x10}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x7ff}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x4}}], 0x110, 0x40}, 0x200000c1) [ 173.723749] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.820385] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 173.827666] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 173.834936] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 173.842198] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 173.842202] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:19 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0xef24, 0x5, 0x0, 0x4, 0x16, 0x3ff, 0x1ff, 0x20, 0x4, 0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:19 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f00000000c0)) 18:56:19 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x408000, 0x1a0) 18:56:19 executing program 2: r0 = open(&(0x7f0000000300)='./bus\x00', 0x161045, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, "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", 0x1000}, 0xfffffc41) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8, 0x43a}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x3, 0x0, 0x820f, 0x130db190, 0x3, 0x9, 0x7fff, 0x6, r1}, 0x20) fadvise64(r0, 0x0, 0x0, 0x4) syz_genetlink_get_family_id$nbd(0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x101) seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x9}, {0x6}]}) write$apparmor_exec(r0, &(0x7f0000000240)={'stack ', 'nodevvboxnet1\x00'}, 0x14) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) 18:56:19 executing program 1 (fault-call:7 fault-nth:20): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:19 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) memfd_create(&(0x7f0000000000)='ppp0em1em1\\!\'\x00', 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:19 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000080)=0x4, &(0x7f00000000c0)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 174.286128] FAULT_INJECTION: forcing a failure. [ 174.286128] name failslab, interval 1, probability 0, space 0, times 0 [ 174.297480] CPU: 1 PID: 9893 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 174.304595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.313965] Call Trace: [ 174.316573] dump_stack+0x138/0x19c [ 174.320223] should_fail.cold+0x10f/0x159 [ 174.324475] should_failslab+0xdb/0x130 [ 174.328471] kmem_cache_alloc_node_trace+0x5a/0x770 [ 174.333496] ? trace_hardirqs_off+0xd/0x10 [ 174.333505] ? quarantine_put+0xfa/0x1a0 [ 174.333517] __kmalloc_node_track_caller+0x3d/0x80 [ 174.333529] __kmalloc_reserve.isra.0+0x40/0xe0 [ 174.333541] pskb_expand_head+0x116/0xc10 [ 174.355914] __pskb_pull_tail+0xd8/0x13c0 [ 174.360076] ? __lock_is_held+0xb6/0x140 [ 174.364247] ipv6_gso_pull_exthdrs+0x274/0x450 [ 174.368868] ipv6_gso_segment+0x2e9/0xf30 [ 174.368885] ? sit_ip6ip6_gro_receive+0x100/0x100 [ 174.368907] skb_mac_gso_segment+0x253/0x520 [ 174.382303] ? sit_ip6ip6_gro_receive+0x100/0x100 [ 174.387161] ? skb_network_protocol+0x450/0x450 [ 174.391842] ? netif_skb_features+0x579/0xa10 [ 174.396355] __skb_gso_segment+0x301/0x660 [ 174.400613] validate_xmit_skb+0x495/0x9d0 [ 174.404864] ? check_preemption_disabled+0x3c/0x250 [ 174.409904] ? check_preemption_disabled+0x3c/0x250 [ 174.415117] __dev_queue_xmit+0x8d9/0x25e0 [ 174.419373] ? netdev_pick_tx+0x300/0x300 [ 174.423540] ? copy_page_from_iter+0x4f7/0x720 [ 174.428147] dev_queue_xmit+0x18/0x20 [ 174.431959] ? dev_queue_xmit+0x18/0x20 [ 174.435944] packet_sendmsg+0x328f/0x5920 [ 174.440102] ? avc_has_perm_noaudit+0x420/0x420 [ 174.444808] ? trace_hardirqs_on+0x10/0x10 [ 174.449057] ? save_trace+0x290/0x290 [ 174.452950] ? packet_notifier+0x760/0x760 [ 174.457241] ? security_socket_sendmsg+0x89/0xb0 [ 174.462009] ? packet_notifier+0x760/0x760 [ 174.466261] sock_sendmsg+0xce/0x110 [ 174.470167] sock_write_iter+0x21d/0x390 [ 174.474237] ? sock_sendmsg+0x110/0x110 [ 174.478318] ? iov_iter_init+0xaf/0x1d0 [ 174.482308] __vfs_write+0x4a7/0x6b0 [ 174.486119] ? selinux_file_open+0x420/0x420 [ 174.490633] ? kernel_read+0x120/0x120 [ 174.494540] ? rw_verify_area+0xea/0x2b0 [ 174.498717] vfs_write+0x198/0x500 [ 174.502267] SyS_write+0xb8/0x180 [ 174.505811] ? SyS_read+0x180/0x180 [ 174.509964] ? do_syscall_64+0x53/0x640 [ 174.513945] ? SyS_read+0x180/0x180 [ 174.517582] do_syscall_64+0x1e8/0x640 [ 174.521477] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 174.526460] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 174.531654] RIP: 0033:0x459279 [ 174.534850] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 174.542576] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 174.550028] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 174.557301] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 174.564576] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 174.571838] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:19 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x200200, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="00000000060087fc64721abf137c2beb00d9dc328a673c29b4b65cc6bc92a299518b34b11363891af5cdd6b63aa11f3bf642e87759a7f49ad5ffbcbaa6161a0e5bb8187d3a902bbdbd257ce6dcc540a0d87226bfb7d0330e6fbea29f94f5eb5957b86323418b559a26e92c2fd75c1a310118e9fcb4eca8d0ccfbb747ee73979ed8104adeffd20589eb25c934a9cd1b62d4d7ffc04dd1bea95400000080116d9df7091b63a788149d7447ef0d720ea2a1be3ab34725a5e2b21d84868dc95d8aab8cdf6781cf24febda88ebda6e8c0ff38e08db518727c7943c7afb5312f10f018bc58995143dc8ae0"]) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0xf8a, @mcast1, 0x7}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:19 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, {0xa539, 0x8, 0x100000003, 0x696, 0x200, 0x1}, 0x4}, 0xa) 18:56:19 executing program 0: r0 = socket(0x17, 0x8, 0xfffffffffffffffe) listen(r0, 0x0) 18:56:19 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) membarrier(0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:19 executing program 1 (fault-call:7 fault-nth:21): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:19 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x4, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 174.729576] FAULT_INJECTION: forcing a failure. [ 174.729576] name failslab, interval 1, probability 0, space 0, times 0 [ 174.741005] CPU: 1 PID: 9912 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 174.748030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.757399] Call Trace: [ 174.760014] dump_stack+0x138/0x19c [ 174.763667] should_fail.cold+0x10f/0x159 [ 174.767842] should_failslab+0xdb/0x130 [ 174.771842] kmem_cache_alloc_node_trace+0x5a/0x770 [ 174.776879] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 174.781997] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 174.787032] __kmalloc_node_track_caller+0x3d/0x80 [ 174.791997] __kmalloc_reserve.isra.0+0x40/0xe0 [ 174.796686] pskb_expand_head+0x116/0xc10 [ 174.800858] __pskb_pull_tail+0xd8/0x13c0 [ 174.805018] ? __lock_is_held+0xb6/0x140 [ 174.809097] ipv6_gso_pull_exthdrs+0x274/0x450 [ 174.813696] ipv6_gso_segment+0x2e9/0xf30 [ 174.817859] ? sit_ip6ip6_gro_receive+0x100/0x100 [ 174.822904] skb_mac_gso_segment+0x253/0x520 [ 174.827327] ? sit_ip6ip6_gro_receive+0x100/0x100 [ 174.832185] ? skb_network_protocol+0x450/0x450 [ 174.836865] ? netif_skb_features+0x579/0xa10 [ 174.841414] __skb_gso_segment+0x301/0x660 [ 174.845654] validate_xmit_skb+0x495/0x9d0 [ 174.849877] ? check_preemption_disabled+0x3c/0x250 [ 174.854885] ? check_preemption_disabled+0x3c/0x250 [ 174.859898] __dev_queue_xmit+0x8d9/0x25e0 [ 174.864128] ? netdev_pick_tx+0x300/0x300 [ 174.868258] ? copy_page_from_iter+0x4f7/0x720 [ 174.872850] dev_queue_xmit+0x18/0x20 [ 174.876642] ? dev_queue_xmit+0x18/0x20 [ 174.880602] packet_sendmsg+0x328f/0x5920 [ 174.884735] ? avc_has_perm_noaudit+0x420/0x420 [ 174.889489] ? trace_hardirqs_on+0x10/0x10 [ 174.894145] ? save_trace+0x290/0x290 [ 174.897935] ? packet_notifier+0x760/0x760 [ 174.902196] ? security_socket_sendmsg+0x89/0xb0 [ 174.906941] ? packet_notifier+0x760/0x760 [ 174.911164] sock_sendmsg+0xce/0x110 [ 174.914868] sock_write_iter+0x21d/0x390 [ 174.918928] ? sock_sendmsg+0x110/0x110 [ 174.922893] ? iov_iter_init+0xaf/0x1d0 [ 174.926850] __vfs_write+0x4a7/0x6b0 [ 174.930551] ? selinux_file_open+0x420/0x420 [ 174.935116] ? kernel_read+0x120/0x120 [ 174.939005] ? rw_verify_area+0xea/0x2b0 [ 174.943050] vfs_write+0x198/0x500 [ 174.946591] SyS_write+0xb8/0x180 [ 174.950032] ? SyS_read+0x180/0x180 [ 174.953644] ? do_syscall_64+0x53/0x640 [ 174.957604] ? SyS_read+0x180/0x180 [ 174.961221] do_syscall_64+0x1e8/0x640 [ 174.965178] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 174.970027] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 174.975203] RIP: 0033:0x459279 [ 174.978373] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 174.986082] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 174.993335] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 175.000589] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 175.008890] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 175.016173] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:20 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200200, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x328, 0x3) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000100)={[{0x1, 0x0, 0xcaae, 0x9, 0x100, 0x0, 0x401, 0x11ca5912, 0x6, 0x800, 0x9, 0x100000001, 0x3}, {0x1, 0x5, 0x1, 0x2, 0x69, 0x756b, 0x1f, 0x7fff, 0x933, 0x6, 0x9, 0x6}, {0x5, 0xee5, 0x1, 0x3ff, 0x5, 0x5172, 0x400, 0x1, 0x7, 0x8b, 0x7, 0x8, 0xffffffffffffffc9}], 0x4}) 18:56:20 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8d, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x54) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) listen(r1, 0xffffffff) r2 = socket$inet6_sctp(0xa, 0x800000000000801, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 18:56:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000001a80)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}}, 0x5c) open(&(0x7f0000000000)='./file0\x00', 0x80, 0x0) 18:56:20 executing program 5: r0 = socket$inet(0x2, 0x7fffe, 0x7fffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x8040, 0x0) write$P9_RCREATE(r1, &(0x7f00000000c0)={0x18, 0x73, 0x2, {{0x8, 0x3, 0x4}, 0x2}}, 0x18) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000002c0), &(0x7f0000000200)=0xdba7c74a0710fd80) r2 = fcntl$dupfd(r0, 0xfffffffffffffffe, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4d}, 0x98) epoll_create1(0x80000) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000000)=0x4) 18:56:20 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x10000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x7c, r3, 0xb2b, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff8000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12000000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb39}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x400000, 0x0) 18:56:20 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x200200, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="00000000060087fc64721abf137c2beb00d9dc328a673c29b4b65cc6bc92a299518b34b11363891af5cdd6b63aa11f3bf642e87759a7f49ad5ffbcbaa6161a0e5bb8187d3a902bbdbd257ce6dcc540a0d87226bfb7d0330e6fbea29f94f5eb5957b86323418b559a26e92c2fd75c1a310118e9fcb4eca8d0ccfbb747ee73979ed8104adeffd20589eb25c934a9cd1b62d4d7ffc04dd1bea95400000080116d9df7091b63a788149d7447ef0d720ea2a1be3ab34725a5e2b21d84868dc95d8aab8cdf6781cf24febda88ebda6e8c0ff38e08db518727c7943c7afb5312f10f018bc58995143dc8ae0"]) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0xf8a, @mcast1, 0x7}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:20 executing program 1 (fault-call:7 fault-nth:22): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 175.525210] FAULT_INJECTION: forcing a failure. [ 175.525210] name failslab, interval 1, probability 0, space 0, times 0 [ 175.536507] CPU: 0 PID: 9946 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 175.543533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.552924] Call Trace: [ 175.555625] dump_stack+0x138/0x19c [ 175.559269] should_fail.cold+0x10f/0x159 [ 175.563537] should_failslab+0xdb/0x130 [ 175.567524] kmem_cache_alloc_node_trace+0x5a/0x770 [ 175.572557] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 175.577685] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 175.582719] __kmalloc_node_track_caller+0x3d/0x80 [ 175.587654] __kmalloc_reserve.isra.0+0x40/0xe0 [ 175.592357] pskb_expand_head+0x116/0xc10 [ 175.596513] __pskb_pull_tail+0xd8/0x13c0 [ 175.600674] ipv6_gso_pull_exthdrs+0x274/0x450 [ 175.605266] ipv6_gso_segment+0x2e9/0xf30 [ 175.609516] ? sit_ip6ip6_gro_receive+0x100/0x100 [ 175.614462] skb_mac_gso_segment+0x253/0x520 [ 175.618874] ? sit_ip6ip6_gro_receive+0x100/0x100 18:56:20 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x200200, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="00000000060087fc64721abf137c2beb00d9dc328a673c29b4b65cc6bc92a299518b34b11363891af5cdd6b63aa11f3bf642e87759a7f49ad5ffbcbaa6161a0e5bb8187d3a902bbdbd257ce6dcc540a0d87226bfb7d0330e6fbea29f94f5eb5957b86323418b559a26e92c2fd75c1a310118e9fcb4eca8d0ccfbb747ee73979ed8104adeffd20589eb25c934a9cd1b62d4d7ffc04dd1bea95400000080116d9df7091b63a788149d7447ef0d720ea2a1be3ab34725a5e2b21d84868dc95d8aab8cdf6781cf24febda88ebda6e8c0ff38e08db518727c7943c7afb5312f10f018bc58995143dc8ae0"]) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0xf8a, @mcast1, 0x7}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000300)={{&(0x7f00004e3000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000a90000/0x1000)=nil, 0x1000}, 0x1}) read(r2, &(0x7f00000000c0)=""/128, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000100)={[0x0, 0x0, 0x5000], 0x0, 0x20}) fcntl$getown(r0, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x848, 0x0, 0x7}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 175.623820] ? skb_network_protocol+0x450/0x450 [ 175.628509] ? netif_skb_features+0x579/0xa10 [ 175.633022] __skb_gso_segment+0x301/0x660 [ 175.637337] validate_xmit_skb+0x495/0x9d0 [ 175.637348] ? check_preemption_disabled+0x3c/0x250 [ 175.637356] ? check_preemption_disabled+0x3c/0x250 [ 175.637367] __dev_queue_xmit+0x8d9/0x25e0 [ 175.651620] ? netdev_pick_tx+0x300/0x300 [ 175.651634] ? copy_page_from_iter+0x4f7/0x720 [ 175.651651] dev_queue_xmit+0x18/0x20 [ 175.651657] ? dev_queue_xmit+0x18/0x20 [ 175.651667] packet_sendmsg+0x328f/0x5920 [ 175.651677] ? avc_has_perm_noaudit+0x420/0x420 [ 175.651691] ? trace_hardirqs_on+0x10/0x10 [ 175.651703] ? save_trace+0x290/0x290 [ 175.651720] ? packet_notifier+0x760/0x760 [ 175.664755] ? security_socket_sendmsg+0x89/0xb0 [ 175.664769] ? packet_notifier+0x760/0x760 [ 175.664780] sock_sendmsg+0xce/0x110 [ 175.664791] sock_write_iter+0x21d/0x390 [ 175.710696] ? sock_sendmsg+0x110/0x110 [ 175.714664] ? iov_iter_init+0xaf/0x1d0 [ 175.718626] __vfs_write+0x4a7/0x6b0 [ 175.722326] ? selinux_file_open+0x420/0x420 [ 175.726907] ? kernel_read+0x120/0x120 [ 175.730796] ? rw_verify_area+0xea/0x2b0 [ 175.734843] vfs_write+0x198/0x500 [ 175.738369] SyS_write+0xb8/0x180 [ 175.741806] ? SyS_read+0x180/0x180 [ 175.745417] ? do_syscall_64+0x53/0x640 [ 175.749378] ? SyS_read+0x180/0x180 [ 175.753012] do_syscall_64+0x1e8/0x640 [ 175.756887] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 175.761719] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 175.766887] RIP: 0033:0x459279 18:56:21 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") recvmmsg(r1, &(0x7f0000003780)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)=""/249, 0xf9}, {&(0x7f0000000300)=""/122, 0x7a}], 0x2, &(0x7f00000003c0)=""/199, 0xc7}, 0x800}, {{&(0x7f00000004c0)=@hci, 0x80, &(0x7f0000000840)=[{&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/193, 0xc1}, {&(0x7f0000000740)=""/96, 0x60}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/84, 0x54}], 0x5, &(0x7f00000008c0)=""/190, 0xbe}, 0x7}, {{&(0x7f0000000980)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/160, 0xa0}, {&(0x7f0000000ac0)=""/13, 0xd}, {&(0x7f0000000b00)=""/205, 0xcd}, {&(0x7f0000000c00)=""/87, 0x57}], 0x4}, 0x6}, {{&(0x7f0000000cc0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000d40)=""/80, 0x50}, {&(0x7f0000000dc0)=""/228, 0xe4}, {&(0x7f0000000ec0)=""/23, 0x17}, {&(0x7f0000000f00)=""/237, 0xed}], 0x4, &(0x7f0000002080)=""/166, 0xa6}, 0x5}, {{&(0x7f0000002140)=@rc, 0x80, &(0x7f0000002580)=[{&(0x7f00000021c0)=""/224, 0xe0}, {&(0x7f00000022c0)=""/62, 0x3e}, {&(0x7f0000002300)=""/94, 0x5e}, {&(0x7f0000002380)=""/20, 0x14}, {&(0x7f00000023c0)=""/108, 0x6c}, {&(0x7f0000002440)=""/93, 0x5d}, {&(0x7f00000024c0)=""/156, 0x9c}], 0x7, &(0x7f0000002600)=""/166, 0xa6}}, {{&(0x7f00000026c0)=@hci, 0x80, &(0x7f0000003740)=[{&(0x7f0000002740)=""/4096, 0x1000}], 0x1}, 0x7}], 0x6, 0x140, &(0x7f0000003900)) setsockopt$ax25_int(r2, 0x101, 0x7, &(0x7f0000003940)=0x9, 0x4) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xbd2, 0x80) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000039c0)={0xffffffffffffff02, 0x7, 0x4, 0x40, {r4, r5/1000+10000}, {0x0, 0xc, 0xfffffffffffffffc, 0x2, 0x8, 0x6, "0eeacff6"}, 0x20, 0x7, @fd=r3, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x80800) 18:56:21 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000002c0)={0x40, 0x0, 'client0\x00', 0x0, "23d974c44e20072a", "dfa8b87bdbb691e4b1016229287989850f38312264470ef56f940146d108c7d9", 0x6, 0x9}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x40, 0x1, [0x4]}, &(0x7f0000000040)=0xa) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r2, @in={{0x2, 0x4e22, @local}}, 0x0, 0xfff7fffffffffffe, 0x0, 0x4, 0x4d}, 0x98) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000180)={0x12, {0x5, 0x1, 0x6, 0x89, 0x2, 0x2}}) [ 175.770059] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.777752] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 175.785003] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 175.792352] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 175.799975] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 175.807236] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:21 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:21 executing program 2: r0 = socket$inet(0x2, 0x0, 0x5) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000140)={'ip6gre0\x00', 0xf66a000000000000}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x4001) sendmsg$can_raw(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0x10, &(0x7f0000000240)={&(0x7f0000000200)=@can={{0x1, 0x40, 0xfffffffffffffffc, 0x9}, 0x8, 0x3, 0x0, 0x0, "8198bb15fe33deb7"}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x81) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000510000/0x2000)=nil) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f00000004c0)={0x8, "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", 0x1000}, 0x1006) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)={&(0x7f0000000100)='./file0\x00', r2}, 0x10) personality(0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000300)='y\x00', 0x2, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) 18:56:21 executing program 1 (fault-call:7 fault-nth:23): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:21 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @sack_perm, @window={0x3, 0x2039, 0x2}, @sack_perm], 0x5) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r3 = fcntl$dupfd(r0, 0x0, r0) bind$netlink(r2, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x9, 0x24000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4d}, 0x98) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb) [ 176.019473] FAULT_INJECTION: forcing a failure. [ 176.019473] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 176.031677] CPU: 0 PID: 9985 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 176.031683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.031688] Call Trace: [ 176.031706] dump_stack+0x138/0x19c [ 176.031721] should_fail.cold+0x10f/0x159 [ 176.031731] ? skb_free_head+0x8b/0xb0 [ 176.031744] __alloc_pages_nodemask+0x1d6/0x7a0 [ 176.031753] ? dev_queue_xmit+0x18/0x20 [ 176.031764] ? packet_sendmsg+0x328f/0x5920 [ 176.031774] ? sock_sendmsg+0xce/0x110 [ 176.031789] ? __alloc_pages_slowpath+0x2930/0x2930 [ 176.049570] ? find_held_lock+0x35/0x130 [ 176.049593] cache_grow_begin+0x80/0x400 [ 176.049607] kmem_cache_alloc_node_trace+0x697/0x770 [ 176.049619] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 176.049632] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 176.049647] __kmalloc_node_track_caller+0x3d/0x80 [ 176.049658] __kmalloc_reserve.isra.0+0x40/0xe0 18:56:21 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000080)="d0d2b9ab134cbe0da85f70f885f30a0fa7599c3f2dc842b4e9430ee07c2e647d55afba703fa83f8713cf659fd70e") [ 176.049669] pskb_expand_head+0x116/0xc10 [ 176.049684] __pskb_pull_tail+0xd8/0x13c0 [ 176.049691] ? __lock_is_held+0xb6/0x140 [ 176.049707] ipv6_gso_pull_exthdrs+0x274/0x450 [ 176.049718] ipv6_gso_segment+0x2e9/0xf30 [ 176.049731] ? sit_ip6ip6_gro_receive+0x100/0x100 [ 176.049744] skb_mac_gso_segment+0x253/0x520 [ 176.149643] ? sit_ip6ip6_gro_receive+0x100/0x100 [ 176.154587] ? skb_network_protocol+0x450/0x450 [ 176.159277] ? netif_skb_features+0x579/0xa10 [ 176.163789] __skb_gso_segment+0x301/0x660 [ 176.168060] validate_xmit_skb+0x495/0x9d0 [ 176.172316] ? check_preemption_disabled+0x3c/0x250 [ 176.177343] ? check_preemption_disabled+0x3c/0x250 [ 176.182382] __dev_queue_xmit+0x8d9/0x25e0 [ 176.186634] ? netdev_pick_tx+0x300/0x300 [ 176.190791] ? copy_page_from_iter+0x4f7/0x720 [ 176.195401] dev_queue_xmit+0x18/0x20 [ 176.199211] ? dev_queue_xmit+0x18/0x20 [ 176.203193] packet_sendmsg+0x328f/0x5920 [ 176.207346] ? avc_has_perm_noaudit+0x420/0x420 [ 176.212035] ? trace_hardirqs_on+0x10/0x10 [ 176.216717] ? save_trace+0x290/0x290 18:56:21 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 176.220540] ? packet_notifier+0x760/0x760 [ 176.224799] ? security_socket_sendmsg+0x89/0xb0 [ 176.229575] ? packet_notifier+0x760/0x760 [ 176.233828] sock_sendmsg+0xce/0x110 [ 176.237548] sock_write_iter+0x21d/0x390 [ 176.241619] ? sock_sendmsg+0x110/0x110 [ 176.245613] ? iov_iter_init+0xaf/0x1d0 [ 176.249593] __vfs_write+0x4a7/0x6b0 [ 176.253335] ? selinux_file_open+0x420/0x420 [ 176.253345] ? kernel_read+0x120/0x120 [ 176.253361] ? rw_verify_area+0xea/0x2b0 [ 176.253370] vfs_write+0x198/0x500 18:56:21 executing program 0: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) renameat(r0, &(0x7f0000000040)='./file1\x00', r0, &(0x7f00000001c0)='./file1\x00') mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="4d675ef801000100707065726469696c65302c65726469723d2e2f66696c65302c776f726b6469723d2e2f7f696c653154000000000000000000000000000000007add2dcefcba853aaa6764809d436522b6899ef673044ea3e7ca66035d23916ddb522368396511315165181bcb61c49826a62c63b55e234f44d25c36bed43bfe5bfcc0de35ab6ca4429d00655356ad11c18b7f82ec8554a15eff369f7b2fa110087c49621c58a9495fe6630660df135399b45c7ff9dc8cbd3ace6446c4e77b1991bd58443344e98c25a643aa56ddd83a819c6de17ebf001ed28ce71e3238a559ddab8879fb1b8570e670492c6b63ba25d20f6d"]) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x200, 0x9) [ 176.253381] SyS_write+0xb8/0x180 [ 176.253390] ? SyS_read+0x180/0x180 [ 176.253398] ? do_syscall_64+0x53/0x640 [ 176.253408] ? SyS_read+0x180/0x180 [ 176.253417] do_syscall_64+0x1e8/0x640 [ 176.253424] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 176.253441] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 176.253449] RIP: 0033:0x459279 [ 176.253456] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 [ 176.301320] ORIG_RAX: 0000000000000001 [ 176.301327] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 18:56:21 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000004c0)='/dev/snd/timer\x00', 0x0, 0x40000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001, 0x0, 0x0, 0x0, 0x6}}) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@initdev, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)={0x1000, 0x5, 0x21c, 0x0, 0x5, 0x80000000, 0x20, 0x5, 0x6, 0x2, 0x702, 0x0, 0x0, 0xffffffff, 0x3, 0x6, 0xc5, 0x101, 0x7f}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) geteuid() setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="020800002e000500"], 0x8) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) geteuid() finit_module(r1, &(0x7f00000002c0)='nodevmime_typeuser-ppp0\x00', 0x2) r3 = add_key(&(0x7f00000003c0)='pkcs7_test\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$unlink(0x9, r3, r4) r5 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x86f6, 0x180) renameat(r5, &(0x7f0000000340)='./file0\x00', r5, &(0x7f0000000380)='./file0\x00') ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 176.301332] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 176.301338] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 176.301344] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 176.301349] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x636, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000280)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x117, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, r2, 0x3c, 0x1, @in={0x2, 0x4e22, @remote}}}, 0xa0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1f) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x9cc1, 0x5609, 0x8006, 0x0, 0x40, 0xffffffffffffff36, 0x3, 0x2, r1}, 0x20) 18:56:21 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffd61) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:21 executing program 1 (fault-call:7 fault-nth:24): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:21 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000100)=0x5) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet(0x10, 0x2000000003, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0xa, 0x6}) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000064c0), 0x40000000000022a, 0x2, 0x0) [ 176.495920] overlayfs: unrecognized mount option "Mg^ø" or missing value [ 176.504113] FAULT_INJECTION: forcing a failure. [ 176.504113] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 176.504126] CPU: 0 PID: 10033 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 176.504141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.532514] Call Trace: [ 176.535126] dump_stack+0x138/0x19c [ 176.538773] should_fail.cold+0x10f/0x159 [ 176.542942] ? skb_free_head+0x8b/0xb0 [ 176.546849] __alloc_pages_nodemask+0x1d6/0x7a0 [ 176.551532] ? dev_queue_xmit+0x18/0x20 [ 176.555514] ? packet_sendmsg+0x328f/0x5920 [ 176.559849] ? sock_sendmsg+0xce/0x110 [ 176.563752] ? __alloc_pages_slowpath+0x2930/0x2930 [ 176.568798] ? find_held_lock+0x35/0x130 [ 176.572891] cache_grow_begin+0x80/0x400 [ 176.576968] kmem_cache_alloc_node_trace+0x697/0x770 [ 176.582102] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 176.587389] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 176.587410] __kmalloc_node_track_caller+0x3d/0x80 [ 176.587423] __kmalloc_reserve.isra.0+0x40/0xe0 [ 176.587436] pskb_expand_head+0x116/0xc10 [ 176.597385] __pskb_pull_tail+0xd8/0x13c0 [ 176.597397] ? __lock_is_held+0xb6/0x140 [ 176.597422] ipv6_gso_pull_exthdrs+0x274/0x450 [ 176.619016] ipv6_gso_segment+0x2e9/0xf30 [ 176.623189] ? sit_ip6ip6_gro_receive+0x100/0x100 [ 176.626189] overlayfs: unrecognized mount option "Mg^ø" or missing value [ 176.628133] skb_mac_gso_segment+0x253/0x520 [ 176.628146] ? sit_ip6ip6_gro_receive+0x100/0x100 18:56:21 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x101) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 176.628155] ? skb_network_protocol+0x450/0x450 [ 176.628167] ? netif_skb_features+0x579/0xa10 [ 176.653569] __skb_gso_segment+0x301/0x660 [ 176.657814] validate_xmit_skb+0x495/0x9d0 [ 176.662248] ? check_preemption_disabled+0x3c/0x250 [ 176.667263] ? check_preemption_disabled+0x3c/0x250 [ 176.672364] __dev_queue_xmit+0x8d9/0x25e0 [ 176.672377] ? netdev_pick_tx+0x300/0x300 [ 176.672387] ? copy_page_from_iter+0x4f7/0x720 [ 176.672406] dev_queue_xmit+0x18/0x20 [ 176.672412] ? dev_queue_xmit+0x18/0x20 [ 176.672422] packet_sendmsg+0x328f/0x5920 [ 176.672433] ? avc_has_perm_noaudit+0x420/0x420 [ 176.672448] ? trace_hardirqs_on+0x10/0x10 [ 176.672459] ? save_trace+0x290/0x290 [ 176.672478] ? packet_notifier+0x760/0x760 [ 176.672497] ? security_socket_sendmsg+0x89/0xb0 [ 176.672507] ? packet_notifier+0x760/0x760 [ 176.723576] sock_sendmsg+0xce/0x110 [ 176.727307] sock_write_iter+0x21d/0x390 [ 176.731380] ? sock_sendmsg+0x110/0x110 [ 176.735369] ? iov_iter_init+0xaf/0x1d0 [ 176.739356] __vfs_write+0x4a7/0x6b0 18:56:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) epoll_pwait(r1, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x5, 0x3, &(0x7f0000000100)={0x5}, 0x8) write$selinux_create(r1, &(0x7f00000002c0)=@access={'system_u:object_r:hostname_exec_t:s0', 0x20, 'unconfined', 0x20, 0x7}, 0xfff6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getqdisc={0x30, 0x26, 0xc, 0x70bd2d, 0x25dfdbfe, {0x0, r2, {0x9, 0xc}, {0x0, 0xffff}, {0x8, 0xfffa}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x5, 0xfffffead) [ 176.743079] ? selinux_file_open+0x420/0x420 [ 176.747500] ? kernel_read+0x120/0x120 [ 176.751410] ? rw_verify_area+0xea/0x2b0 [ 176.755478] vfs_write+0x198/0x500 [ 176.759032] SyS_write+0xb8/0x180 [ 176.762493] ? SyS_read+0x180/0x180 [ 176.766128] ? do_syscall_64+0x53/0x640 [ 176.770195] ? SyS_read+0x180/0x180 [ 176.773831] do_syscall_64+0x1e8/0x640 [ 176.777902] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 176.782753] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 176.782762] RIP: 0033:0x459279 18:56:22 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xc0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x0, @rand_addr="fbb07a753992391eb63e6d8c7affd856", 0x2}, @in6={0xa, 0x4e23, 0x7f, @mcast1, 0x2}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}], 0x68) ioctl(r1, 0x1000008912, &(0x7f0000000080)="7abc0104dca5055e0bcfec7be070984ff46a90f07eac92d74ccc86016e0dd317") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000140)=0x7, 0x4) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x22000, 0x0) 18:56:22 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x3) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:22 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000340)='\\eth0mime_type$%\x00\xb8\xbe\xae\xf8\xc9Q|\x90z\x89q\xfe\xc8\x94\aHW\xfe\x1d\x18\xc1\x82H_*\x88\x02\xfa=\xad\x18\xa6\xecAz\xefek\xd2\xb6\xb3a\x1d\xa8\xaa\xa9\x0f/\x01\xdb+\x94\xad\f\x8e\xc2\xf9\xf3l\x02\x98\x84\xe0t\xf1\x06\xe6\xec\x14\v\xa0\x03\v\f[\xd3\x9c', 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) sendfile(r1, r2, 0x0, 0x20000102000007) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x5, 0xf88, 0x80, 0x6, 0x800}, &(0x7f0000000100)=0x98) 18:56:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) r1 = dup3(r0, r0, 0x80000) r2 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x100000001, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}}, 0x90) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x3}, 0x10) sync_file_range(r0, 0x1ff, 0x5a, 0x6) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000140)={0x0, 0x0, 0x5d}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @remote, 0x1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1c, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYRESHEX=r0, @ANYRES16=r2, @ANYRESDEC=r1, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYBLOB="36998d9d4a8131f1231f5298ccb9a1f0cf955d176480f6130707410b29e499f9d83e28b1a3c7b3fdb5bc27f7c70f05720ebea58f454766bd7cdef92dbe0e85bb4a097d0867d3ec2062ae430938df158b1af98f2c82ccf839c23ce01849f2286594896d648312264e61a03acca6bd103ceb4a9db08947cbf08fccb9364f8e3934e25ff6248b1ffe159ba111020126207643bd63bd42399e", @ANYPTR64, @ANYRES16=r0, @ANYPTR]], @ANYRES32], &(0x7f0000000340)=0x3) [ 176.782766] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.782776] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 176.782780] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 176.782784] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 176.782789] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 176.782794] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 18:56:22 executing program 1 (fault-call:7 fault-nth:25): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:22 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 176.937538] FAULT_INJECTION: forcing a failure. [ 176.937538] name failslab, interval 1, probability 0, space 0, times 0 [ 176.948808] CPU: 0 PID: 10071 Comm: syz-executor.1 Not tainted 4.14.124 #18 [ 176.955912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.965283] Call Trace: [ 176.967879] dump_stack+0x138/0x19c [ 176.971521] should_fail.cold+0x10f/0x159 [ 176.975691] should_failslab+0xdb/0x130 [ 176.979684] kmem_cache_alloc_node_trace+0x5a/0x770 [ 176.984711] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 176.989826] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 176.994863] __kmalloc_node_track_caller+0x3d/0x80 [ 176.999890] __kmalloc_reserve.isra.0+0x40/0xe0 [ 177.004569] pskb_expand_head+0x116/0xc10 [ 177.008736] __pskb_pull_tail+0xd8/0x13c0 [ 177.012902] ipv6_gso_pull_exthdrs+0x274/0x450 [ 177.017501] ipv6_gso_segment+0x2e9/0xf30 [ 177.021665] ? sit_ip6ip6_gro_receive+0x100/0x100 [ 177.026529] skb_mac_gso_segment+0x253/0x520 [ 177.030950] ? sit_ip6ip6_gro_receive+0x100/0x100 [ 177.035974] ? skb_network_protocol+0x450/0x450 [ 177.040634] ? netif_skb_features+0x579/0xa10 [ 177.040644] __skb_gso_segment+0x301/0x660 [ 177.040656] validate_xmit_skb+0x495/0x9d0 [ 177.040666] ? check_preemption_disabled+0x3c/0x250 [ 177.040673] ? check_preemption_disabled+0x3c/0x250 [ 177.040685] __dev_queue_xmit+0x8d9/0x25e0 [ 177.040698] ? netdev_pick_tx+0x300/0x300 [ 177.040709] ? copy_page_from_iter+0x4f7/0x720 [ 177.040729] dev_queue_xmit+0x18/0x20 [ 177.040736] ? dev_queue_xmit+0x18/0x20 18:56:22 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x600042, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x80000000, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e20, 0x100, @loopback, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:22 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="5500000018007f5300fe01b2a4a280930a060000dda74308910000003900090008000c00000000003ac1208c06000000000000dc1338d54400009b84136ef75afb83de44060cec4fab651300"/85, 0x55}], 0x1}, 0x0) r1 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) chown(&(0x7f0000000000)='./file0\x00', r1, r2) [ 177.040746] packet_sendmsg+0x328f/0x5920 [ 177.040757] ? avc_has_perm_noaudit+0x420/0x420 [ 177.040771] ? trace_hardirqs_on+0x10/0x10 [ 177.040782] ? save_trace+0x290/0x290 [ 177.040800] ? packet_notifier+0x760/0x760 [ 177.040818] ? security_socket_sendmsg+0x89/0xb0 [ 177.040827] ? packet_notifier+0x760/0x760 [ 177.040838] sock_sendmsg+0xce/0x110 [ 177.040848] sock_write_iter+0x21d/0x390 [ 177.040858] ? sock_sendmsg+0x110/0x110 [ 177.040874] ? iov_iter_init+0xaf/0x1d0 [ 177.040886] __vfs_write+0x4a7/0x6b0 18:56:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x1, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000080), 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x49, &(0x7f0000b67000), &(0x7f00007d0000)=0x4) [ 177.040895] ? selinux_file_open+0x420/0x420 [ 177.040904] ? kernel_read+0x120/0x120 [ 177.040922] ? rw_verify_area+0xea/0x2b0 [ 177.101544] vfs_write+0x198/0x500 [ 177.101558] SyS_write+0xb8/0x180 [ 177.110523] ? SyS_read+0x180/0x180 [ 177.110533] ? do_syscall_64+0x53/0x640 [ 177.110541] ? SyS_read+0x180/0x180 [ 177.110550] do_syscall_64+0x1e8/0x640 [ 177.110557] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 177.110572] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 177.110580] RIP: 0033:0x459279 18:56:22 executing program 1 (fault-call:7 fault-nth:26): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) [ 177.110585] RSP: 002b:00007fb6b28d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.110594] RAX: ffffffffffffffda RBX: 00007fb6b28d5c90 RCX: 0000000000459279 [ 177.110599] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000005 [ 177.110603] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 177.110609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b28d66d4 [ 177.110614] R13: 00000000004c8e39 R14: 00000000004dfb88 R15: 0000000000000006 [ 177.133506] IPv6: NLM_F_CREATE should be specified when creating new route 18:56:22 executing program 0: r0 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) setrlimit(0x0, 0x0) 18:56:22 executing program 5: r0 = socket$inet(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0xffffffffffffffd3, &(0x7f0000007f80)=[{&(0x7f00000000c0)="29316cb2d0a7df4d02cdf03b6f9f2cc0fe635375ff", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 177.171434] syz-executor.0 (10072) used greatest stack depth: 23408 bytes left [ 177.210160] IPv6: Can't replace route, no match found 18:56:22 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e20, 0x7ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4c}, 0xffffffffffffffb4) getpeername$unix(r1, &(0x7f0000000000), &(0x7f00000000c0)=0x6e) 18:56:22 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x20002) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x108c2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0xcc, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0x9, @empty, 0xff}, @in6={0xa, 0x4e20, 0x4, @loopback, 0x7}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x62c}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x3ff}, @in6={0xa, 0x4e20, 0x81df, @remote, 0x1}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f0000000400)=0x84) accept4$llc(r1, &(0x7f0000000540)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000580)=0x10, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r4 = socket(0x11, 0x800000003, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$packet_buf(r4, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r4, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000440)={r3, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x81}}}, &(0x7f0000000500)=0x84) write$P9_RXATTRWALK(r5, &(0x7f0000000040)={0x406}, 0xfdef) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f00000005c0)={0x0, @ctrl={0x0, 0x0, @value64}}) 18:56:22 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/197, 0xc5}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/214, 0xd6}, {&(0x7f00000012c0)=""/158, 0x9e}], 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) 18:56:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x1fffffffffffffd) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000180)) [ 177.363451] IPv6: Can't replace route, no match found 18:56:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) 18:56:22 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) linkat(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x1400) r2 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40505331, &(0x7f0000000000)={{}, {0x3}, 0x0, 0x0, 0xfffffffffffffffc, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000140)={0x3, 0x5f47, 0x8a6}) 18:56:22 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x8a000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000080)={{0x5, 0x8}, 0x0, 0x80000000, 0x5, {0xffffffff, 0x100000000}, 0x5b6, 0x3}) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0xd4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 177.433429] audit: type=1400 audit(1560192982.626:17364): avc: denied { write } for pid=10113 comm="syz-executor.1" name="net" dev="proc" ino=35830 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 18:56:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x20000) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0x6}, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001880)=@assoc_value={0x0}, &(0x7f0000001980)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000019c0)={r2, 0x6d, "092a789bafe94844fbd5adbe639f8c913726909044b5f81c9506f582dc1735fdfe7b8dfc1151691f07fe3a4b7d4ed7ca2b10db8dad8166300dae47c1e9315ef7b2e6a4c94b49aff8ae4f1145344a1f3b09949dfd0a8ccaa4646cbf924b3346d3fce76e982160ef868877c171d9"}, &(0x7f0000001a40)=0x75) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000001900)={0xffff, 0x0, 0x7, 0x5, 0xb1e8, 0x4}) read$FUSE(r1, &(0x7f0000000200), 0x1000) syz_open_dev$vcsn(&(0x7f00000018c0)='/dev/vcs#\x00', 0x5, 0x201ffd) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000180), &(0x7f0000001840)=0x40) pwritev(r4, &(0x7f0000000000)=[{&(0x7f0000001200)="3c34dbd7a5bc1869530362b90d130d107d09791792ee7ac106d2b5743c3c24b6f8645ac4b0d15f671a250409d5b8edb3707b1937923d13a984aaf6b9d2c2b4d87c08cc530c0587cf9f0a24c5b783f5d5ec32c246f40eac024e11699913c33b63865e76159e9c6547ef83e957e5f6cc4ba637ee7ae3c4c9ff73e3ff2a7bccdab57bb47c1a1aefbbcc5163e5140e10f0651444fa808b05276a9018a75eda9e7afaafd6fff2389801e67bada6f6339744cdcaf3f91fb9e2e70a689498804e451d3910295e7c554dd3e02574ee", 0xcb}, {&(0x7f0000001300)="fb56c079eb474ef8c0ed53b0f14bd3914913401e0bf1c9b73ad6c791604715f78d47d64e454e82cb865e61e77baa6688e8722307cf0a0e7b1a0914077afbad14d5357249b236b2ac3ea2b57637f3289c677b85e020341f53743a80da3a88f3840095672fcf7f5115b33f1d04341d5f692950e784b907d6aab7eeb14122557db56d4853a7641468e681601e505bcf87b54c2a9d34e3418b1239a710c5d1da86dcc116b0089d8df9e557e99624d75732c5f44443e46fc2ef6fd59947f11ae23a69e93f6f0975", 0xc5}, {&(0x7f0000000100)="3c6c6ae03d9de9b65684ab1642fca7c299db1f7f9c0be512019540a574274628e2279b8c8a11eceb015461e71685a4b7d64e9beaf21311eb5663f069cd04e5781520663299903dd4784254226159abc501908105329bf95847b2e353682a3beab75a9250273962b8bd8fa39c7fce52d16fe92c4f0bb320e9885fd3ab8a", 0x7d}, {&(0x7f0000001a80)="83208a72a852faa1723fb22dafe7c53b0e3d9339a27520d08c8f278e2922513ea0980054c3b8f8db09056d4506d5e3fa7b2c4e39d32ebb6ac7cb0af399b284a8077039e0afc64b4881a97d2f7e09d0814fd463810968e295c5ca33174c763006d43f7ac53a0d17aa92b97a0bcc4d5f594c720e9a2dac0f207965bf5c1c02ff02195a433eaaeda4ee4166473c5c824684", 0x90}], 0x4, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"]) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000001400)={"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"}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000001800)=0x1) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000001c0)=@req={0x100000001, 0x9, 0x3, 0x7}, 0x10) 18:56:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x3d, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10000}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r2, 0xc0c, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x1c, 0x17, {0xb, 0x3, @l2={'eth', 0x3a, 'syzkaller1\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r0, 0x0) read(r3, &(0x7f0000000040)=""/19, 0x83) 18:56:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000180)={{0x8}, {0x5, 0xb8c8}, 0x80, 0x2, 0x9fa18f5}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000200)='ip6erspan0\x00', 0xb, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000140)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00'}) 18:56:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+sys\t\x00\x00\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000180)=0x2, 0x4) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:22 executing program 5: mount$9p_virtio(&(0x7f0000000000)='vmnet0:lo$\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x100010, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=virtit,cache=fscache,aud)t,\x00']) r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:22 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 177.591446] audit: type=1400 audit(1560192982.676:17365): avc: denied { add_name } for pid=10113 comm="syz-executor.1" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 18:56:22 executing program 0: r0 = socket(0x1e, 0x5, 0x0) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) connect$tipc(r0, &(0x7f0000000000)=@name, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioprio_set$uid(0x3, r3, 0x8) close(r0) tkill(r2, 0x1000000000013) [ 177.689643] audit: type=1400 audit(1560192982.676:17366): avc: denied { create } for pid=10113 comm="syz-executor.1" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 18:56:22 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x8000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) accept4$bt_l2cap(r1, &(0x7f0000000040), &(0x7f00000000c0)=0xe, 0x800) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000280)=0x3a670000000001) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f0000000200)=@sha1={0x1, "713343cefd538fab70682a1c48d6a59a9fbd75f4"}, 0x15, 0x3) 18:56:22 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x6000) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000080)={0xfffffffffffffffe, 0x6f2, 0xa, 0x1, 0x40000000010004}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='net/mcfilter\x00', 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000240)={0xf, 0x1f, 0x1, 0x1}, 0xf) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000180)='keyring\x00', 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback, @remote}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000005c0)="c0dca5055e0bcfec7be070") preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000480)=""/235, 0xfffffde1}], 0x1, 0x5e) 18:56:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x9c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x4002011, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:56:23 executing program 5: r0 = socket$inet(0x2, 0x20000f, 0x2) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="78da67105975f7c90600"], &(0x7f0000000040)=0xa) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0)=0x80000000, 0x4) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:23 executing program 4: unshare(0x600) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x220000, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local}}) 18:56:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x3, 0x40, 0xac5, 0x1ff, 0x3f517cf2}, &(0x7f0000000240)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000340)={r1, 0x5, 0xfb}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x0, 0x2, &(0x7f0000000080)='\xcb\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x6, &(0x7f0000000140)='ppp0\x1a\x00'}, 0x30) r4 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x8, 0x400000) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000280)={r4, r0, 0x2}) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000300)="a200005ce1d73fc94a93c0b4ac06fe49168a2961ec02346086e953111e46b1fb0954fc3374e8", 0x26) bind(r0, &(0x7f0000000180)=@llc={0x1a, 0x33f, 0x20, 0x2, 0x10000, 0x400, @local}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0xfffffffffffffffe}, 0xfffffffffffffdd0) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f0000000380)) r6 = fcntl$dupfd(r5, 0x0, r5) write$P9_RXATTRWALK(r6, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001000)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0xf) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r5, 0x0, 0x31, 0x0, &(0x7f0000000080)) 18:56:23 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x80004) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x480000, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000080)={0x2, 0xfffffffffffffffa, 0x0, 0x1000, 0x73, 0x7, 0x5}, 0xc) setsockopt$inet_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000180)="00d0518854e85e09435a603bbbad63d13dbf3c52e2babfb7af2d43daaf0792ee803f1e4d892b1414a36dd42a2f0193fed35a1e4ff99cf13dfee628f700919b478e902c00ebd4860c7bb3699278d4dc904a2c8e35905da2f33ffb74c230c10e788668fa8a20d7e248571b0421893f2ff23df27a77c61310a780230bd523c89b98aec7e71cff512fee182acd1a8459e3bb6f4a97adf4a5bce2ddf8f6e885ce5042e0be1c8da803645651380ff13020afa9", 0xb0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r2}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f00000000c0)={0x1, 0x400, 0x1, 0x4}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:23 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000140)=@rc={0x1f, {0x1000, 0x3, 0xae5, 0x0, 0x1, 0x20}, 0x6}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="de", 0x1}], 0x1}, 0x0) open_by_handle_at(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="26000000000000000e3929d06188e58f29f975cfd94604b34e8fda86fcce4befd9c589262c79a1a614250efe09964ee9727874c342b3c8032a4376382ee2278416f318c88d80900bc5d66861c9e50b316f1809e95212a10aef3ef83230fe9424c73bfc88a15777b8ecca24d0e430d864961f50c22ce9153e1d0380ac137b06f309785398ed74cb21457fa7f15bd76822865a67a02c46192a8488f67444da8eca83d72e01eecd8366517edd3e7172ed7e346d09a20d5d95e4b19944f33bb069d632a3631a1399c82f8a0a5ceec197f5296da33b0dad9e3cea1f3a136e30d930b4ea0b0bd2b5feb5a8333ea0c10bc18db223"], 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getuid() sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000098}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x50c, 0x36, 0x100, 0x70bd2b, 0x25dfdbfe, {0x1e}, [@generic="15e811535ec068c8b6760725842d7fd23b2139d9218b1386d4ed35dce50d4cd5f3b744bb66fb0622bc850c3dda041708a1c1093f92b9cfe42d", @typed={0x8, 0x5a, @fd=r1}, @typed={0x4, 0x5}, @nested={0x34, 0x2d, [@generic="80ff18ab8a119def089bfe53069a41d77467493c7c777155deb5ad60b022db5d3c0f94b436e3702f8cab8945244168"]}, @nested={0x1c8, 0x75, [@generic="71faeda3dfbbf2ce52a761db47c1df9503aa9feda244707bad3aeccbdb3aa85ead55ac7f66b53c973c73120139cd9da92fa6b40178bade678c466343d13a7156cbc7285148b17590ca07487f8292c1900b28650a08d61e77a4764a3d808453a0efd06c0d67341050604d9b3bbbb5931e9aedb3cdb408133ba1fece2892e5fe4cadc024ebf4c77f14d80063ae0c73ffea174b5cc0fcf64466c0c21467c9a2a03960418be3de2c", @typed={0x8, 0x1c, @uid=r2}, @typed={0x8, 0x15, @str=',\x00'}, @generic="bdcbc544ce0c7e35e52c99c2ed8d6c219452e2e62ad169a90bb1e27adda813d7fa10d69b38254dc23d63b263ed49e000f6ff8150f8b3f5ba2e87542031edd72fe4db50d807112695d0361b9305f229e87ea918a0", @generic="1b5402de1371861146683084b143bc", @generic="da79dc0e6d97e00d9dbdfc8d1fadaec91174184e8a16002f11d46de002f163abe7d038d2f0304abd5a8d05ad187377931fb4b575eac8ee26a784462d324dc10974e9ab5737e302d131656f438da3bd13049481999d85d8199c1b9a0f0629bfaee918b89fbcdd2029b590ae638ec546fc2732f1f81459a451a631b542e5f0bcda0e619e6cb456d23a67e62d1da5aed1442c6bf340d191a85bde749695945793cb872c067562c8406743a0b3"]}, @generic="8c82bb205107a8f46828b70e68f268ab6ec11352a4841c3bcca7de3ea279865ef0c6cf9d82a07c6a41b117da6f12d5bfdcea5cf7d8acc59b7836ee2727fbc1ca3fc55036343f8f04c7d8864416f4d01b51f2c96a274feefd829b47e63212f4de568de7ea0d914550080f9a484741b2611648eab7abec2d05cc2a1aa13d1351fdde068aa3c20724989126041c6c9ab1c31264366325302324b5b901e22da4da87fa407029264293aaf6030bff0318723457bf8bbe72e925e3e91cebd78df1dbce5111f69a8e496ac326a0ac48513f6eb72b5105fe50699c8aa3e2d22b855532b65dc9414372eecd01f20df61c7a4cb892619f", @nested={0x1c4, 0x81, [@typed={0xc, 0x89, @u64=0x6}, @generic="ee73b69f9e91f64f4c7eb165b7c76a08cff159afa153a937529f3f3c4fb709d9ce34cf4210b1595146d1fd", @generic="6f80ffd1a44842782174cdd098807e61195944fc32f53479f7af6b5e1323c1abb0981abb6d6fe85e7a2702d44347d062c5f89372e31f585fb71cba3f4ad7577245470790eb41fa376c8f9e9d0ae899c35deaa77af3a94f3ae7ce15221ea9b5300d163a3ea5e7edaacd17154349d5ab42698de63eb325e91f0b32d4b94d3893d974b893c1078d23c6", @generic="33a40dfd002613faf158b790e23e7939e12f6d7e79b481802db1f66ab2e64a4a06bb743b318bb14a671958b7a3f3c0d1b3ed9aa9d2cfd22473655f08ef76a665337ace1cb5bbeafbec87d4790b0203649778ee68f86e8ce17e221a2e63d8f3767e70a979106cbcaf01", @generic="920f8346b43dacf0a6894340b562ede8be839d7eb1c43eeb4731ca5f746739dd9a0cedfcf9d60de346a1819ce4b0aca02605796a8caf1accb513d95028235fd794cd3c3a5579c7640b2f6cd7d1155da5b74f7deb57c2eb53c2b3f75ee100fd16ba1457ec9575b7ae343c93d8cfa2ee6a1a79ac1e4c565e38b9f8e69d7f5599b709fcbfe07f6a99c3a9c405d5cd71c519c8769819be"]}]}, 0x50c}, 0x1, 0x0, 0x0, 0x98e807e473411688}, 0x80) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000240)={0x32, @local, 0x4e23, 0x1, 'lblcr\x00', 0x2e, 0xd6, 0x4d}, 0x2c) r3 = getpgid(0x0) ptrace$poke(0xffffffffffffffff, r3, &(0x7f0000000380), 0xfffffffffffff000) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000340)={0x4, 0x5}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x501400, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000002c0)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:23 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x8}]) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x220180) fdatasync(r0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x105500, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) connect$netrom(r0, &(0x7f0000000040)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}, 0x48) 18:56:23 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x0, 0x2000000000, 0x0, 0x40000000000000}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x80000001}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000200)={r3, 0x0, 0x9}, &(0x7f0000000280)=0x8) 18:56:23 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@remote={[], 0x2}, 0x7, 'nr0\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x8000) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$sock_bt_hci(r3, 0x800448d7, &(0x7f0000000180)="802ea02a9f685d8f31e1a353a8d500509da86c9df300a703e83f7f55da7fc686b96a707c1e15cd9711158cf3ed888c4b4f00852f182af334f41961718f435b9aeb4f723dfe92c601831d29369beaa232bc17ee817a4c105fdee22e8d5ac1f625a764b80dd7762f1f00ad09f3b8ad80e80b4794abe74356ac679071") ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) 18:56:23 executing program 4: setresuid(0x0, 0xee01, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0xfe755128f579ec44) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x44202}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x138, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4c2a}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9f40}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x46cae1ca}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) [ 178.515355] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20003 [ 178.529982] kvm: vcpu 0: requested 128 ns lapic timer period limited to 500000 ns [ 178.541755] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20003 18:56:23 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x1f) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x230) 18:56:23 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x54480, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x1, 0x3, [@link_local, @local, @local]}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 18:56:23 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = dup(r1) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:23 executing program 4: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x20000, 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x4400, 0x20) ioctl(r1, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={0x0, 0xbb}, 0x8) [ 179.264288] kvm: vcpu 0: requested 128 ns lapic timer period limited to 500000 ns 18:56:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x5, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:24 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x420081, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101080, 0x48) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000200)) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r3 = fcntl$dupfd(r2, 0x2, r2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:24 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:24 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x6, 0x1100082) sendfile(r0, r0, 0x0, 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000040)={{0x200, 0x81}, {0x5, 0x2}, 0x5, 0x3, 0x6}) sendfile(r0, r0, 0x0, 0x200000d) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f00000000c0)={0x1, 0x1, [{0x8, 0x0, 0x6}]}) 18:56:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001000)={"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"}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0xf) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r5, 0x0, 0x31, 0x0, &(0x7f0000000080)) 18:56:24 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x2000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x20001000008912, &(0x7f0000000000)="40003b880000cf262ac80b43d0ece0ec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001, 0xfffffffffffffffe, 0x0, 0x0, 0x80000}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) get_robust_list(r2, &(0x7f0000000280)=&(0x7f0000000240)={&(0x7f0000000140)={&(0x7f0000000100)}}, &(0x7f0000000200)=0x18) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:56:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000080)="0f009f0a260000410f090fc71866ba410066b8d97166ef67670f09b9391001c00f3267676747dbe9440f3066b8f5008ec866baf80cb83cbd1681ef66bafc0ced", 0x40}], 0x1, 0x2, &(0x7f0000000100)=[@dstype0={0x6, 0xa}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x4) write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:56:24 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xca2, 0x10}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e23, 0x3, @remote, 0x8a30}}, 0x2, 0x0, 0x0, 0x0, 0x4d}, 0x98) [ 179.426735] kvm: vcpu 0: requested 128 ns lapic timer period limited to 500000 ns 18:56:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x11c, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x39a7}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa50}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x87}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x537}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffc000000}]}, 0x11c}, 0x1, 0x0, 0x0, 0x884}, 0x8000) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x40000) inotify_init1(0x800) openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uhid\x00', 0x802, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r3, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400280, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @remote, 0x9}, @in6={0xa, 0x4e24, 0x3f, @ipv4={[], [], @loopback}, 0x1}, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8a4c}], 0x54) readahead(r0, 0x75b, 0x7fffffff) 18:56:24 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @rand_addr=0x8001}, {0x2, 0x4e23, @rand_addr=0x1}, 0x2c0, 0x0, 0x0, 0x0, 0x100000001, &(0x7f0000000000)='ifb0\x00', 0x9, 0x700000000000, 0xffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:24 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1d00bfcb3d27db335d8f1f840b0e5b5cc6cbc15778bafa29c2036414b1a6c4a088eb8852dc9e1bd4e487a01253f8d9d9a6072a58e9564feb81a6beb6d2a4fd74a86237e1a5872ac5f2cc06b90df1c60f94dc", 0x52}], 0x1, &(0x7f0000000100)="225593f04bf8b9037283f89aefcb49effee39168390749c85de45592d0602263c1b1aade8a40de1373c1c2bebfd78f7aa14a719b7f872c429ebca51f0f63b2db6ae6cb675c069579513c4e83f0d865a5a56dddd816d698b2da2110e99f1a5ae126109a34c28adb567a934eb9bc0517698ce558fb2b54bf4d9d77de01134677710e3f04d2419069ffb1521da07c7c2d690f9395f850eb794995af64279dcf9e17bb333466fab51d25182f37078799e280a6ab9f27b2e9f646c555bae28d298e", 0xbf, 0x408c5}, 0x40800) pkey_alloc(0x0, 0x0) [ 179.572631] FAT-fs (loop3): bogus number of reserved sectors [ 179.585591] FAT-fs (loop3): Can't find a valid FAT filesystem 18:56:24 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x4e24, @remote}, {0x306, @dev={[], 0xe}}, 0x8, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'bridge_slave_0\x00'}) ioctl$NBD_CLEAR_QUE(r1, 0xab05) getsockopt$rose(r0, 0x104, 0x3, 0x0, &(0x7f0000000100)) 18:56:24 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socket$packet(0x11, 0x0, 0x300) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto(r1, &(0x7f00000001c0)="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", 0x131, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000009c0)="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", 0x464, 0x0, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) mount(&(0x7f0000000340)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000140)='pipefs\x00', 0x10, &(0x7f0000000440)='keyring\x00') sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000300)) r3 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, &(0x7f00000002c0)) sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) [ 179.626433] kvm: emulating exchange as write [ 179.635358] FAT-fs (loop3): bogus number of reserved sectors [ 179.649248] FAT-fs (loop3): Can't find a valid FAT filesystem 18:56:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f0000000000)=@ipx={0x4, 0x2, 0x3, "e49969e316ac", 0xfff}, 0x80) bind(r1, &(0x7f0000001080)=@un=@abs={0x1}, 0x80) 18:56:25 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20001, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) fcntl$addseals(r0, 0x409, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:25 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x7232) msgget(0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) ptrace$cont(0x3f, r1, 0x2, 0x7) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x400) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000040)) gettid() ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x7fe, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r0, r3) write$P9_RLOCK(r2, &(0x7f0000000080)={0x8, 0x35, 0x1}, 0x8) 18:56:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x440000, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="7921c448f326a100509a3d342cb178226db514ab04b37078e866b2226ce6a5048cddc4f0b4385e941349fe890c75a442107c36968d97c767bef19c82559af4621e9dcfcefd1d76e036696e11b94a3805b6f219f76f555da4e3e3c6e6ec5d6d72d85c70285f886f57132fadb7085892b7080d820e5eb1b1ac181da9be33ad39b91292795788f8da45279ab35aa011d86676619c89e285adf0c7c79462c094af0b64f583bd988536e784bac302c338add7fb92b87d2e4f3b67e6c1137557659453ad7f7d5914f746ea8579859de258942463aa3a5f65daf759d53adf68a7c60b923f41ad9bbc23a8db529e66013a0e52bc01a218", 0xf3, 0x8000, &(0x7f00000002c0)={0xa, 0x4e21, 0xc073, @empty, 0x4}, 0x1c) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = socket(0x0, 0x800000003, 0x5) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RXATTRWALK(r3, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="3900000010000b0468fe0700000000000e00ff3f406e0000450001070000001419001a000400020007000a000200ed8800005d14a4e91ee438", 0x39}], 0x1) 18:56:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x2000)=nil) 18:56:25 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x50}, 0xfffffffffffffd6a) 18:56:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x800, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="c0dca5055e0bcfec7be070") ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000180)) r2 = syz_open_pts(r0, 0x20201) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x40) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080), 0x4) fcntl$setstatus(r2, 0x4, 0x2804) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0xfffffffffffffffa) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)="1e", 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x8}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000280)={r4, 0x200, 0x8, [0x7, 0x2, 0x0, 0x8001, 0x2, 0x9, 0x31, 0x2]}, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) close(r0) [ 180.238072] audit: type=1400 audit(1560192985.436:17367): avc: denied { set_context_mgr } for pid=10395 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 180.239244] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 18:56:25 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x802, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000140)={0x0, 0x9, 0x1, 0x7, 0x8, 0x1}) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@routing, 0x8) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x200000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_script(r0, 0x0, 0x0) 18:56:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000001c0)="a2000078", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000000)) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000200)=r3) 18:56:25 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x4) ioctl$RTC_AIE_ON(r0, 0x7001) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:25 executing program 4: ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000000c0)={0x80000000, @reserved}) vmsplice(0xffffffffffffffff, 0x0, 0xfffffffffffffeaa, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000004580)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x100, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x10100, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x121240, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000380), 0xfffffffe) 18:56:25 executing program 2: syz_open_dev$video(0x0, 0x98, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = gettid() ptrace$getregs(0xe, r5, 0x1818, &(0x7f0000000100)=""/153) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66b8ea000f00d8eadd5484f88a00f0833600660f71d50066ba4100edb8010000000f01d90f0866b8bd008ee0b94d0200000f32360f07", 0x36}], 0xaaaaaaaaaaaabce, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:56:25 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40100, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) getsockopt$inet_tcp_int(r0, 0x6, 0x14, 0x0, &(0x7f00000001c0)) 18:56:25 executing program 3: r0 = accept4(0xffffffffffffff9c, &(0x7f0000002000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000002080)=0x80, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000002200)={&(0x7f00000020c0), 0xc, &(0x7f00000021c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x100000001) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', r1}) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000380)={@local}) syz_open_pts(0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000440), &(0x7f0000000500)=0xc) r5 = syz_open_pts(0xffffffffffffffff, 0x400001) listen(0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x0, 0x80000) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000300)={'irlan0\x00', {0x2, 0x4e22, @broadcast}}) fdatasync(r2) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000002240)={0x3, 0x0, 0x2080, {0x6000, 0x14a81d32073a924b, 0x3}, [], "7a4282bdda75aff7a8116f418d2755807fc70bdd9b2d5ceb0a42d711bae8da93296f5274159eaf3f4d467d31ecbb03f0085fc2fc2e1dc898b940f80571b1ea4a941f1d49039890d8fb56e713f8fe27db5b48517fe0b7bb93291a40aa70db5856c2ee276d2b24914bd78ab6ddbf04e438dc6a1bccb09ff1d6d3a1e415a6b2b5c76734c79982f195bb9ff0d57095ea5d21f54d5658af162ea00fbf1e78e6755c73b96dd9bbe226496329186e521e07526c6ec87ceebf5901f87d8442fb97a406be14654a007c6eec2fe8130df798bdcbcd5daf4e363086302d0ce8911e3755d5078f72f097cdedbb312e4a005eb973d03c4caa04446ba7f002027d98793309158717e115881e213b9b10972de23a2fdaea321cbb89a71dc9cf5782d215580cd0a184f635b8a639da8ad9cef512a344bc9d99b4b13d3c56470e89d769d5fc3df39a4b36e5363acf8228b04441bb78292fdae8774b9b8eea5cb42825a1e83eb072ab164b03ce8789b43e4a735e5f23b99a73da2164dd8301fd85d23d90c656f3dbb11270e6c74d4c3c0086e68ab83af2cc05f89e334059b398a2f225d9cbb02a5591f954c290e66675ca49f951ac32d8eda17b21d8b14c95215955dea42298967a340fadf6e042745d15a3582e4d9f2e68020e72d4bfc09b729641d52c7ba15a9eb349068b3556836c53e571414842791c0729ba5026c4f70fc8d44539287a6ae6c0004d44cc1cfe44cd6da87f5dada075b6dea3ba452fb74897b4ee41dcfc74558f09e1827122dd57c45eb4868a5a5d54a266efd4b54210733c75360e97e6170ca5d582fef93dca2960cdb868dfbddd5ae3a2e5a89d685bc726a63aa6622bca8ba91d6a3426103de104c598672e0f9331f17221299ffbe475bf8121851948fe4cc3e32c957a7b32404acb4f6e7c8259e4e411d46d14e516e5f5407eecfc69253d612416e737d8e98b94f8d939d2cad705b0d94bd4a248a1fa9fe58aa3c2888b2faf90a38f03d5dde1f9e30cbc63267dcf579f2a79a680334a31b7886ed5ff54f6cf37d50c56b0555612871645c165ff7c93009f5f3b4c84237b1203ea28bd9fecd5740376324c0d5a39e143975730cdd755897d3b04261df7c152b0a41701b35f8a1b28a436b41ce730abc1e6d999c841b33f5717b3f7520a63acefd2bedf3065e3155787a2a2fe41a2867694c70bb653584fd9c66aa02dcc2cde66329be8d26471c4b86ec7bea4f7d7bdd31de19106b4bdc6d8f4db44da0c398798adbf3bdf34b5e8a8dad0d8d66f4e8e7733285d049ce5779569d2d0c340ca2135256bba76f42f1af70ba7e4673f9639823a6525990025d870b17621359db4b99ac277823c831cfcdd195b2cfde0441344e9c77b22ff09d0f4801204d262b43673d31257022fe1c885f2c7f3bd34d1184141a8c8cc5aee6d6a15650949f8483861e2f6ecba9175e8c33045a1c24f6d7463b01c00aa4168f74cb4c2c86d66af17856530eeaa02e6037f5d7d7883339b1a80fd43456ab66dfcefe864d126b32805d83c8834387b8bbaca8d6d3664a5efd4ee381538fb378e9e657d4b99b2c716e7c09e0f31f27754a694a5e368e5fb3ad55dc3df3b5e8943157ffd9d7e063cabc6ffb01a56e796bd9e494a17b89b9e6bed0e23081c90829ba5bd5e1de04c12e4849c0f19406aaa7168758ea79dfa240d838a14e34815599714c3947403ab8ee5d1e0e4652fb1431d900d96c2b3033a634c21c9d10ab32ef63e257c1540a1bc6266985d32c6c8e5e235666ffc44451d2e03a5f0556b3be641b63599d7ddd9b27550043eaace052d7e0455a1ee4e95ddf0227133accef16b6ac1bd6678e69b6134f7182638a83059d10c8650899faa674abbd3e98caebe02a1117d26deb1c3b5ea248855fd983b39ed42084699ba27393b3e4b99a287b0cc7c2a1905d9f25adfb8f3be16f5b424d1ab911498c958f3eca95a7f17cfdc094800d1e198cb0160a64deb7974c5939be8a46cbab5b1ba6537e76dadd849e2989bd515b6fc426ac3fe4b5abfcc0238817398f22c5f011b22ee995a19631ad093c3f94a2edf2fd56a270273b525fdb5ad861e4f828a5318fa834bb8eec2766ce46e09f684e9db9dc03dc2fcfae005b13f69179f18f555ecaff04bd99ac1bb3662ad5d779f393fc0850f3e632910abcc606b0138c1dc7d3f1c6fecf78b696344ce2b06eeb6cbc323ec49978ae5e9b5e9510e6848da189376c7e07478e1dfa15aa73a2ac68c99555b015e9dbe8ee6408fdd9fca2603451a9be695cd2c65311dcaf22aa757586e4fe2b270719c2141855d1826b53f5a5fa79b41c7541ba3db17a0f58dc8f845d66137bfa2032ec0b00679deef4b802f5f114f34fbc1cee8bdb92f4908e594541e87d86e8e3cc0a9350d825e2355a0a22333a610b3d33a93d504fe6f1011fd6f77f9b4e339d659f928950d47e8698ef0124814d0a4fc5f3794615b3ff19c9d4d20095954a64a4b6809185d02a10d52409ca2763b2b2ad01f02fd9534da0ed4fd36d6a2ff9374e7e9b40125e0d316d30547d63ae49392c8780c58c026f780c5cd36e029cd0240cddcf0991587ecbb1385797fc75d5096b853b7f46917484c8dc5f059343229460dd613a569408a70913589de9a78306242afe4517c761e5600bfda23f34e5be6d26a0fff23f7702ffdf946bce5bfa393e3cfce0f77c883e772a6d34642fd76be6c42dc8448fac6994f48cf760b9e095ed7174d5ec47c8001c8a70e11d5051f1f4924e656f569364beedaeed9ae11a9cd87594cbdbe4eda4d6fa67c168d85c8a69250888929cf1aa1269539d0eca08c945571c8059e5548ba4b27bc13a9bb1e8f75d3fc28fc43e45e5653fedb6f913c13f723b2ebb0f8d8b7c34f820665758786ea9d213a7e08cccc3a34ff52f99198ee8e4b048495e9da1e44b3341c4061e70747ee75c205474547034f204edaad19ba2f90525d7d8391e240fc60164004204c9098596834d22ee765831bdc08257d02e0ce914a08179d0110cb754963aab7938c525ab1b2e8775618dd3d1940633b53713cce54ce4ffe5fe5c9bd6aa92e572e78cc85b7618630ccc28b394a0d2372efa04ce3362c82248d26e89d2a786a3cc7ecbd58dc3b6447a6040ec2a9f76bd34b847a41b0481f118ea35c2ad08b1f8346eec9dfa9d6e4031aa8cf4d185754dae44a6e68287fb79713e7fdf7718f8fa4bb55057842e48ea0c8e9ab390c48a57cec78338d2b72052978b375dad749fdcefcbd2d313449d44e7959e78229161948c119bfa21fa98f1ac93cb22db3353367f2e8b7e111cc7d53690f57fc49ece55d473edc4fd002f6e4e39424597aa281f8642338a9af5f1f91e422dd9ed6516b2ff16b9296ee9c0ee103e59c5abddb9c9965ec95d0b72bdb2d710757a1af2ef63c800b98ab1bd7a9683d234ebd67e742a3092f62d5e3dcba0a11e45e4885c7f9c40f822fc1efcea9d3be91b3e46d7c36697fc5b3f14d77b6f2b6c2afc638a3a8cc7e76d10fd5535abb4766df31b5f85251a5b5947a65a8b94e0e88ea180f902fb26716bcd9577259cc76c07c159015ce13462626f2b1224650e75bb673020f98ed7cd3a2643dbf64906970f8bc0e1167c4c5105f898394a9511753a14f89e9f3ca555609eaef832422bd1fd6fd0fafdebfda12a249ccefc431415f75821a53c2c8bd64b1bd7f6614389e91cb6ba5040b75d31b3a054c14e6543b3692ffc80bdf94f087d62359a838d65433a5e3044bd8f2198f8dcc15f769db1c37e4ee534f748a28b0f01965a006fa72243c73e21115fe846e815bb0621df06b8c449c971500fdd39981bf53666d9c4b0e4475898ae84555a8db98f5c2fd903941ac8fec92fa394a4e57fefa6515b8038137f92ae25b3c59d1d182c1bdcab1d324a4f9711833a5c3e183e948b4a61934d84654c13ee75d2a349c733adea2258f01f9c623b487bdb3920a5d1e3347d377d0f9e1eb6c4c60da392c7fa0a2060b947732a1b47ae4b24940520fd2a2a637f4737d71dba96c39b91f36b3c0d3873eca8c6dee556489c20a497bcac88487d7183e56e611aaf77d1dc3dcf3a20e07dd224acad7b34a80f7ed06a86577513d5f07b1116a49c5d9db521db90b6d2ef6b12f3cb5cef91d949a0bd932ad76a4113217ce65972387b66773e09201e5e3f47009c9208560c76f5d3c61be515da74600858fe6be3f190e64210b42311f72f851bf28ad1ac6f4b9d9b0e73ec93404a30076d59c6a6b882c6025df1f0f2ad59286c05a22e727211fdb48f27cec5a6b2607d521e10ce0b4bc3cd425b766c503bfb8fd9321cb1cba03f7df5af58b42e4b161b742e567435a1e0783678457d5d526fd95269731859439cbd7ac4901d3fa5d4e7174a9e89906cb8968debab8b88cf1b4c0df8c8d020a5bd45076f88e251aa0fdff47a2fe032477cfe8313b2ced0fd46e33cfb159f6aa987350c02719b3069e714d1a06d9e91b0f46084c902bfa20a254b2a9009b533c902f325b08a88f9150b4d1063ac57ed7dd6facad22fe9c3bd552928d507feae54f74cb249d1268fa1b9201d435c68a6b3c437876660a6544fc8237188faec91fadfeecf72f9cd957484c85650bb1669fe6d2683db454c09edfbf385ac3f0b9e013551116f985b030cf05abfccd05f83d1fa34ac94d2d4e785c919419be7921e0b18fd556e40acd32a00ac64108aa56040058a0baf2ea4d4075eaa364d1d2fa3e946956db657ebcea8e297ecc20c113e0d0939ca82e0bbf9dac3072166e1b01ccac8e6bebc7026c5fa5268d06334ecce9678608ece9326cc8402ffef80ec5b38be22b62f28f5a5f34e24b3e2cb19dc6420a72ad7c40c7bbb91233e880bbba53cdce59865a5c62cea05897c8301adb44c076494e680ec97b16d01b403ff49029079ae8b82778eb822313ee91e9736229e2626d37a8183f206fd73dddcbace8110a622a4a20dcde5ca3a304334982d874a3fbff1ca5039ccad00978893a3405cffa39f2ab9aeb2bf8d2d1f78e9df1e67770478635a317df68a4a0d9cfcb822dcc689a5b05081aabd49578e1217bd8fe922f45d29b1887047dc5845f33745ccf9e0fdeb040df8427eff141ebbf3fcf3d5a279eba4975ea8f544f714e84a1b347e332bc188519948977e5a5815254224ecfbe0981b423518d062b17a2baaed24f09cfe146e0fd772c161d29f771e460521fd1936692e74a653086327872d65e3632000ee11ef77e13c2180884a8926855c11f573637401315efc055187654be1ce5a094c6bf46f634e31b13cf63e33ef7b4a1d78219f45365fa579246bd4343690cc155b32d5fc1cb46bfe02557e4a5950320506b77da4cd7fefff856ad33e4d51504d22d5b244d922e1a84da7ec300b2ddac69e5a0ce998766cd256384de1ddcccc7e413aad3b580d98437a1ae04920c9909ab13d26c1380efd118b0f9b029a21d402e31c9cab4615bc51209c53f25c26f85e246eef43344c5ceb07945822f881d6e7cb0d042fb9bc024541c4a51a6ac8502d606e1d246e301d3773a9b10ce432f804ddfd7992e1fc0a636dee4c258285409288101d3e8c56d8b08cc5c42b65a90b33ae941f865074fbeb0b045929771170293aa894d023db16e497b9a16ad69226eadc221ff437f7494e6e21faaa38a064c269cb3a97962fc234a12c771a8f18396cc3a75a94eb39adda3d1736ee009ac1734022f6d277d8558f3c9a5139ef862d27ad6c6d43d1b775697c087c80e28958c4e21956aedc9a8fe36c51a72542ab97795210d18b91caa79bcb64df84146be2f341cbbc212d6efb1c2146d", "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"}) ioctl(0xffffffffffffffff, 0x1000008914, &(0x7f00000003c0)="0adc1f123c12") r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000100)) dup2(0xffffffffffffffff, r6) 18:56:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)={0x7b}) pread64(r2, &(0x7f00000000c0)=""/112, 0x70, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101080) getsockname$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x10) 18:56:25 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x40000) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000040)=@bpq0='bpq0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@ll={0x11, 0x13, r2, 0x1, 0x7, 0x6, @local}, 0xfffffffffffffc80, &(0x7f0000007f80), 0x1, 0x0, 0xffffffffffffff5a}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000180)) 18:56:26 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4000000004e20, @dev={0xac, 0x14, 0x14, 0x25}}, 0xfffffffffffffecc) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fstatfs(r1, &(0x7f0000000200)=""/165) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:26 executing program 3: r0 = accept4(0xffffffffffffff9c, &(0x7f0000002000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000002080)=0x80, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, 0x0, 0x40) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3, 0x40000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0xc0, 0xfffffffffffffffd}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x100000001) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', r1}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f0000000380)={@local}) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000440), &(0x7f0000000500)=0xc) syz_open_pts(0xffffffffffffffff, 0x400001) listen(r2, 0x3) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x4, 0x4) accept4$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'irlan0\x00', {0x2, 0x4e22, @broadcast}}) fdatasync(r3) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008914, &(0x7f00000003c0)="0adc1f") syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000100)) 18:56:26 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x8001007, 0x0, 0x133bbd41b39a60d2}) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) 18:56:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"/293], 0x1}}, 0x800) 18:56:26 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x7fff) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x11) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={r3, 0x401}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0xa}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={r4, @in6={{0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20000}}, 0x0, 0x0, 0x0, 0xffffffffffffbffd, 0x4d}, 0x98) 18:56:26 executing program 2: fstat(0xffffffffffffffff, &(0x7f0000000080)) unshare(0x600) pipe(&(0x7f0000000040)) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 18:56:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x189301, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x10100801d) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), 0x0) 18:56:26 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x802102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x40189206, 0x20200000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/253, &(0x7f0000000000)=0xfd) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000040)="99f6cf34c305e77e3fc6e776a2fd9b4d97c17959c3fbc0aefed2d37cae208982c41ab0e3c0ef833bd31f29491a22fbc1d7cf5c117cee69bc83870db2a87085cc153aefd01a61a771f232cdcbbd5d9b68064ef7b5ab") 18:56:26 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) connect(r0, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x4, 0x2, 0x0, {0xa, 0x4e22, 0x5, @rand_addr="a491d0f3cb3025be2b6ef2fad535befe", 0xfffffffffffffff8}}}, 0x80) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x101, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4048851) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r3, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r5 = fcntl$dupfd(r3, 0x0, r3) write$P9_RXATTRWALK(r5, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000003c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r2 = syz_open_pts(r0, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={0x9}, &(0x7f0000000240), &(0x7f0000000140)={0x0, 0x989680}, 0x8) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ubi_ctrl\x00', 0x120c254899410842, 0x0) bind$unix(r3, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f00000002c0)=ANY=[], 0x0) 18:56:26 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fcntl$dupfd(r0, 0xc088d215c17c4d5f, r1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000000c0)=0x8, 0x4) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x0, @buffer={0x10e, 0x0, 0x0}, &(0x7f0000000040)="160000000000", 0x0, 0x0, 0x0, 0x0, 0x0}) 18:56:26 executing program 3: syz_open_dev$vbi(0x0, 0x1, 0x2) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x4924924924925ac, 0x0) 18:56:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)=0x1) 18:56:26 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x0) r1 = dup(r0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000080)) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000040)) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000005c0)={0x1, 0x0, 0x0, {0xfffffffffffffffe}}) [ 181.466287] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 18:56:26 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0xfffffffffffffffc}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={r2, @in={{0x2, 0x4e20, @multicast1}}, 0xff, 0xa53, 0xff, 0x372ba3c8, 0x9}, &(0x7f0000000140)=0x98) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f00000002c0)=""/191) 18:56:26 executing program 4: r0 = socket$inet6(0xa, 0x9, 0x80000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) dup3(r1, r0, 0x0) 18:56:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f9, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000003"]}) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7ff, 0x80000) ioctl$RTC_PIE_OFF(r2, 0x7006) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0xac, "8c0eefc38e4cc20df5694d9bd089186ed449330893630fd6dbad696f2a8075bf58e78f61e2a7d8cb4bcc82b8653d68c2aa6db34b1c8c82ec0892a38f9c1d00edacae2fdba9b2af8655cbcbfce213b80468740f00ad8b4003223e6402a4e04ea77d40db3b6f657ae66fb02afcc3ba70667ee600084b36c74c62c9f30e8d5030e2ab35148b51ed08efb1706dd0ea140d6340a0cabe204bf40f833b297af237d3fca87cf7d8133a6ed1becee053"}, &(0x7f0000000140)=0xb4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r3, 0x5}, &(0x7f00000001c0)=0x8) fcntl$lock(r0, 0x1f, &(0x7f0000000200)={0x8e3145d0c3fc20c9, 0x10000006, 0xb5ce, 0x20000000004, r1}) [ 181.523552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 18:56:26 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000000c0)=0xd000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) socketpair(0x7, 0x800, 0x81, &(0x7f0000000000)) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000140)=0x9, 0x4) 18:56:26 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f00000002c0)="0000d44484cef2b02b4cdbc880ec0880013f45409978f64cc6a6194c4de798e24403837c14adb0fe5c91a175b70fd9a7a94f592ede0c282f237f0d40bef9395540875d3b6a418c4afb59d1a37dde0a1464c79a46af97565372e9308bf89c2dc2cf7ce78f4695a9af1f475c1846ef443f6a55f2998b381acbdb33", 0x222) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x800, 0x10004) r2 = add_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000200)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', &(0x7f0000000240)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x1}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="3400ad88dc000000003c0000009aeec495"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) 18:56:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) recvfrom$llc(r1, &(0x7f00000001c0)=""/157, 0x9d, 0x2000, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x400, 0x80000) epoll_pwait(r2, &(0x7f0000000140)=[{}, {}, {}], 0x3, 0x101, &(0x7f0000000180)={0x1}, 0x8) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r3 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r3, &(0x7f0000000040)={0x406}, 0xfdef) [ 181.573086] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.601116] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.612656] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 18:56:26 executing program 0: r0 = epoll_create1(0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x6, 0x10400) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000000c0)={0x3f, 0x7, 0x46eb, 0x5, 0x100000001, 0x4}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x8}) [ 181.628773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.644597] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.683761] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 18:56:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockname$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x1c) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x3f, 0x7, 0xbb6, 0xc99e, 0x400, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x3) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)) getpeername$netlink(r2, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_open_pts(0xffffffffffffffff, 0x0) [ 181.742073] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 18:56:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1000000003c) fcntl$setstatus(r1, 0x4, 0x42803) 18:56:27 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000000c0)=0xd000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) socketpair(0x7, 0x800, 0x81, &(0x7f0000000000)) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000140)=0x9, 0x4) 18:56:27 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04032bbd70000200df2503000000080006000800000000000000d61e0000"], 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x41) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x1fffff, 0x0) write$binfmt_elf32(r2, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x7, 0x6, 0x10000, 0x4, 0x3, 0x3, 0x9, 0x26b, 0x38, 0x1ac, 0x10001, 0xff, 0x20, 0x2, 0x7, 0xffffffffffffffd9, 0x4}, [{0x60000000, 0x4, 0x80000000, 0x9, 0x0, 0x9, 0x1ff, 0x3}], "28502abd6b7fe3dac68e2a5d5cfd841f0acb503bfdeacd5bac1afd9be66628aa338759c09dadea4735d38eab34025c47e568e377335d38c72995e0e6f9d1349448f967bcfeb3d97ff64f58368a29263d9cf86801a8cf9e58f4f3103b7041c0284749402f1197745b4af2b7c6bf721609d186f8f6c46ec5861f33e85a67ab28c280bdb3e7d97b256d85c41146e0dc1688e2d8934dc560b0c5d69e6ef812f4c12c4d7dbb2225", [[], [], [], [], [], [], []]}, 0x7fd) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3800000, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f00000002c0)=0xff) sendmsg(r4, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000640), 0x2e2, &(0x7f0000000180)=[{0x20}], 0x20}, 0x0) r5 = getuid() ioctl$TUNSETOWNER(r3, 0x400454cc, r5) 18:56:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x8200, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f00000001c0)={0x9, 0xfffffffffffffffc}) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r3 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r3, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:27 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e22, @remote}}) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="ad543203cf6b", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x4788}}}}}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400040, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 18:56:27 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:27 executing program 2: io_setup(0x100000007, &(0x7f00000002c0)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="3100000000060000000000248a01000000090000009ae8592f80000000000000"], 0x31) io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0xc32, r1, &(0x7f0000000140)="8e767f6faeb9510d6f0a6d5d436f2882bc0bf349eeb0d0eaad41d1729f051000206b69adef1a03e06b153154bd0c2f4801d5caec911d22593180ade1467ff1d5c41062ab60cd6fbf995a6743f0b2c9f6c9184ae9d45952e45810f78ef43520d06a1711100abbc2ef5376bd90e935f5929dea1328aba54916dc7c91626878d03b7ab224d7e03520ce87a9c0823bd5aa5223e7e58294e55d6da20fc578636a76070c3faa7c7d31013b742c6008f88ce71d1dea59c388063d361739cfc89d31a72245085df838a5711bb52e864812af81006fb9", 0xd2, 0x34b, 0x0, 0x1, r2}, &(0x7f0000000240)) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') getdents(r3, &(0x7f0000000000)=""/38, 0x17c) 18:56:27 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e22, @remote}}) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="ad543203cf6b", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x4788}}}}}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400040, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 18:56:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000180)=0x4f31) 18:56:27 executing program 3: clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000340), 0x0, 0x0, 0x8) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='configfs\x00', 0x1a08032, &(0x7f0000000240)='\x00') setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4f, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r3, &(0x7f0000007e00), 0x3ffffeb, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0xe, r0) link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ptrace$pokeuser(0x6, r0, 0x388, 0xffffffffffffffff) 18:56:27 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e22, @remote}}) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="ad543203cf6b", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x4788}}}}}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400040, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 18:56:27 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:27 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0145401, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x6000000}}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x8001200000, 0x0) fsetxattr(r0, &(0x7f0000000040)=@random={'btrfs.', '/dev/mixer\x00'}, &(0x7f00000000c0)='!*(posix_acl_access@em0ppp0\xcekeyring%\x00', 0x25, 0x2) 18:56:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x100000000005, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 18:56:27 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e22, @remote}}) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="ad543203cf6b", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x4788}}}}}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400040, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 18:56:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0xfffffffffffffffc) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000180)) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:27 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e22, @remote}}) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="ad543203cf6b", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x4788}}}}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400040, 0x0) 18:56:27 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80), 0x0, 0x0, 0xfd0c}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0xa, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) 18:56:27 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x4924924924925cd, 0x0) dup2(r1, r0) 18:56:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x410803, 0x0) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f00000001c0)={0x1, "6e98038abbffa0859dc57489129461c58ebbdaf4be60e4b81dda30be39b5230e", 0x400, 0x1, 0x8}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000240)={0x4, 0x0, 0x2, 0x80000000}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f0000000300)=0x14) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000280)={0x7, r4, 0x10001, 0x9}) write$P9_RXATTRWALK(r3, &(0x7f0000000040)={0x406}, 0xfdef) 18:56:27 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e22, @remote}}) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="ad543203cf6b", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x4788}}}}}, 0x0) [ 182.560160] protocol 88fb is buggy, dev hsr_slave_0 [ 182.565511] protocol 88fb is buggy, dev hsr_slave_1 [ 182.571782] protocol 88fb is buggy, dev hsr_slave_0 [ 182.577138] protocol 88fb is buggy, dev hsr_slave_1 18:56:27 executing program 3: r0 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) sendto$inet6(r1, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) 18:56:27 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045001, &(0x7f0000000140)=0x20) 18:56:27 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)="de", 0x1}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x9, @mcast1, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x98) accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) socket$netlink(0x10, 0x3, 0xe) 18:56:27 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="ad543203cf6b", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x4788}}}}}, 0x0) 18:56:27 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff}}, 0xe8) close(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@loopback, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f0000000200)={0x90, 0xffffffffffffffda, 0x5, {0x6, 0x3, 0x6, 0x9539, 0x5, 0x0, {0x4, 0x7, 0x2, 0x2, 0x1, 0x1ff, 0x4, 0x0, 0x80000000, 0x100000001, 0x93, r2, r3, 0xffffffff}}}, 0x90) 18:56:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, &(0x7f0000000040)={0x406}, 0xfdef) getpeername(r0, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000002c0)={r2, 0x9, 0x81, "1b8601b5cb03ccfc120b2015bc6896f74ac5640d1602654d9b1f259d1a89255bdcb446249189d6f518107297d5e8a3c39d4cb67b6284d00780d990592dbc41199efea3d84e61be7a1c2c2c5e18a539721d70755d5132ab3551c86d9998432e7e325cfc2a455aba5ea47962600384e25d78061d0acf25cfb634fcc3f54b3100059c95719cd4b4ad9b6d2d9ceb5c6a15ab6f99400fef81152bcd633e7a248c0ebd9dc57b9aab8110266d1216857cf47b18c7e8c794b3688e52def5e319d532a573b8906b2b09d8b89bcfb30c"}) 18:56:28 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="ad543203cf6b", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x4788}}}}}, 0x0) 18:56:28 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) [ 182.824014] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 182.865117] ================================================================== [ 182.873716] BUG: KASAN: use-after-free in padata_parallel_worker+0x313/0x3b0 [ 182.880927] Write of size 8 at addr ffff8880a9f67e98 by task kworker/0:1/25 [ 182.881553] BUG: unable to handle kernel [ 182.888549] [ 182.888550] paging request at ffffffffffffffc8 [ 182.892782] CPU: 0 PID: 25 Comm: kworker/0:1 Not tainted 4.14.124 #18 [ 182.894523] IP: pcrypt_aead_enc+0x80/0x100 [ 182.899140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.899154] Workqueue: pencrypt padata_parallel_worker [ 182.905709] PGD 766d067 [ 182.919651] P4D 766d067 [ 182.924933] Call Trace: [ 182.927585] PUD 766f067 [ 182.930252] dump_stack+0x138/0x19c [ 182.932971] PMD 0 [ 182.935724] ? padata_parallel_worker+0x313/0x3b0 [ 182.941634] print_address_description.cold+0x7c/0x1dc [ 182.946458] Oops: 0000 [#1] PREEMPT SMP KASAN [ 182.951731] ? padata_parallel_worker+0x313/0x3b0 [ 182.956206] Modules linked in: [ 182.961992] kasan_report.cold+0xa9/0x2af [ 182.962001] __asan_report_store8_noabort+0x17/0x20 [ 182.965178] CPU: 1 PID: 23 Comm: kworker/1:1 Not tainted 4.14.124 #18 [ 182.969335] padata_parallel_worker+0x313/0x3b0 [ 182.974429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.981164] ? check_preemption_disabled+0x3c/0x250 [ 182.985924] Workqueue: pencrypt padata_parallel_worker [ 182.995506] ? padata_sysfs_store+0xa0/0xa0 [ 183.000775] task: ffff8880a9e4c600 task.stack: ffff8880a9e58000 [ 183.000786] RIP: 0010:pcrypt_aead_enc+0x80/0x100 [ 183.006050] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 183.010757] RSP: 0018:ffff8880a9e5fc80 EFLAGS: 00010246 [ 183.016812] process_one_work+0x863/0x1600 [ 183.027151] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 183.032496] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff82b52a5e [ 183.036720] worker_thread+0x5d9/0x1050 [ 183.041471] RDX: 1ffffffffffffff9 RSI: 0000000000000008 RDI: ffff88809a5ed788 [ 183.048829] kthread+0x319/0x430 [ 183.053016] RBP: ffff8880a9e5fca0 R08: ffff8880a9e4c600 R09: 0000000000000002 [ 183.060535] ? process_one_work+0x1600/0x1600 [ 183.063929] R10: 0000000000000000 R11: ffff8880a9e4c600 R12: ffff88809a5ed750 [ 183.071280] ? kthread_create_on_node+0xd0/0xd0 [ 183.075755] R13: ffff88809a5ed788 R14: ffff8880a9e5fcf0 R15: ffff88809a5ed758 [ 183.083017] ret_from_fork+0x24/0x30 [ 183.087724] FS: 0000000000000000(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 183.095471] [ 183.099162] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.107690] Allocated by task 10692: [ 183.109305] CR2: ffffffffffffffc8 CR3: 0000000056510000 CR4: 00000000001406e0 [ 183.115185] save_stack_trace+0x16/0x20 [ 183.118960] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 183.126217] save_stack+0x45/0xd0 [ 183.126224] kasan_kmalloc+0xce/0xf0 [ 183.130184] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 183.137531] __kmalloc+0x15d/0x7a0 [ 183.140963] Call Trace: [ 183.144668] tls_push_record+0x10a/0x1210 [ 183.152125] padata_parallel_worker+0x24a/0x3b0 [ 183.155640] tls_sw_sendmsg+0x9e8/0x1020 [ 183.155648] inet_sendmsg+0x122/0x500 [ 183.158481] ? padata_sysfs_store+0xa0/0xa0 [ 183.162606] sock_sendmsg+0xce/0x110 [ 183.162613] SYSC_sendto+0x206/0x310 [ 183.167368] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 183.171685] SyS_sendto+0x40/0x50 [ 183.175470] process_one_work+0x863/0x1600 [ 183.180120] do_syscall_64+0x1e8/0x640 [ 183.183840] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 183.187620] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 183.193096] worker_thread+0x5d9/0x1050 [ 183.196528] [ 183.200844] kthread+0x319/0x430 [ 183.204782] Freed by task 10692: [ 183.204791] save_stack_trace+0x16/0x20 [ 183.209478] ? process_one_work+0x1600/0x1600 [ 183.214707] save_stack+0x45/0xd0 [ 183.218753] ? kthread_create_on_node+0xd0/0xd0 [ 183.220464] kasan_slab_free+0x75/0xc0 [ 183.223813] ret_from_fork+0x24/0x30 [ 183.227212] kfree+0xcc/0x270 [ 183.227221] tls_push_record+0xc03/0x1210 [ 183.231494] Code: [ 183.236121] tls_sw_sendmsg+0x9e8/0x1020 [ 183.239551] 3c [ 183.244216] inet_sendmsg+0x122/0x500 [ 183.248093] 02 [ 183.251803] sock_sendmsg+0xce/0x110 [ 183.251809] SYSC_sendto+0x206/0x310 [ 183.254898] 00 [ 183.259032] SyS_sendto+0x40/0x50 [ 183.259040] do_syscall_64+0x1e8/0x640 [ 183.261173] 0f [ 183.265309] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 183.267178] 85 [ 183.271013] [ 183.273149] 8b [ 183.276978] The buggy address belongs to the object at ffff8880a9f67e40 [ 183.276978] which belongs to the cache kmalloc-256 of size 256 [ 183.280864] 00 [ 183.282741] The buggy address is located 88 bytes inside of [ 183.282741] 256-byte region [ffff8880a9f67e40, ffff8880a9f67f40) [ 183.286172] 00 [ 183.290044] The buggy address belongs to the page: [ 183.291914] 00 [ 183.297187] page:ffffea0002a7d9c0 count:1 mapcount:0 mapping:ffff8880a9f67080 index:0x0 [ 183.299058] 48 [ 183.302544] b8 [ 183.315200] flags: 0x1fffc0000000100(slab) [ 183.317223] 00 [ 183.329472] raw: 01fffc0000000100 ffff8880a9f67080 0000000000000000 000000010000000c [ 183.331377] 00 [ 183.336492] raw: ffffea00022ca520 ffffea0002963da0 ffff8880aa8007c0 0000000000000000 [ 183.338358] 00 [ 183.346569] page dumped because: kasan: bad access detected [ 183.348500] 00 [ 183.350375] [ 183.354681] 00 [ 183.356928] Memory state around the buggy address: [ 183.364883] fc [ 183.366761] ffff8880a9f67d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 183.374661] ff [ 183.376551] ffff8880a9f67e00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 183.382238] df [ 183.384115] >ffff8880a9f67e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 183.385725] 48 [ 183.387611] ^ [ 183.392697] 8b [ 183.394574] ffff8880a9f67f00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 183.402027] 5b [ 183.403903] ffff8880a9f67f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 183.411288] 38 [ 183.413352] ================================================================== [ 183.420691] 48 [ 183.422657] Kernel panic - not syncing: panic_on_warn set ... [ 183.422657] [ 183.426695] 8d 7b c8 48 89 fa 48 c1 ea 03 80 3c 02 00 75 65 4c 89 ef 53 c8 49 8d 7c 24 1c 48 ba 00 00 00 00 00 fc ff df 48 89 f9 [ 183.476289] RIP: pcrypt_aead_enc+0x80/0x100 RSP: ffff8880a9e5fc80 [ 183.482515] CR2: ffffffffffffffc8 [ 183.485964] ---[ end trace 8826f232a5b8ab2f ]--- [ 184.528231] Shutting down cpus with NMI [ 184.534121] Kernel Offset: disabled [ 184.538252] Rebooting in 86400 seconds..