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"}]}, @nested={0x1f8, 0x52, [@typed={0x8, 0xd, @fd=r9}, @generic="b1d1d0639adc40d8e3a4c17fbaf25a4beb7531b339c386bded290690be56adba6bfba95b3214027af16ab9b7fff141144ef408bf6b03c9836833d8c7843b7dd39989de7c9f9e23c0f97a27ff4aad9b2ebb557719433c1dfc1faa282e42425ab6e102887a1bf0505aaeefd4f8b3ac1ddb6b87b91b2c3d9e6b71acfd705b871b371afaf2f83d99293669ef6629aaed9211e423a07bca5452443a1deedbdabbed72878572ea5b271f6d46d3abb3b970b7dd1e1e0df2b63206a461d294a4bbcaf36f83153833066a2502a2c8b75f8bc984abae2e3af0407607e1f90036883323b44370030916d1865b00497cb1e658f6db76a65c7be8d4083e40", @generic="8741aadfe9e65d047db6d00f4b6c402891591f250e832b8875e4c319c666f5ebc13d7a36d147d457afe4f27988fd68b5eb65409df4a22f438eb3ec67f585ca641c572053d0b239df5cba889021b1c24bfaaf0fd9b9a42b0fb3dee0d605e80c526ce75deb1ae0cf26b9cdeded8eefe3f0ad955677a76d0ca454caef70a2c763beedd50fe66705c545d3b8ff833ea84f8458da158903487809ea79c0d294330e8073577e15f3b1a0454b77eed359eab2524a8634d57d8106ec4339fe888916c0a91f9253c20543cba0933d4718a1b3bf733f39cc71d5d66fca1af616af3f", @typed={0x14, 0x47, @str='/dev/dlm_plock\x00'}]}, @nested={0x12b4, 0x54, [@generic="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", @typed={0xdc, 0x5f, @binary="2df5ce85225b6b9e58799cd59afb610ddfa4f5fb10f76c662d20f4ac211eba94fc186e8fc0c1361f000040f7e9fc5db98489c00172389dc1245ce48bb1d100000400000000000000000000000000000000000000000000000000dfb9cecbb9ccb8f53fe7e41151b0b94373ea6b45e53945dac66e79e9459c97c8f33dc26989be3a4f08ca773945c733b4025071500c3f8ed31fb55c01ed17643b8b14216fed485c01bb29e12a25ccae928bf272aa04a4f978469770922afc0ac126dfe58d149ffdae0baaeb83804690106b9b78ab424987c3a6f2d333bc"}, @typed={0x8, 0x36, @pid=r10}, @generic="4329015bfbcde7173821e7eeb5341f9d51cd801dc16bcc47375328fc3bc2525468ae2a617d016dfb0479b396bf3db0e18da27c390c703ecad8c408347ba9862a669aed706be1eea0c42a947e231afc2b27c2b38e8000d3559897c98a8b20d1b8ab3929fa11d7b1b1c22e408773a7c24d71134c903fd071f693d10b13fb001d23adec265339c96dd35fc0b22d67291b405d876b7e5f9b87630b706362ff5964463698c47e9bed403d4e970f1aa2cbfe921b8cc9c8d17ada1180c76ea576cd4232f332d45ff0", @typed={0x14, 0x83, @ipv6=@remote}, @typed={0x8, 0x32, @pid=r11}, @typed={0x8, 0x7a, @uid=r12}, @generic="9fcf2f597bdf9ffad785c14fd920aa9c93c501a7b5632e0819132235de7ba5d7f6153444dac79da44833af045321cc99cba455bf43e18d0493214ad1e89839797bad5ed544af4775ebc13826eb652c2d5ef068366e5435c3c7ae5c4a80adf8deaacbbc53b59c3145de74fe6b89f6a6942662ab421a3dfb5dc12555447d8657026155b2bf94de0fca396962bf4cd5e66a7e07a759592f0c5ba8111e459203e75791bcf436af1461b3d143cc16de5f2a975d7e01ce1b7f72da28ea4bc11e3970aed9afac8aa2f2be80239596406cbda6c094c3e024673a13679b881728afeb966908cd68"]}, @typed={0x14, 0x21, @ipv6=@loopback}]}, 0x24ec}], 0x1, &(0x7f0000002d80)=[@rights={{0x20, 0x1, 0x1, [r24, r51, r52, r54]}}, @rights={{0x38, 0x1, 0x1, [r0, r53, r17, r18, r0, r19, r20, r25, r61, r29]}}, @rights={{0x14, 0x1, 0x1, [r33]}}, @cred={{0x1c, 0x1, 0x2, {r35, r36, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r37, r38, r39}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r40, r44, r45, r46, r50]}}], 0xf0, 0x2048044}, 0x8890)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r62 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002f00)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000008c81320c579bb553ccd2680a0c344eec3b3b3f310065040800ec000000040400000200000000000000000000006a0a00fe00000000850000000d000000c0000000000000009500000000000f00e3a333a0daf2f73451c0e17a606fe530cb7d7f933eda02ba182873186751123d3ee7cf43548ee858e07dfbdfd4e7540ebec677d6ac14c2c794f72cbf5fe31789e70233bfd8115efd90b0c48258f8dbe82e16cf8db95f5b068a9e0000000000000000000000000000000000000000000000000000000000000018287ba7d8807cf077cc420efca6785deb669d0a919802763e0d70d4e3d9006a3d6eef8fb7fcdd82eb1e4841f566c489f3858678ebe435f5d20498fb8cbd3c822d1a17e4bcd727c4a2533aeb329356958df9b37ccdb9cb689b123807e59aadd6f0a83e4df736b2109762601104308604c83af06f20a174c3b5475af0ab6c3a60eaaf2b0ceb8b167e67002158f84ea09b6eaf0559bc858023fdd662af1bebc18d318fe03a8d53442d404fe290cc1fe22b9c4ec5e0de13e7643867ece960"], &(0x7f00000030c0)='\xc3n\x16S\xbb\x87/\xfc\x9fB\xd6i\x1b7\x11\xdb\xc0*\x0e\xf2\xccc\x13\xf4l\x02\n\xf6!z\x03\xd8', 0x2, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x0, 0x10, &(0x7f0000000000), 0x6f}, 0x407)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r62, 0x3600000000000000, 0x44, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49f21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x78, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x40)

15:52:59 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0))
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffa7)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
sendfile(r3, r1, 0x0, 0xffffffff)

15:52:59 executing program 4:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
clone(0x4010000, &(0x7f0000000100)="8ad126e28c868a1998e004993291ef4413f21f29c1ad951fef0aa77a1704fd397a96c048c7f783f519c6e1b38876ade4fc4782ccbed7cbf8b70b1eb21f6c8d3eb0684bbd4b13b64ec5a66139210f1af4dd7ada4e37d4df4cf263960e33befb97557a2478c25c2029fdaf02d7091cc5ebcbee03262e72c20625c475f06e69e1b94d2baf2aaa2a2edd8ff49c44d78abdb389c98487f6eec7ebfd6ae4545ae6292e3fcdc4a396da2c04f4a2d637871c", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="e00899b9016322234fa409b7eb3fe0d2ec6f5688705a0ea101851a5e4783ca622b4ade513fb632118df374b0dfc047df08f50d4244713e4278e81f2e12a08450fbb9e395737947276f0f9789410dd858acd26c14df26f99e40f3ef176139349fa4f8d8ed04b2014f0605471591b55446d384cfeb039a60311116c6e9a4eb1f1d43ad08919b35c1d30383620565925794d7af3e4b4572ed0e90c7bcdec6cb8746e5b69306fdfb5c0d44bb8364078497a55786b881732b84d5408b5104bac75191fbe9ba92c9861a31f3035a7f95c4bd3d0eca89a992e222dc84c9a42a2ede11bce09caf6e22036cb625b1d8ff7a43311e4e1ffe24733acd")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xd0, &(0x7f0000000000)=0x200, 0x4)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x208000, 0x0)
ioctl$VIDIOC_ENUMOUTPUT(r3, 0xc0485630, &(0x7f0000000080)={0x6, "1c7c6da3ff3a0288e33b2ca1a277959c62e2c011a9784f4f88aff021b9f9e4cb", 0x3, 0x6, 0x9, 0x82008, 0x8})
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_script(r4, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r5 = getuid()
syz_mount_image$reiserfs(&(0x7f0000000400)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x1, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000480)="2540e6b3422f3ceb3f11421289afe870794401cb5a5bb342fce5981cc5568422c076bf98477963c7d23d77f004b93433860344a68ca1625f04db32fe6092a33f91aafdcda8c22dda8587fecccbf77a05f001efb903f46a0d80c1e376369d4b41bef35e3866a40d4a181644445f082a978b2ede", 0x73, 0xfae}, {&(0x7f0000000500)="9fdd00f53fd5aac877faa3c166051cd8717ed2ffed45888b7e51889958f36cb0ac8f68ceb969b03e7cdc478afce59681619e00d4fcf156e2db972acf08f352fd34c864a6d735cbcdddf41d805623fe4b16d6d1dc362ff10a504771c864ac6b117aba55666c43629017bbbe472f770cfcda4c1fcaaf551b1e6a0b2a2de6440b192d6b505715e6b9b932b05a58214b3006fa7cc9c8802610e282fd008ed6ec6e167d52bfa70060d3632f6eab23", 0xac, 0x5}], 0x1000011, &(0x7f0000000600)={[{@balloc_test4='block-allocator=test4'}], [{@obj_user={'obj_user', 0x3d, '/dev/nullb0\x00'}}, {@uid_eq={'uid', 0x3d, r5}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x39, 0x31, 0x901d90f627e61593, 0x35, 0x35, 0x55, 0x37], 0x2d, [0x0, 0x36, 0x37, 0x37], 0x2d, [0x65, 0x62, 0x34, 0x5e], 0x2d, [0x32, 0x65, 0x34, 0x47], 0x2d, [0x65, 0x30, 0x61, 0x36, 0x31, 0x30, 0x61, 0x34]}}}]})
ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000040)={0x4})

15:52:59 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  277.515954] audit: type=1800 audit(1571586779.660:119): pid=12881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=132 res=0
15:52:59 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:52:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0xc}})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"})
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4cb, 0xfffffffffffbfffd]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  277.594878] audit: type=1804 audit(1571586779.670:120): pid=12881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir311334474/syzkaller.tcWq1P/164/file0/file0" dev="loop3" ino=132 res=1
[  277.633763] audit: type=1400 audit(1571586779.700:121): avc:  denied  { map } for  pid=12886 comm="syz-executor.4" path="/dev/nullb0" dev="devtmpfs" ino=1521 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1
[  277.683003] audit: type=1804 audit(1571586779.730:122): pid=12892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir311334474/syzkaller.tcWq1P/164/file0/file0" dev="loop3" ino=132 res=1
15:52:59 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  277.761580] kvm: pic: non byte read
[  277.767877] kvm: pic: non byte write
[  277.773464] kvm: pic: single mode not supported
[  277.773727] kvm: pic: single mode not supported
[  277.779732] kvm: pic: non byte read
[  277.795920] kvm: pic: non byte write
[  277.800920] kvm: pic: single mode not supported
[  277.801021] kvm: pic: non byte read
15:53:00 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  277.814037] kvm: pic: non byte write
[  277.819543] kvm: pic: non byte read
[  277.823614] kvm: pic: non byte write
[  277.832955] kvm: pic: non byte read
[  277.837969] kvm: pic: non byte write
[  277.842551] kvm: pic: non byte read
[  277.850848] kvm: pic: non byte write
[  277.854799] kvm: pic: non byte read
15:53:00 executing program 1:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x30000, 0x0)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000380)={{0x4, @addr=0x1}, "ff9617b52282d430e1cc5684f0343ec112501dc3bd4bad63a1f7fa03d948c67b", 0x3})
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
splice(r2, 0x0, r5, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={<r6=>0xffffffffffffffff})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
r9 = accept4$alg(r8, 0x0, 0x0, 0x0)
splice(r6, 0x0, r9, 0x0, 0x1ffffd, 0x0)
r10 = getpid()
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)=<r11=>0x0)
getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000600)=<r12=>0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002b00))
r13 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240)={0x0, <r14=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r14)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0, <r15=>0x0}, 0x0)
lchown(&(0x7f0000000300)='./file0\x00', 0x0, r15)
r16 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r16, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r16, 0x0, 0x0, 0x0)
r17 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r17, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r17, 0x0, 0x0, 0x0)
r18 = openat$vfio(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/vfio/vfio\x00', 0x1, 0x0)
r19 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r19, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r19, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r20=>0xffffffffffffffff})
r21 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r21, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r22=>0xffffffffffffffff})
write$binfmt_script(r22, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r23 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r23, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r23, 0x0, 0x0, 0x0)
accept4(r23, 0x0, 0x0, 0x1c0800)
r24 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r24, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r24, 0x0, 0x0, 0x0)
write$binfmt_script(r21, &(0x7f0000002ec0)=ANY=[@ANYRESHEX=r24, @ANYRES64, @ANYRESOCT], 0x31)
pipe(&(0x7f0000000380)={<r25=>0xffffffffffffffff})
r26 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r26, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r27 = accept4(r26, 0x0, 0x0, 0x0)
r28 = accept4$alg(r27, 0x0, 0x0, 0x0)
splice(r25, 0x0, r28, 0x0, 0x1ffffd, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002b80)='./cgroup/syz1\x00', 0x200002, 0x0)
pipe(&(0x7f0000000380)={<r29=>0xffffffffffffffff})
r30 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r30, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r31 = accept4(r30, 0x0, 0x0, 0x0)
r32 = accept4$alg(r31, 0x0, 0x0, 0x0)
splice(r29, 0x0, r32, 0x0, 0x1ffffd, 0x0)
r33 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r33, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r33, 0x0, 0x0, 0x0)
r34 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r34, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r34, 0x0, 0x0, 0x0)
fcntl$getownex(r34, 0x10, &(0x7f0000002bc0)={0x0, <r35=>0x0})
r36 = geteuid()
r37 = getpid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002c00)={0x0, <r38=>0x0}, &(0x7f0000002c40)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002c80)={0x0, 0x0, <r39=>0x0}, &(0x7f0000002cc0)=0xc)
pipe(&(0x7f0000002d00)={0xffffffffffffffff, <r40=>0xffffffffffffffff})
pipe(&(0x7f0000000380)={<r41=>0xffffffffffffffff})
r42 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r42, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r43 = accept4(r42, 0x0, 0x0, 0x0)
r44 = accept4$alg(r43, 0x0, 0x0, 0x0)
splice(r41, 0x0, r44, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r45=>0xffffffffffffffff})
write$binfmt_script(r45, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r46 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002d40)='/dev/hwrng\x00', 0x202, 0x0)
pipe(&(0x7f0000000380)={<r47=>0xffffffffffffffff})
r48 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r48, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r49 = accept4(r48, 0x0, 0x0, 0x0)
r50 = accept4$alg(r49, 0x0, 0x0, 0x0)
splice(r47, 0x0, r50, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r51=>0xffffffffffffffff})
write$binfmt_script(r51, &(0x7f0000000380)=ANY=[], 0xfffffed5)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r52=>0xffffffffffffffff})
write$binfmt_script(r52, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r53 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r53, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r54 = accept4(r53, 0x0, 0x0, 0x0)
accept4$alg(r54, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r55=>0xffffffffffffffff})
write$binfmt_script(r55, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r56 = socket$nl_route(0x10, 0x3, 0x0)
r57 = socket$netlink(0x10, 0x3, 0x0)
r58 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r58, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r58, &(0x7f0000000100)={0x11, 0x0, <r59=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r57, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r59, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r56, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r59, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r60 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r60, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0x701, 0x0, 0x0, {0x0, r59, {0x2}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0)
r61 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x18, 0xffffffff, 0x0, 0xac8, 0x308, r55, 0xe0000000, [], r59, 0xffffffffffffffff, 0x1, 0x3}, 0x3c)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002e80)={&(0x7f00000005c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000044}, 0xc, &(0x7f0000002ac0)=[{&(0x7f0000003100)={0x24ec, 0x20, 0x3e69d35b2e00c86d, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x35, @pid=r1}, @nested={0x1014, 0x7, [@typed={0x8, 0x23, @fd=r5}, @typed={0x4, 0x93}, @typed={0x1004, 0x8d, @binary="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"}]}, @nested={0x1f8, 0x52, [@typed={0x8, 0xd, @fd=r9}, @generic="b1d1d0639adc40d8e3a4c17fbaf25a4beb7531b339c386bded290690be56adba6bfba95b3214027af16ab9b7fff141144ef408bf6b03c9836833d8c7843b7dd39989de7c9f9e23c0f97a27ff4aad9b2ebb557719433c1dfc1faa282e42425ab6e102887a1bf0505aaeefd4f8b3ac1ddb6b87b91b2c3d9e6b71acfd705b871b371afaf2f83d99293669ef6629aaed9211e423a07bca5452443a1deedbdabbed72878572ea5b271f6d46d3abb3b970b7dd1e1e0df2b63206a461d294a4bbcaf36f83153833066a2502a2c8b75f8bc984abae2e3af0407607e1f90036883323b44370030916d1865b00497cb1e658f6db76a65c7be8d4083e40", @generic="8741aadfe9e65d047db6d00f4b6c402891591f250e832b8875e4c319c666f5ebc13d7a36d147d457afe4f27988fd68b5eb65409df4a22f438eb3ec67f585ca641c572053d0b239df5cba889021b1c24bfaaf0fd9b9a42b0fb3dee0d605e80c526ce75deb1ae0cf26b9cdeded8eefe3f0ad955677a76d0ca454caef70a2c763beedd50fe66705c545d3b8ff833ea84f8458da158903487809ea79c0d294330e8073577e15f3b1a0454b77eed359eab2524a8634d57d8106ec4339fe888916c0a91f9253c20543cba0933d4718a1b3bf733f39cc71d5d66fca1af616af3f", @typed={0x14, 0x47, @str='/dev/dlm_plock\x00'}]}, @nested={0x12b4, 0x54, [@generic="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", @typed={0xdc, 0x5f, @binary="2df5ce85225b6b9e58799cd59afb610ddfa4f5fb10f76c662d20f4ac211eba94fc186e8fc0c1361f000040f7e9fc5db98489c00172389dc1245ce48bb1d100000400000000000000000000000000000000000000000000000000dfb9cecbb9ccb8f53fe7e41151b0b94373ea6b45e53945dac66e79e9459c97c8f33dc26989be3a4f08ca773945c733b4025071500c3f8ed31fb55c01ed17643b8b14216fed485c01bb29e12a25ccae928bf272aa04a4f978469770922afc0ac126dfe58d149ffdae0baaeb83804690106b9b78ab424987c3a6f2d333bc"}, @typed={0x8, 0x36, @pid=r10}, @generic="4329015bfbcde7173821e7eeb5341f9d51cd801dc16bcc47375328fc3bc2525468ae2a617d016dfb0479b396bf3db0e18da27c390c703ecad8c408347ba9862a669aed706be1eea0c42a947e231afc2b27c2b38e8000d3559897c98a8b20d1b8ab3929fa11d7b1b1c22e408773a7c24d71134c903fd071f693d10b13fb001d23adec265339c96dd35fc0b22d67291b405d876b7e5f9b87630b706362ff5964463698c47e9bed403d4e970f1aa2cbfe921b8cc9c8d17ada1180c76ea576cd4232f332d45ff0", @typed={0x14, 0x83, @ipv6=@remote}, @typed={0x8, 0x32, @pid=r11}, @typed={0x8, 0x7a, @uid=r12}, @generic="9fcf2f597bdf9ffad785c14fd920aa9c93c501a7b5632e0819132235de7ba5d7f6153444dac79da44833af045321cc99cba455bf43e18d0493214ad1e89839797bad5ed544af4775ebc13826eb652c2d5ef068366e5435c3c7ae5c4a80adf8deaacbbc53b59c3145de74fe6b89f6a6942662ab421a3dfb5dc12555447d8657026155b2bf94de0fca396962bf4cd5e66a7e07a759592f0c5ba8111e459203e75791bcf436af1461b3d143cc16de5f2a975d7e01ce1b7f72da28ea4bc11e3970aed9afac8aa2f2be80239596406cbda6c094c3e024673a13679b881728afeb966908cd68"]}, @typed={0x14, 0x21, @ipv6=@loopback}]}, 0x24ec}], 0x1, &(0x7f0000002d80)=[@rights={{0x20, 0x1, 0x1, [r24, r51, r52, r54]}}, @rights={{0x38, 0x1, 0x1, [r0, r53, r17, r18, r0, r19, r20, r25, r61, r29]}}, @rights={{0x14, 0x1, 0x1, [r33]}}, @cred={{0x1c, 0x1, 0x2, {r35, r36, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r37, r38, r39}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r40, r44, r45, r46, r50]}}], 0xf0, 0x2048044}, 0x8890)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r62 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002f00)=ANY=[@ANYBLOB="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"], &(0x7f00000030c0)='\xc3n\x16S\xbb\x87/\xfc\x9fB\xd6i\x1b7\x11\xdb\xc0*\x0e\xf2\xccc\x13\xf4l\x02\n\xf6!z\x03\xd8', 0x2, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x0, 0x10, &(0x7f0000000000), 0x6f}, 0x407)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r62, 0x3600000000000000, 0x44, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49f21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x78, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x40)

[  277.880498] kvm: pic: non byte write
[  277.884494] kvm: pic: non byte read
[  277.904695] kvm: pic: non byte write
[  277.911717] kvm: pic: non byte read
[  277.915514] kvm: pic: non byte write
[  277.928021] kvm: pic: non byte read
[  277.931789] kvm: pic: non byte write
15:53:00 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, 0x0, 0x0, 0x0)

[  278.284446] audit: type=1804 audit(1571586780.430:123): pid=12892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir311334474/syzkaller.tcWq1P/164/file0/file0" dev="loop3" ino=132 res=1
15:53:00 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, 0x0, 0x0, 0x0)

15:53:00 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x9c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x88, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lapb0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000050)
mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0)
fstat(0xffffffffffffffff, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

15:53:00 executing program 5:
timer_create(0x200000003, 0x0, 0x0)
exit(0x0)
timer_delete(0x0)

15:53:00 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x10)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffffff7, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000180)="4f7483fa444fbfe1ddb9865498f2ebf77eab7112e4de7535f53ad617f7459a264b0da0333e01c8014789540709b60a78a8eb79b2f54a3b3542ffc563b581e670abbec8ba685ee2b81cb2f04579cda997bf34df826e923e517067d6dcb59108656502725a8c016ceb64546d00ce5fe5015aca061a648cda0170005ae38ec0c9966fcf407a624be64fa036d763fd5df3e211b7421bf45c0e9e8513bdd84bcbab42c840d886d16f9ac28c6d16b5bc741f943e61daad41fdd70ec3963803d0a56e5f30ee084b8994bd5f9e1bef9fc841087ff98917b6c7e485", 0xd7}], 0x20, 0x0)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x2000, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad25a80648c6394fb0124fc0010000b400c000200053582c137153e370900018025641700d1bd", 0x2e}], 0x1}, 0x0)

[  278.316865] audit: type=1804 audit(1571586780.460:124): pid=12923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir311334474/syzkaller.tcWq1P/164/file0/file0" dev="loop3" ino=132 res=1
[  278.353498] audit: type=1804 audit(1571586780.460:125): pid=12892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir311334474/syzkaller.tcWq1P/164/file0/file0" dev="loop3" ino=132 res=1
15:53:00 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
splice(r2, 0x0, r5, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={<r6=>0xffffffffffffffff})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
r9 = accept4$alg(r8, 0x0, 0x0, 0x0)
splice(r6, 0x0, r9, 0x0, 0x1ffffd, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r11 = accept4(r10, 0x0, 0x0, 0x0)
accept4$alg(r11, 0x0, 0x0, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYBLOB="bfe5d88090317586daa525e0a72f8cb31ca45cd52ad4c65500dd99040afd4e8940cf18f2bee7cb44b61a82ac3eba31ca6d5d71cc6dc3cb0f365f0827", @ANYRES16, @ANYRESHEX=r1, @ANYPTR64=&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRES16=r2, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="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", @ANYBLOB="7863ddf3a8253eaa5f32044aaa1ebf22194306ba2fef6f946af8610b5d059c31072690b9ca591ab4b2d27a68c3337243e5b5eda04bbd1f35b89058e634bb472c78a8b560d35a447972757b9071c9b7f985a357840759ffd0e1bd4d5c2148ba308e18e134cd241bc19761012283506b8a93d92955e47765e410dc211e35c414efba23bc6cd81fb8682cd8daf9828e5c903a45b0c1552cd67308d1146636f452431b803b00be43cbe82b288c1f7ef8f8e0332ad18ba92fe685662c0f258610a506251a6562acb673e577e15323338f4a89cef4d58afe12ac168086", @ANYRESDEC=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYBLOB="6493a652024267cb6faa3c741048dc28aa798bef9885b5bf"], @ANYRES32], @ANYPTR=&(0x7f0000000500)=ANY=[@ANYRESDEC=r6, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYBLOB="945c929cdfca2ef7866b3819fbbde57f6bf450ac6ad256500a04ec0fa0a59cc8300a3748dfb6f113b9b920947484a08bd2e0c0e509dc5e640a39c0a014e01537bd9e2ef33658ca3aa3005e6331a230551738c87abaf030ec9b316d6c23b4977dbd2c5269bd47c84cfc34abe906c070db710f5cd91f3e7e597913727b33d5b466f28838abc7891e8da7686b4fdc864adb50400fcce23b0ee1ec08a8e358805571487c7591e57924511b7880993a4bef67f834aa584c0700", @ANYPTR, @ANYRES64=0x0, @ANYRESOCT=r11, @ANYRESDEC, @ANYPTR64, @ANYRES16=r0], @ANYRES16=r1, @ANYRESOCT=r4, @ANYBLOB="b38de59be207d2647c9c5db8b17c9a49d55093379ad02deb4b35cf2907f365241a8a80be992142f0d22a531b39b7ff6403e4e2f3dc6d6eec063cc0269cc64cc87ec43c22f9d60a9778922e592412fc1ae759d7b928b46c56d39252505b77f8f6a7f4ab65bc5409a27f91ce79a114783d21c4b99ae567109eb1ac6a86d13816d3d1f36a17a22f0567896a59aa887040336107f9d18d2d94b5142162770a49147c87f25c16ea60ff8596201dbcdf709355e4"]], &(0x7f0000000600)='syzkal,e\x04\x00\x00\x00;\x03\"IC\a\xb6LT\x17\xa5\xf0\x8dR\x90\xe0%\f\xf8]h\x82\xa2c\bp\x91\xca9\xddl\xac\x05P\xa9\x83\x03\x00\x1az', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r12, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:00 executing program 1:
tgkill(0x0, 0x0, 0x6)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000001780)='./file0\x00', 0x0, 0x0)
fchdir(r0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x8000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f00000004c0)=0x8)
write(r1, &(0x7f0000000600)="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", 0x1c0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x0, 0x1}, 0xfe3a)
truncate(&(0x7f0000001740)='./file0\x00', 0x5)
sendfile(r1, r2, 0x0, 0x7fffffa7)
r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write(r3, &(0x7f0000000800)="220000002000070700be000009000701020000000000000000200000050013809a774902f371c8fded9993cfd89cb99b1609a388cebf6373ab93b2b69b261d9d2135daa5df337c21d54eb9a43003cec41bc86248b2a2234ed4853ef36112747e8f3c35aafed6766229679b4e17e6549340d179ab5c739255f2f5f34679", 0x7d)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0)
ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000c40)=ANY=[@ANYBLOB="0000000000000000000000008a0000090002000000000000f575048ea5d92f7bfdb4d3cf7f8ed9be1ed036c0603859bdcf4c2d7a67f75255324e966d7a81b6860fd519da22322b9e4ef99389111009d24af430bea39f5f7302bfb037c6d3008a93c35b9e00"/111, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d1d3c0b20b63c10b2dbc3ca8dce13f5e8e130590d7e789e6792a811c6b076f372d1d15a09214ff7da2cd8863f7a30a35db06fbd8309e420a424b2d16c980eaaee3e363b3464640c7914f5d5055c65b98e99c13c083c83247e0fa78004eeecd22736cfd8670a825ee92844af99bee5b451fd6c40f78547b7ef3a48cee8a3f8a0d25eda6f0287bb5369151fae5ccc7c7f80ea949abec9921aa1dc34973fa10fe12112ce074ee5eeb4567397a0e12160666a4d2a590c722370c77c5cf0062bde605"])
ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000000))
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f00000008c0)={{0x7, 0x81, 0x0, 0x9, 0x7f, 0xef}, 0x7fffffff, 0x40, 0x3, 0x4, 0x1, "1c0441abe8d67cbf5b62d74dafa29b5b6cd66651809531fb64967802e85850a80f0de5343ab4a33a3c9a12b01dbace58e373d24c78fb1834c9c154e59b85f91b3984221e1290034070000736d7110e0bd9743b57a8107c386b4d727c4ed38f4c5cdde784d474dbc549d3f50b281d78c3ab9d9f4b60ef164ba95efdf48395787a"})
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r7, r6, 0x0)
request_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='\x00', r7)
r8 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
read(0xffffffffffffffff, &(0x7f0000000040)=""/87, 0x57)

15:53:00 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x803, 0x2)
socket$kcm(0xa, 0x2, 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x546, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x4, 0x0, 0x2}}, 0xe8)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x4240, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000200)={0x0, 0x6, 0x8, 0xe5, 0x40, 0x1f, 0x26, "d996ed4b3b73dbf9c68741aa4975aa355b5c7f3c", "2931be2a589d6a06ccb9f9fa648b3abfe321e715"})
splice(r1, 0x0, r4, 0x0, 0x1ffffd, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r7, 0x0, 0x0, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x80000)
accept4$alg(r8, 0x0, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000001", @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf25020000000c0006000200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x22018000}, 0x20000000)
sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0)

15:53:00 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, 0x0, 0x0, 0x0)

[  278.590673] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  278.605872] audit: type=1800 audit(1571586780.750:126): pid=12949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16993 res=0
15:53:00 executing program 0 (fault-call:5 fault-nth:0):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  278.715021] audit: type=1804 audit(1571586780.760:127): pid=12949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir254642148/syzkaller.QVKmhj/160/file0" dev="sda1" ino=16993 res=1
[  278.718739] device 0 entered promiscuous mode
[  278.794003] audit: type=1804 audit(1571586780.860:128): pid=12949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir254642148/syzkaller.QVKmhj/160/file0" dev="sda1" ino=16993 res=1
[  278.808673] FAULT_INJECTION: forcing a failure.
[  278.808673] name failslab, interval 1, probability 0, space 0, times 0
[  278.828999] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  278.859985] CPU: 1 PID: 12962 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  278.866945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  278.866951] Call Trace:
[  278.866975]  dump_stack+0x172/0x1f0
[  278.866994]  should_fail.cold+0xa/0x1b
[  278.867011]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  278.867028]  ? lock_downgrade+0x880/0x880
[  278.867051]  __should_failslab+0x121/0x190
[  278.867067]  should_failslab+0x9/0x14
[  278.867084]  kmem_cache_alloc_node+0x26c/0x710
[  278.867111]  __alloc_skb+0xd5/0x5f0
[  278.867127]  ? skb_scrub_packet+0x490/0x490
[  278.867142]  ? refcount_add_not_zero_checked+0x240/0x240
[  278.867162]  sock_wmalloc+0xd9/0x120
[  278.897412]  pppol2tp_sendmsg+0x23b/0x6b0
[  278.897430]  ? selinux_socket_sendmsg+0x36/0x40
[  278.905453]  ? pppol2tp_getname+0xd10/0xd10
[  278.905471]  sock_sendmsg+0xd7/0x130
[  278.905486]  ___sys_sendmsg+0x3e2/0x920
[  278.910642] device 1 entered promiscuous mode
[  278.913707]  ? copy_msghdr_from_user+0x430/0x430
[  278.913730]  ? lock_downgrade+0x880/0x880
[  278.913751]  ? kasan_check_read+0x11/0x20
[  278.940394]  ? __fget+0x367/0x540
[  278.940414]  ? iterate_fd+0x360/0x360
[  278.940431]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  278.940445]  ? proc_fail_nth_write+0x9d/0x1e0
[  278.940464]  ? __fget_light+0x1a9/0x230
[  278.940480]  ? __fdget+0x1b/0x20
[  278.940492]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  278.940507]  ? sockfd_lookup_light+0xcb/0x180
[  278.940526]  __sys_sendmmsg+0x1bf/0x4e0
[  278.948214]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  278.948233]  ? kasan_check_write+0x14/0x20
[  278.948262]  ? __sb_end_write+0xd9/0x110
[  278.948279]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  278.948289]  ? fput+0x128/0x1a0
[  278.948302]  ? ksys_write+0x1f1/0x2d0
[  278.948322]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  278.948335]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  278.948347]  ? do_syscall_64+0x26/0x620
[  278.948362]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  278.948374]  ? do_syscall_64+0x26/0x620
[  278.948391]  __x64_sys_sendmmsg+0x9d/0x100
[  278.948412]  do_syscall_64+0xfd/0x620
[  279.060539]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  279.065739] RIP: 0033:0x459a59
[  279.068934] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  279.087822] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  279.095615] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  279.102875] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
15:53:01 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000080)=0xfd1, 0x4)
bind$inet(r2, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0x13db, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x2)

15:53:01 executing program 1:
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x1ffffd, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x1, 0x8, 0x5})
syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[])

[  279.110132] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  279.117390] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  279.124647] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:01 executing program 0 (fault-call:5 fault-nth:1):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:01 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x2b000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000280)={0x5, 0x10, 0xfa00, {&(0x7f00000003c0), r4}}, 0x18)
pipe(&(0x7f0000000380)={<r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r7, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000340)={<r8=>0x0, <r9=>0x0})
setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f00000005c0)={r8, r9/1000+10000}, 0x10)
bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r10 = accept4(r6, 0x0, 0x0, 0x0)
r11 = accept4$alg(r10, 0x0, 0x0, 0x0)
splice(r5, 0x0, r11, 0x0, 0x1ffffd, 0x0)
r12 = accept4$alg(r5, 0x0, 0x0, 0x0)
splice(r1, 0x0, r12, 0x0, 0x1ffffd, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=<r13=>0x0)
syz_open_procfs(r13, &(0x7f0000000300)='net/psched\x00')
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r14=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r14}}, 0x18)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[]}}, 0x0)

15:53:01 executing program 5:
timer_create(0x200000003, 0x0, 0x0)
exit(0x0)
timer_delete(0x0)

[  279.260180] FAULT_INJECTION: forcing a failure.
[  279.260180] name failslab, interval 1, probability 0, space 0, times 0
[  279.290231] CPU: 1 PID: 12979 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  279.297227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  279.306580] Call Trace:
[  279.309189]  dump_stack+0x172/0x1f0
[  279.312812]  should_fail.cold+0xa/0x1b
[  279.316695]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  279.321789]  ? lock_downgrade+0x880/0x880
[  279.325935]  __should_failslab+0x121/0x190
[  279.330163]  should_failslab+0x9/0x14
[  279.333966]  kmem_cache_alloc_node_trace+0x274/0x720
[  279.339077]  ? __alloc_skb+0xd5/0x5f0
[  279.343051]  __kmalloc_node_track_caller+0x3d/0x80
[  279.347981]  __kmalloc_reserve.isra.0+0x40/0xf0
[  279.352654]  __alloc_skb+0x10b/0x5f0
[  279.356358]  ? skb_scrub_packet+0x490/0x490
[  279.360673]  ? refcount_add_not_zero_checked+0x240/0x240
[  279.366132]  sock_wmalloc+0xd9/0x120
[  279.369840]  pppol2tp_sendmsg+0x23b/0x6b0
[  279.373990]  ? selinux_socket_sendmsg+0x36/0x40
[  279.378650]  ? pppol2tp_getname+0xd10/0xd10
[  279.382969]  sock_sendmsg+0xd7/0x130
[  279.386675]  ___sys_sendmsg+0x3e2/0x920
[  279.390640]  ? copy_msghdr_from_user+0x430/0x430
[  279.395390]  ? lock_downgrade+0x880/0x880
[  279.399528]  ? kasan_check_read+0x11/0x20
[  279.403671]  ? __fget+0x367/0x540
[  279.407115]  ? iterate_fd+0x360/0x360
[  279.410906]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  279.416432]  ? proc_fail_nth_write+0x9d/0x1e0
[  279.420931]  ? __fget_light+0x1a9/0x230
[  279.424896]  ? __fdget+0x1b/0x20
[  279.428251]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  279.433779]  ? sockfd_lookup_light+0xcb/0x180
[  279.438264]  __sys_sendmmsg+0x1bf/0x4e0
[  279.442235]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  279.446549]  ? kasan_check_write+0x14/0x20
[  279.450780]  ? __sb_end_write+0xd9/0x110
[  279.454832]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  279.460366]  ? fput+0x128/0x1a0
[  279.463632]  ? ksys_write+0x1f1/0x2d0
[  279.467432]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  279.472177]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  279.476924]  ? do_syscall_64+0x26/0x620
[  279.480895]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  279.486261]  ? do_syscall_64+0x26/0x620
[  279.490254]  __x64_sys_sendmmsg+0x9d/0x100
[  279.494483]  do_syscall_64+0xfd/0x620
[  279.498286]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  279.503467] RIP: 0033:0x459a59
[  279.506999] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  279.525890] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  279.533586] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  279.540843] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  279.548102] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  279.555363] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  279.562621] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:01 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:01 executing program 0 (fault-call:5 fault-nth:2):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:01 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x2, 0x10, 0x4, "84a99a8b0b35e7820a29442cffe30cc72f9160ac0f60af1ce12c13e688e4c14cb5af54315cd62aa97e4b42f0de6b8c31de8879f3b0f309c0708a05f9e7781e65", "764e67e34877ad6a0ef203a6bdfc24b6b22b3d9e3226833a628bca59ee9aec67f138729a6e998a48dd3e2402066d4f49dbb9c0f3bec554df601b325a5d7ac0c7", "fa855e49b8466606ea323ec581933a0e4aa271414c0789820e6be0309c9a75f3", [0x5]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x48e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "9b717ae24481ba1c", "704acb7009f036a298a097b6047b5057", "6362df39", "135fd2685bff9493"}, 0x28)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_script(r7, &(0x7f0000000380)=ANY=[], 0xfffffed5)
write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x6, 0x3, 0x5}}, 0x30)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  279.794502] FAULT_INJECTION: forcing a failure.
[  279.794502] name failslab, interval 1, probability 0, space 0, times 0
[  279.806040] CPU: 0 PID: 12995 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  279.812997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  279.822359] Call Trace:
[  279.824980]  dump_stack+0x172/0x1f0
[  279.828634]  should_fail.cold+0xa/0x1b
[  279.832522]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  279.837627]  __should_failslab+0x121/0x190
[  279.841849]  should_failslab+0x9/0x14
[  279.845642]  kmem_cache_alloc_node_trace+0x5a/0x720
[  279.850653]  ? __kmalloc_node_track_caller+0x3d/0x80
[  279.855765]  ? rcu_read_lock_sched_held+0x110/0x130
[  279.860796]  ? kmem_cache_alloc_node_trace+0x34f/0x720
[  279.866065]  __kmalloc_node_track_caller+0x3d/0x80
[  279.871008]  __kmalloc_reserve.isra.0+0x40/0xf0
[  279.875692]  pskb_expand_head+0x154/0xe20
[  279.879848]  ? lock_downgrade+0x880/0x880
[  279.883998]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  279.890479]  ? iov_iter_advance+0x261/0xe30
[  279.894797]  l2tp_xmit_skb+0xea8/0x1460
[  279.898767]  pppol2tp_sendmsg+0x4a2/0x6b0
[  279.902924]  ? pppol2tp_getname+0xd10/0xd10
[  279.907248]  sock_sendmsg+0xd7/0x130
[  279.910960]  ___sys_sendmsg+0x3e2/0x920
[  279.914931]  ? copy_msghdr_from_user+0x430/0x430
[  279.919690]  ? lock_downgrade+0x880/0x880
[  279.924535]  ? kasan_check_read+0x11/0x20
[  279.928685]  ? __fget+0x367/0x540
[  279.932128]  ? iterate_fd+0x360/0x360
[  279.935932]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  279.941476]  ? proc_fail_nth_write+0x9d/0x1e0
[  279.945974]  ? __fget_light+0x1a9/0x230
[  279.949943]  ? __fdget+0x1b/0x20
[  279.953356]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  279.958911]  ? sockfd_lookup_light+0xcb/0x180
[  279.963410]  __sys_sendmmsg+0x1bf/0x4e0
[  279.967397]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  279.971712]  ? kasan_check_write+0x14/0x20
[  279.975958]  ? __sb_end_write+0xd9/0x110
[  279.980023]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  279.985552]  ? fput+0x128/0x1a0
[  279.988830]  ? ksys_write+0x1f1/0x2d0
[  279.992638]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  279.997396]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  280.002137]  ? do_syscall_64+0x26/0x620
[  280.006124]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  280.011502]  ? do_syscall_64+0x26/0x620
[  280.015505]  __x64_sys_sendmmsg+0x9d/0x100
[  280.019761]  do_syscall_64+0xfd/0x620
[  280.023576]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  280.028779] RIP: 0033:0x459a59
15:53:02 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={<r4=>r3, 0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000180)='[!eth1user^-(vboxnet1wlan0&+selinux,\xbb\x00'}, 0x30)
ptrace$peek(0xffffffffffffffff, r3, &(0x7f0000000080))
prctl$PR_SET_PTRACER(0x59616d61, r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000})
pipe(&(0x7f0000000380)={<r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
r8 = accept4$alg(r7, 0x0, 0x0, 0x0)
splice(r5, 0x0, r8, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$binfmt_script(r9, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r10 = accept4$alg(r9, 0x0, 0x0, 0xc0800)
ioctl(r10, 0x80000001, &(0x7f0000000440)="baaaffae741a32f50378452634721df90ca2c482fdc0751cca0c8a732c8e9116c9e8f3077b0acba42af04a3974a17a38bd56f3e497960e5af50a8458ca8ac5fa8c8ef11b8cb3bc7913a78d638a8f0223f9d095b19f027312b65b71d8f8e8d7db9fb48a38cd3a21dda42676f8be4cb5f41365670ba0e1d8aeea719578d12c7dc8469f1958e344c342dfe51a12042692acdf70b9e6ed53853ed7d335226ffce8aa48420a3d52f1b3134e64beed276e4dc3ef5ef524a757c316c8f8dd9bdac9b5d6caa80d36d9faccb6efe61cdace0b7d90862dd01180a9467412a09e8d5a000000000000000000")
pipe(&(0x7f0000000380)={<r11=>0xffffffffffffffff})
r12 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r12, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r13 = accept4(r12, 0x0, 0x0, 0x0)
r14 = accept4$alg(r13, 0x0, 0x0, 0x0)
splice(r11, 0x0, r14, 0x0, 0x1ffffd, 0x0)
fcntl$dupfd(r11, 0x406, r2)
pipe(&(0x7f0000000380)={<r15=>0xffffffffffffffff})
r16 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r16, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r17 = accept4(r16, 0x0, 0x0, 0x0)
r18 = accept4$alg(r17, 0x0, 0x0, 0x0)
splice(r15, 0x0, r18, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={<r19=>0xffffffffffffffff})
r20 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r20, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r21 = accept4(r20, 0x0, 0x0, 0x0)
r22 = accept4$alg(r21, 0x0, 0x0, 0x0)
splice(r19, 0x0, r22, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={<r23=>0xffffffffffffffff})
r24 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r24, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r25 = accept4(r24, 0x0, 0x0, 0x0)
r26 = accept4$alg(r25, 0x0, 0x0, 0x0)
splice(r23, 0x0, r26, 0x0, 0x1ffffd, 0x0)
syz_kvm_setup_cpu$x86(r19, r23, &(0x7f0000000000/0x18000)=nil, 0x0, 0x315, 0x8, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
io_setup(0xa28a, &(0x7f0000000040)=<r27=>0x0)
io_submit(r27, 0x0, &(0x7f0000000140))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000))

[  280.031980] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  280.050882] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  280.058819] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  280.066082] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  280.074049] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  280.081312] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  280.088572] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:02 executing program 0 (fault-call:5 fault-nth:3):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  280.244873] FAULT_INJECTION: forcing a failure.
[  280.244873] name failslab, interval 1, probability 0, space 0, times 0
[  280.256444] CPU: 1 PID: 13007 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  280.263518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  280.272940] Call Trace:
[  280.275541]  dump_stack+0x172/0x1f0
[  280.279194]  should_fail.cold+0xa/0x1b
[  280.283092]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  280.288204]  ? __nf_conntrack_find_get+0xe45/0x1960
[  280.293230]  __should_failslab+0x121/0x190
[  280.297469]  should_failslab+0x9/0x14
[  280.301283]  kmem_cache_alloc+0x47/0x700
[  280.305339]  ? kasan_check_read+0x11/0x20
[  280.309495]  __nf_conntrack_alloc+0xdb/0x680
[  280.313961]  init_conntrack+0xfd4/0x1340
[  280.318034]  ? nf_conntrack_alloc+0x50/0x50
[  280.322398]  ? __nf_conntrack_confirm+0x31e0/0x31e0
[  280.327438]  nf_conntrack_in+0x98b/0xe90
[  280.331507]  ? nf_conntrack_update+0x990/0x990
[  280.336091]  ? find_check_entry.isra.0+0x9b1/0x9d0
[  280.341029]  ipv6_conntrack_in+0x61/0x90
[  280.345092]  nf_hook_slow+0xbc/0x1e0
[  280.348814]  ip6_xmit+0x11c9/0x2030
[  280.352459]  ? ip6_finish_output2+0x2550/0x2550
[  280.357125]  ? lock_downgrade+0x880/0x880
[  280.361287]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  280.366921]  ? ip6_append_data+0x320/0x320
[  280.371209]  inet6_csk_xmit+0x2fb/0x5ba
[  280.376333]  ? inet6_csk_update_pmtu+0x190/0x190
[  280.381086]  ? dst_release+0x62/0xb0
[  280.384828]  ? udp6_set_csum+0xe1/0x5a0
[  280.388812]  l2tp_xmit_skb+0x116c/0x1460
[  280.392883]  pppol2tp_sendmsg+0x4a2/0x6b0
[  280.397038]  ? pppol2tp_getname+0xd10/0xd10
[  280.401378]  sock_sendmsg+0xd7/0x130
[  280.405080]  ___sys_sendmsg+0x3e2/0x920
[  280.409058]  ? copy_msghdr_from_user+0x430/0x430
[  280.413823]  ? lock_downgrade+0x880/0x880
[  280.417981]  ? kasan_check_read+0x11/0x20
[  280.422141]  ? __fget+0x367/0x540
[  280.425608]  ? iterate_fd+0x360/0x360
[  280.429423]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  280.434978]  ? proc_fail_nth_write+0x9d/0x1e0
[  280.439497]  ? __fget_light+0x1a9/0x230
[  280.443481]  ? __fdget+0x1b/0x20
[  280.446854]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  280.454411]  ? sockfd_lookup_light+0xcb/0x180
[  280.458946]  __sys_sendmmsg+0x1bf/0x4e0
[  280.462936]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  280.462980]  ? kasan_check_write+0x14/0x20
[  280.463005]  ? __sb_end_write+0xd9/0x110
[  280.463023]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  280.471558]  ? fput+0x128/0x1a0
[  280.471574]  ? ksys_write+0x1f1/0x2d0
[  280.471597]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  280.471613]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  280.471627]  ? do_syscall_64+0x26/0x620
[  280.471641]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  280.471656]  ? do_syscall_64+0x26/0x620
[  280.511100]  __x64_sys_sendmmsg+0x9d/0x100
[  280.515360]  do_syscall_64+0xfd/0x620
[  280.515380]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  280.524459] RIP: 0033:0x459a59
15:53:02 executing program 5:
timer_create(0x200000003, 0x0, 0x0)
exit(0x0)
timer_delete(0x0)

15:53:02 executing program 3:
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f00000033c0)=ANY=[@ANYBLOB="18da00000000000000000000000060292cea8ec4a65046aa4800000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x300000000)
syz_mount_image$reiserfs(&(0x7f0000000100)='reiserfs\x00', &(0x7f00000003c0)='./file0\x00', 0x3, 0x5, &(0x7f00000006c0)=[{&(0x7f0000000400)="68c8baf51fcf6fccaafe5d98118bd055116777d7e7bb8e0c278f41fe13b8040a7519e4881e910a3cca81c7b06ef62a2c10dbf1512c5375457a42412915fdcd836d35189c5f3d2926296cd1f3888849a3e726d0553b135be55cb68aa2d34601c778d12207defafee018c0b405d7d6a7b65275966104dffffcdaf25b016cd5477ce6bffcc94b9ccb4654dfe89e05e162008cf06be416e3bd0030716d1b2e0dd4b89c0bf03567576d8dd9a384e98e5742b730c2f3f3882520f82f415ed0c8aa7123", 0xc0}, {&(0x7f00000004c0)="29d2129fa9ab5aa2a28a5f395b94b6c982f3724282371b2ba633b171ce52a0aeffd618852a0d4d393c142fde848e1888348819a8cc3a6cba", 0x38}, {&(0x7f0000000500)="fccd84a2304ca479dd2f1bafed0ba6e36dc453aa248af0c8c653b87bf01cb317983c2bd159b3f7685de8ab3384af7c719887a8682c1cdbd2dd34dada3a770218da56a3e1a0ec86ffd96b2b7822ba9bdc321801f229f6385db7d2eae709f4d5910cb82aa5494a7beb5d5dbd27c2ba7bea42a398d83bca182410d6e6776a43f42e48aa7199da17a10e617b81013a4b17574f043c9e753277708c73b7c84acb718686dee04f1eeaaff1d4e1014cffbf84dfbd3c9740a593089e373129332932616a755c516697fbb8a022ecaaafc4840ef4c6abbb3f0961313db1f096bea7a351e643", 0xe1, 0xfff}, {0xfffffffffffffffd, 0x0, 0xffff}, {&(0x7f0000000600)="f82e15af6c2e5f85284170812539eec0e9726af87b6012522f19039fa7f86b2452c72acee9b1591b4aa669e9a52141211724f1063b138aed404e5ebcbb1997324e24d647721e2c5cf1450f1b09df9f2f030b673588b8045a3aab96c4688d7152f36a9ec1328cbf4233e66d428a0aa8dc165e8a3b8208b3c83961bff1af639d33486ba35c027ff6d277", 0x89, 0x1}], 0x40, &(0x7f0000000740)={[{@balloc_hashed_reloc='block-allocator=hashed_relocation'}, {@noattrs='noattrs'}, {@tails_on='tails=on'}, {@data_ordered='data=ordered'}, {@tails_off='tails=off'}, {@jdev={'jdev', 0x3d, './file0'}}, {@jqfmt_vfsv0='jqfmt=vfsv0'}, {@errors_continue='errors=continue'}, {@noquota='noquota'}], [{@permit_directio='permit_directio'}, {@subj_role={'subj_role', 0x3d, 'ppp0posix_acl_access-+!userposix_acl_accessuser%ppp0!keyring*#\\'}}, {@context={'context', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@obj_user={'obj_user', 0x3d, '/dev/vhost-net\x00'}}, {@dont_measure='dont_measure'}]})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000))
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x50b83e23aa8e0166, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xfffffffffffffe35, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xd0, 0x0, 0x0)
r3 = syz_open_dev$midi(&(0x7f0000000880)='/dev/midi#\x00', 0x10001, 0x501000)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000009c0), &(0x7f0000000a40)=0x4)
semget$private(0x0, 0x4, 0x95)
r4 = getpid()
flock(r1, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_script(r5, &(0x7f0000000380)=ANY=[], 0xfffffed5)
getsockname$tipc(r5, &(0x7f0000000a80)=@id, &(0x7f0000000ac0)=0x10)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
ptrace$setregs(0xf, r4, 0x0, &(0x7f0000000140))
tkill(0x0, 0x0)
writev(r0, &(0x7f0000000940)=[{&(0x7f0000000980)="73126038fc882801a1e6df277d2d7d18a407aee590481c35f9a64631", 0x1c}, {&(0x7f00000008c0)="4232a2ec83147bfae6a30bdf213e36f170d6298b54e37a8402fda06fa435945aa7292167babd9fb21cb05d69196d4bd34ee494ac5a418ccfca9d3392132848acd7a2a24285624f", 0x47}], 0x2)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)

[  280.527665] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  280.546662] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  280.554365] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  280.561637] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  280.568906] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  280.576165] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  280.583435] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:02 executing program 0 (fault-call:5 fault-nth:4):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  280.763401] FAULT_INJECTION: forcing a failure.
[  280.763401] name failslab, interval 1, probability 0, space 0, times 0
[  280.774803] CPU: 1 PID: 13028 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  280.780517] REISERFS warning (device loop3): super-6506 reiserfs_getopt: bad value "continue" for option "errors"
[  280.780517] 
[  280.781735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  280.781741] Call Trace:
[  280.781769]  dump_stack+0x172/0x1f0
[  280.781799]  should_fail.cold+0xa/0x1b
[  280.814931]  ? mark_held_locks+0x100/0x100
[  280.819255]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  280.824346]  ? should_fail+0x14d/0x85c
[  280.828227]  __should_failslab+0x121/0x190
[  280.832464]  should_failslab+0x9/0x14
[  280.836252]  __kmalloc_track_caller+0x6d/0x750
[  280.840838]  ? lock_downgrade+0x880/0x880
[  280.844983]  ? nf_ct_ext_add+0x2a9/0x62f
[  280.849035]  __krealloc+0x71/0xc0
[  280.852484]  nf_ct_ext_add+0x2a9/0x62f
[  280.856367]  init_conntrack+0x5f4/0x1340
[  280.860431]  ? nf_conntrack_alloc+0x50/0x50
[  280.864743]  ? __nf_conntrack_confirm+0x31e0/0x31e0
[  280.869752]  nf_conntrack_in+0x98b/0xe90
[  280.873808]  ? nf_conntrack_update+0x990/0x990
[  280.878381]  ? find_check_entry.isra.0+0x9b1/0x9d0
[  280.883310]  ipv6_conntrack_in+0x61/0x90
[  280.887371]  nf_hook_slow+0xbc/0x1e0
[  280.891079]  ip6_xmit+0x11c9/0x2030
[  280.894714]  ? ip6_finish_output2+0x2550/0x2550
[  280.899379]  ? lock_downgrade+0x880/0x880
[  280.903516]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  280.909043]  ? ip6_append_data+0x320/0x320
[  280.913279]  inet6_csk_xmit+0x2fb/0x5ba
[  280.917257]  ? inet6_csk_update_pmtu+0x190/0x190
[  280.922009]  ? dst_release+0x62/0xb0
[  280.925727]  ? udp6_set_csum+0xe1/0x5a0
[  280.929701]  l2tp_xmit_skb+0x116c/0x1460
[  280.933758]  pppol2tp_sendmsg+0x4a2/0x6b0
[  280.937899]  ? pppol2tp_getname+0xd10/0xd10
[  280.942212]  sock_sendmsg+0xd7/0x130
[  280.945914]  ___sys_sendmsg+0x3e2/0x920
[  280.949900]  ? copy_msghdr_from_user+0x430/0x430
[  280.954652]  ? lock_downgrade+0x880/0x880
[  280.958804]  ? kasan_check_read+0x11/0x20
[  280.962944]  ? __fget+0x367/0x540
[  280.966391]  ? iterate_fd+0x360/0x360
[  280.970180]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  280.975725]  ? proc_fail_nth_write+0x9d/0x1e0
[  280.980218]  ? __fget_light+0x1a9/0x230
[  280.984190]  ? __fdget+0x1b/0x20
[  280.987541]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  280.993761]  ? sockfd_lookup_light+0xcb/0x180
[  280.998247]  __sys_sendmmsg+0x1bf/0x4e0
[  281.002250]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  281.006604]  ? kasan_check_write+0x14/0x20
[  281.010845]  ? __sb_end_write+0xd9/0x110
[  281.014899]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  281.020434]  ? fput+0x128/0x1a0
[  281.023708]  ? ksys_write+0x1f1/0x2d0
[  281.027503]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  281.032246]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  281.036998]  ? do_syscall_64+0x26/0x620
[  281.040970]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  281.046331]  ? do_syscall_64+0x26/0x620
[  281.050306]  __x64_sys_sendmmsg+0x9d/0x100
[  281.054530]  do_syscall_64+0xfd/0x620
[  281.058322]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  281.063496] RIP: 0033:0x459a59
[  281.066676] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  281.085578] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  281.093288] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  281.100555] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  281.107810] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  281.115083] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  281.122345] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:03 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
splice(r1, 0x0, r5, 0x0, 0x1ffffd, 0x0)
recvfrom$unix(r1, &(0x7f00000003c0)=""/220, 0xdc, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x64, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x30, 0x5f}, 0x0, 0x0, 0x0, 0x0, 0x825a}, r0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10}, 0x70)
getsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
accept4$alg(r8, 0x0, 0x0, 0x0)
ioctl$SIOCAX25ADDFWD(r8, 0x89ea, &(0x7f0000000280)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null})

15:53:03 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
splice(r2, 0x0, r6, 0x0, 0x1ffffd, 0x0)
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000))
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c, 0x0, 0x4c51a1c6, 0x0, 0x408776f6})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000040)=0x1c, 0x4)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

15:53:03 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x108)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
close(r2)
lsetxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@sha1={0x1, "c76410a3218bd0e115a16b7bdf9e6f0d968a5959"}, 0x15, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

15:53:03 executing program 0 (fault-call:5 fault-nth:5):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  281.390002] FAULT_INJECTION: forcing a failure.
[  281.390002] name failslab, interval 1, probability 0, space 0, times 0
[  281.401571] CPU: 0 PID: 13044 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  281.408513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  281.417885] Call Trace:
[  281.420497]  dump_stack+0x172/0x1f0
[  281.424143]  should_fail.cold+0xa/0x1b
[  281.428043]  ? ipv6_chk_mcast_addr+0x295/0x6f0
[  281.432649]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  281.437766]  ? find_held_lock+0x35/0x130
[  281.441837]  ? ipv6_chk_mcast_addr+0x2cb/0x6f0
[  281.446441]  __should_failslab+0x121/0x190
[  281.450683]  should_failslab+0x9/0x14
[  281.454489]  kmem_cache_alloc+0x47/0x700
[  281.458551]  ? kasan_check_read+0x11/0x20
[  281.462717]  skb_clone+0x156/0x3e0
[  281.466275]  ip6_finish_output2+0x1886/0x2550
[  281.470776]  ? find_held_lock+0x35/0x130
[  281.474840]  ? ip6_mtu+0x2e6/0x460
[  281.478393]  ? ip6_forward_finish+0x4d0/0x4d0
[  281.482896]  ? __lock_is_held+0xb6/0x140
[  281.486975]  ip6_finish_output+0x574/0xbe0
[  281.491211]  ? ip6_finish_output+0x574/0xbe0
[  281.495659]  ip6_output+0x235/0x7c0
[  281.499300]  ? ip6_finish_output+0xbe0/0xbe0
[  281.503725]  ? ip6_fragment+0x3770/0x3770
[  281.507891]  ip6_xmit+0xe44/0x2030
[  281.511448]  ? ip6_finish_output2+0x2550/0x2550
[  281.516124]  ? lock_downgrade+0x880/0x880
[  281.520284]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  281.525829]  ? ip6_append_data+0x320/0x320
[  281.530092]  inet6_csk_xmit+0x2fb/0x5ba
[  281.534075]  ? inet6_csk_update_pmtu+0x190/0x190
[  281.538843]  ? dst_release+0x62/0xb0
[  281.542584]  ? udp6_set_csum+0xe1/0x5a0
[  281.546589]  l2tp_xmit_skb+0x116c/0x1460
[  281.550669]  pppol2tp_sendmsg+0x4a2/0x6b0
[  281.554831]  ? pppol2tp_getname+0xd10/0xd10
[  281.559160]  sock_sendmsg+0xd7/0x130
[  281.562877]  ___sys_sendmsg+0x3e2/0x920
[  281.566860]  ? copy_msghdr_from_user+0x430/0x430
[  281.571628]  ? lock_downgrade+0x880/0x880
[  281.575792]  ? kasan_check_read+0x11/0x20
[  281.579957]  ? __fget+0x367/0x540
[  281.583420]  ? iterate_fd+0x360/0x360
[  281.587231]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  281.592770]  ? proc_fail_nth_write+0x9d/0x1e0
[  281.597274]  ? __fget_light+0x1a9/0x230
[  281.601259]  ? __fdget+0x1b/0x20
[  281.604628]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  281.610170]  ? sockfd_lookup_light+0xcb/0x180
[  281.614679]  __sys_sendmmsg+0x1bf/0x4e0
[  281.618666]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  281.623000]  ? kasan_check_write+0x14/0x20
[  281.628208]  ? __sb_end_write+0xd9/0x110
[  281.632298]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  281.637841]  ? fput+0x128/0x1a0
[  281.641125]  ? ksys_write+0x1f1/0x2d0
[  281.644934]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  281.649697]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  281.654461]  ? do_syscall_64+0x26/0x620
[  281.658443]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  281.663812]  ? do_syscall_64+0x26/0x620
[  281.667798]  __x64_sys_sendmmsg+0x9d/0x100
[  281.672039]  do_syscall_64+0xfd/0x620
[  281.675857]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  281.681044] RIP: 0033:0x459a59
[  281.684250] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  281.703159] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  281.710877] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  281.718148] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  281.725422] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  281.732693] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
15:53:03 executing program 5 (fault-call:2 fault-nth:0):
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
timer_delete(0x0)

[  281.739963] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:04 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0)
socket(0x10, 0x2, 0x0)
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff})
pipe(&(0x7f0000000040))
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
splice(r4, 0x0, r7, 0x0, 0x1ffffd, 0x0)
r8 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x40400)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r9=>0x0}, &(0x7f0000000080)=0xfffffc4b)
setresgid(0x0, r9, 0xffffffffffffffff)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})

15:53:04 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c110000000700090000000000000000385a58000000000000"], 0x3a)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
splice(r2, 0x0, r5, 0x0, 0x1ffffd, 0x0)
perf_event_open(&(0x7f0000000080)={0xc, 0x70, 0xff, 0x8, 0xc5, 0xea, 0x0, 0xffffffff, 0x20000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xc20, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x1000, 0x3, 0x7fffffff, 0x4, 0xe8a, 0x9, 0x9}, r1, 0xf, r2, 0x2)

15:53:04 executing program 0 (fault-call:5 fault-nth:6):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  282.029309] SELinux: failed to load policy
[  282.053203] FAULT_INJECTION: forcing a failure.
[  282.053203] name failslab, interval 1, probability 0, space 0, times 0
[  282.064809] CPU: 1 PID: 13061 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  282.071745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  282.081104] Call Trace:
[  282.083711]  dump_stack+0x172/0x1f0
[  282.087356]  should_fail.cold+0xa/0x1b
[  282.091271]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  282.096388]  ? find_held_lock+0x35/0x130
[  282.100472]  __should_failslab+0x121/0x190
[  282.104715]  should_failslab+0x9/0x14
[  282.108537]  kmem_cache_alloc+0x47/0x700
[  282.112616]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  282.117822]  ? br_allowed_ingress+0x1630/0x1630
[  282.122502]  skb_clone+0x156/0x3e0
[  282.126068]  deliver_clone+0x46/0xc0
[  282.129803]  br_flood+0x4da/0x710
[  282.133290]  br_dev_xmit+0xeeb/0x1490
[  282.137103]  ? br_poll_controller+0x10/0x10
[  282.141436]  ? __lock_is_held+0xb6/0x140
[  282.145524]  dev_hard_start_xmit+0x1a5/0x980
[  282.149947]  ? check_preemption_disabled+0x48/0x290
[  282.154980]  __dev_queue_xmit+0x2704/0x2fe0
[  282.159315]  ? mark_held_locks+0x100/0x100
[  282.163564]  ? do_xdp_generic+0x50/0x50
[  282.167558]  ? netdev_pick_tx+0x300/0x300
[  282.171726]  ? ip6_finish_output+0x574/0xbe0
[  282.176151]  ? find_held_lock+0x35/0x130
[  282.180225]  ? ip6_finish_output+0x574/0xbe0
[  282.184651]  ? mark_held_locks+0xb1/0x100
[  282.189858]  ? ip6_finish_output2+0x1784/0x2550
[  282.194540]  ? ip6_finish_output+0x574/0xbe0
[  282.198960]  ? ip6_finish_output2+0x1784/0x2550
[  282.203643]  dev_queue_xmit+0x18/0x20
[  282.207445]  ? dev_queue_xmit+0x18/0x20
[  282.211428]  ip6_finish_output2+0x12fd/0x2550
[  282.215936]  ? ip6_forward_finish+0x4d0/0x4d0
[  282.220433]  ? netif_rx_ni+0x350/0x350
[  282.224335]  ip6_finish_output+0x574/0xbe0
[  282.228570]  ? ip6_finish_output+0x574/0xbe0
[  282.232987]  ip6_output+0x235/0x7c0
[  282.236620]  ? ip6_finish_output+0xbe0/0xbe0
[  282.241032]  ? ip6_fragment+0x3770/0x3770
[  282.245204]  ip6_xmit+0xe44/0x2030
[  282.248763]  ? ip6_finish_output2+0x2550/0x2550
[  282.253439]  ? lock_downgrade+0x880/0x880
[  282.257593]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  282.263141]  ? ip6_append_data+0x320/0x320
[  282.267406]  inet6_csk_xmit+0x2fb/0x5ba
[  282.271387]  ? inet6_csk_update_pmtu+0x190/0x190
[  282.276142]  ? dst_release+0x62/0xb0
[  282.279866]  ? udp6_set_csum+0xe1/0x5a0
[  282.283852]  l2tp_xmit_skb+0x116c/0x1460
[  282.287943]  pppol2tp_sendmsg+0x4a2/0x6b0
[  282.292100]  ? pppol2tp_getname+0xd10/0xd10
[  282.296425]  sock_sendmsg+0xd7/0x130
[  282.300140]  ___sys_sendmsg+0x3e2/0x920
[  282.304115]  ? copy_msghdr_from_user+0x430/0x430
[  282.308877]  ? lock_downgrade+0x880/0x880
[  282.313033]  ? kasan_check_read+0x11/0x20
[  282.317185]  ? __fget+0x367/0x540
[  282.320642]  ? iterate_fd+0x360/0x360
[  282.324444]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  282.329984]  ? proc_fail_nth_write+0x9d/0x1e0
[  282.334480]  ? __fget_light+0x1a9/0x230
[  282.338456]  ? __fdget+0x1b/0x20
[  282.341825]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  282.347362]  ? sockfd_lookup_light+0xcb/0x180
[  282.351860]  __sys_sendmmsg+0x1bf/0x4e0
[  282.355836]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  282.360158]  ? kasan_check_write+0x14/0x20
[  282.364406]  ? __sb_end_write+0xd9/0x110
[  282.368558]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  282.374091]  ? fput+0x128/0x1a0
[  282.377368]  ? ksys_write+0x1f1/0x2d0
[  282.381174]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  282.385930]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  282.390686]  ? do_syscall_64+0x26/0x620
[  282.394658]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  282.400024]  ? do_syscall_64+0x26/0x620
[  282.404000]  __x64_sys_sendmmsg+0x9d/0x100
[  282.408258]  do_syscall_64+0xfd/0x620
[  282.412060]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  282.417250] RIP: 0033:0x459a59
[  282.420443] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  282.439340] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  282.447045] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
15:53:04 executing program 2:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x10, 0x81800)
getsockname(r2, &(0x7f00000003c0)=@can, &(0x7f0000000300)=0x80)
perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0xf9, 0x40, 0x81, 0x3f, 0x0, 0x8ace, 0x10, 0x79c2e77904fd6cff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0xce78d5bde032560, @perf_config_ext={0x9, 0x800}, 0x8000, 0x0, 0x8, 0x4, 0x400, 0x1000, 0x7d}, r1, 0x5, r0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r4 = syz_open_dev$admmidi(&(0x7f0000000440)='/dev/admmidi#\x00', 0x9, 0x10400)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000480)={0x1000, 0x7ff, 0x8000, 'queue0\x00', 0x40})
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f0000000380))
sched_getaffinity(r5, 0x8, &(0x7f0000000700))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

[  282.454308] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  282.461575] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  282.468842] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  282.476109] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:04 executing program 0 (fault-call:5 fault-nth:7):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:04 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
timer_delete(0x0)

15:53:04 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fe530cb7d7f933eda02ba18ad181867514fe60077d4dd90123d3ee7cf43548ee858e07dfbdfd4e7540ebec677d6ac14c2c794f72cbf5fe31789e70233bfd8115efd90b0c48258f8dbe82e16cf8db95f5b068a9e0000000000000000000000000000000000000000000000000000000000000018287ba7d8807cf077cc420efca6785deb269d0a91985602763e0d70d404da006a3d6eef8fb7fcdd82eb1e4841"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000140))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

[  282.696217] FAULT_INJECTION: forcing a failure.
[  282.696217] name failslab, interval 1, probability 0, space 0, times 0
[  282.762454] CPU: 0 PID: 13078 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  282.769427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  282.769434] Call Trace:
[  282.769460]  dump_stack+0x172/0x1f0
[  282.769483]  should_fail.cold+0xa/0x1b
[  282.769508]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  282.793977]  ? lock_downgrade+0x880/0x880
[  282.798123]  __should_failslab+0x121/0x190
[  282.802357]  should_failslab+0x9/0x14
[  282.806148]  kmem_cache_alloc_node+0x26c/0x710
[  282.810726]  __alloc_skb+0xd5/0x5f0
[  282.814342]  ? skb_scrub_packet+0x490/0x490
[  282.818651]  ? refcount_add_not_zero_checked+0x240/0x240
[  282.824095]  sock_wmalloc+0xd9/0x120
[  282.827801]  pppol2tp_sendmsg+0x23b/0x6b0
[  282.831946]  ? selinux_socket_sendmsg+0x36/0x40
[  282.836601]  ? pppol2tp_getname+0xd10/0xd10
[  282.840912]  sock_sendmsg+0xd7/0x130
[  282.844614]  ___sys_sendmsg+0x3e2/0x920
[  282.848576]  ? copy_msghdr_from_user+0x430/0x430
[  282.853325]  ? mark_held_locks+0x100/0x100
[  282.857547]  ? kasan_check_read+0x11/0x20
[  282.861694]  ? __might_fault+0x12b/0x1e0
[  282.865744]  ? find_held_lock+0x35/0x130
[  282.869801]  ? __might_fault+0x12b/0x1e0
[  282.873862]  __sys_sendmmsg+0x1bf/0x4e0
[  282.877825]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  282.882136]  ? kasan_check_write+0x14/0x20
[  282.886365]  ? __sb_end_write+0xd9/0x110
[  282.890413]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  282.895934]  ? fput+0x128/0x1a0
[  282.899199]  ? ksys_write+0x1f1/0x2d0
[  282.903011]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  282.907756]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  282.912504]  ? do_syscall_64+0x26/0x620
[  282.916466]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  282.921827]  ? do_syscall_64+0x26/0x620
[  282.925790]  __x64_sys_sendmmsg+0x9d/0x100
[  282.930016]  do_syscall_64+0xfd/0x620
[  282.933806]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  282.938981] RIP: 0033:0x459a59
[  282.942169] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  282.961056] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  282.968755] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  282.976010] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  282.983265] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  282.990521] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  282.997864] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:05 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x84680, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0xfffffed5)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000600)={0x0, 0xff}, &(0x7f0000000640)=0x8)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000480)={r5, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x98)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={<r6=>r5, @in6={{0xa, 0x4e22, 0x5a6f, @rand_addr="8459e9426ed8dfeb4ac57b9e9cbc409d", 0x2}}, 0x1, 0x1, 0x280000, 0x8, 0xaf5634745492d076}, &(0x7f0000000680)=0x98)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r9=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000480)={r9, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x98)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x7, 0x8, 0x8000, 0xeca9, 0x81, 0xff, 0x11f4, 0xfffffffe, <r10=>r9}, &(0x7f00000003c0)=0x20)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000400)={r6, 0x4, 0x3, 0x3, 0x4, 0x5, 0x400, 0x1c8000, {r10, @in={{0x2, 0x4e20, @rand_addr=0x3}}, 0x4, 0xfb, 0x3, 0xd7c, 0x1}}, &(0x7f00000004c0)=0xb0)

[  283.052748] SELinux: failed to load policy
15:53:06 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x4}}, 0xe8)
connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}], 0x2, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
splice(r3, 0x0, r6, 0x0, 0x1ffffd, 0x0)
sendmmsg$unix(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=@abs={0x2, 0x0, 0x4e21}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000140)="581f6225db0ff329d8577b1cf589a4b2870dfff0b9bf565bd5c82d9a5720001d8a90c2656571faca7df67e9a2e29c8b88044c0fd70a8e2026f64058503247896d822086490195802889f38d2534f9f60a3ad5faccd9ae9f63d71a05e2764d1df16247f9f3abc59ceb0a4936967b103906b8aa5aad98ecb529fbbed0bbfdd2eebe7ec440c6a46f1c414cc1f97276bb4054f47b39351", 0x95}], 0x1, 0x0, 0x0, 0x40}, {&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000003c0)="17de5460ded55ee4b87c28fe024e00ff0f208a12b2c53f64a0e64a72a66b19e78b36a4e01d21813507de745fc6fbac1011fce40670c90fa14adb46b22c5f7a5131bfa762e1a3294152c206959af96a509be7d21f8c3725ff0764e30c3ff84491d2c7b590b3ac83c9ebcfab", 0x6b}, {&(0x7f0000000440)="ea53a40a4d6e20c6ae936b8232fbbd111f93bde6fe7dd6da3a0eb884e0", 0x1d}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000000480)="eca957f464a411851a216f400193d7539e8ac08808c031c61f4a7106c53bc501bc244276f3d96358f288271a04be177a", 0x30}], 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="000000007f16cff10404a05315ab6b99d96796af2cfe489b5e0634908cfc6568bdcf699503b3d4e9f886416070106c240bb78ea65428447e84b68fdd399a8195eba9ab52e758a2431fbb8a1e0adaeaa1be0fc3872e4d8d90a07bf6d6beba14d5f152e27154e2a2fe48c73413528abdc6cbae2d30c149e5622fd9f43b645ff6cb7ff3eff90c21b616d213"], 0x30, 0x15cda36a3a0d9110}], 0x2, 0x40000110)

15:53:06 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_1\x00', 0x100})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
preadv(r1, &(0x7f0000001480)=[{&(0x7f0000000140)=""/254, 0xfe}, {&(0x7f0000000000)=""/17, 0x11}, {&(0x7f0000000040)=""/35, 0x23}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/156, 0x9c}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/130, 0x82}, {&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f0000001440)=""/64, 0x40}], 0x9, 0x0)
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001540)='/dev/dlm-monitor\x00', 0x10000, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000001580))
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff})

15:53:06 executing program 1:
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(0xffffffffffffffff, r0)
move_pages(0x0, 0x0, 0x0, &(0x7f0000000000)=[0x3fffd], 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140)=0x81, 0x4)
socket(0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x10, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000d05bd98c13cc1709ab91e0b9e1e603f862b5173514"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
add_key$user(0x0, 0x0, &(0x7f0000000480)="2f5ec03da5f505352711bef6", 0xc, 0xfffffffffffffff9)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000200)={{0x2, @name="22ac1bd98eddbb2baa0bfefdfc5e991251de30938e0b27012753bdc43fc77205"}, 0x8, 0x8, 0xe88})
exit(0x0)
setpgid(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x10101)
pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x1f}, 0x0, 0x0, 0x0)
prctl$PR_GET_ENDIAN(0x13, &(0x7f00000001c0))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)

15:53:06 executing program 0 (fault-call:5 fault-nth:8):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:06 executing program 5:
timer_create(0x4, 0x0, &(0x7f0000000040))
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000080)=""/120)
exit(0x0)
timer_delete(0x0)

15:53:06 executing program 2:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r2 = getpid()
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000280)={{0x1, 0x0, @descriptor="dc05cbea156fd38b"}})
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
sched_setparam(r2, &(0x7f0000000140)=0xadb)
prctl$PR_SVE_SET_VL(0x32, 0x38341)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)="d3cb9e7e800c114f17e125df619a309446615c37b2a99b10496f2ee0500b92ca8324108b"}, 0xfffffffffffffcc3)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x442e1ebc48de08ef, 0x0)
fsetxattr$security_ima(r3, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000540)=@ng={0x4, 0x2, "08a864c4db19bf698988d98cfe55e9c48399"}, 0x14, 0x3)

[  284.078861] FAULT_INJECTION: forcing a failure.
[  284.078861] name failslab, interval 1, probability 0, space 0, times 0
[  284.129972] CPU: 0 PID: 13097 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  284.136948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  284.146318] Call Trace:
[  284.148929]  dump_stack+0x172/0x1f0
[  284.152579]  should_fail.cold+0xa/0x1b
[  284.156496]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  284.161619]  ? lock_downgrade+0x880/0x880
[  284.165800]  __should_failslab+0x121/0x190
[  284.170043]  should_failslab+0x9/0x14
[  284.173858]  kmem_cache_alloc_node_trace+0x274/0x720
[  284.179064]  ? __alloc_skb+0xd5/0x5f0
[  284.182885]  __kmalloc_node_track_caller+0x3d/0x80
[  284.187842]  __kmalloc_reserve.isra.0+0x40/0xf0
[  284.192522]  __alloc_skb+0x10b/0x5f0
[  284.196248]  ? skb_scrub_packet+0x490/0x490
[  284.200578]  ? refcount_add_not_zero_checked+0x240/0x240
[  284.206051]  sock_wmalloc+0xd9/0x120
[  284.209779]  pppol2tp_sendmsg+0x23b/0x6b0
[  284.213936]  ? selinux_socket_sendmsg+0x36/0x40
[  284.218615]  ? pppol2tp_getname+0xd10/0xd10
[  284.222954]  sock_sendmsg+0xd7/0x130
[  284.226674]  ___sys_sendmsg+0x3e2/0x920
[  284.230651]  ? copy_msghdr_from_user+0x430/0x430
[  284.235419]  ? mark_held_locks+0x100/0x100
[  284.239660]  ? kasan_check_read+0x11/0x20
[  284.243815]  ? __might_fault+0x12b/0x1e0
[  284.247882]  ? find_held_lock+0x35/0x130
[  284.251944]  ? __might_fault+0x12b/0x1e0
[  284.256067]  __sys_sendmmsg+0x1bf/0x4e0
[  284.260046]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  284.264372]  ? kasan_check_write+0x14/0x20
[  284.268617]  ? __sb_end_write+0xd9/0x110
[  284.272685]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  284.278219]  ? fput+0x128/0x1a0
[  284.281502]  ? ksys_write+0x1f1/0x2d0
[  284.285305]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  284.290066]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  284.294820]  ? do_syscall_64+0x26/0x620
[  284.298797]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  284.304158]  ? do_syscall_64+0x26/0x620
[  284.308136]  __x64_sys_sendmmsg+0x9d/0x100
[  284.312378]  do_syscall_64+0xfd/0x620
[  284.316181]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  284.321367] RIP: 0033:0x459a59
[  284.324561] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  284.343460] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  284.351262] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  284.359404] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  284.366671] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  284.374021] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  284.381288] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
[  284.388808] protocol 88fb is buggy, dev hsr_slave_0
[  284.393899] protocol 88fb is buggy, dev hsr_slave_1
15:53:06 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x23, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
splice(r4, 0x0, r7, 0x0, 0x1ffffd, 0x0)
ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000280)=""/178)
r8 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r8, 0x0, 0x1ffffd, 0x0)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000100)={0x1, 0xf1d, 0x5, 0x0, 0x9})

15:53:06 executing program 0 (fault-call:5 fault-nth:9):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  284.552643] FAULT_INJECTION: forcing a failure.
[  284.552643] name failslab, interval 1, probability 0, space 0, times 0
[  284.576180] CPU: 1 PID: 13118 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  284.583140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  284.592605] Call Trace:
[  284.595208]  dump_stack+0x172/0x1f0
[  284.598846]  should_fail.cold+0xa/0x1b
[  284.602739]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  284.607846]  ? lock_downgrade+0x880/0x880
[  284.612046]  __should_failslab+0x121/0x190
[  284.616287]  should_failslab+0x9/0x14
[  284.620095]  kmem_cache_alloc_node+0x26c/0x710
[  284.624688]  __alloc_skb+0xd5/0x5f0
[  284.628329]  ? skb_scrub_packet+0x490/0x490
[  284.632657]  ? refcount_add_not_zero_checked+0x240/0x240
[  284.638123]  sock_wmalloc+0xd9/0x120
[  284.641935]  pppol2tp_sendmsg+0x23b/0x6b0
[  284.646086]  ? selinux_socket_sendmsg+0x36/0x40
[  284.650774]  ? pppol2tp_getname+0xd10/0xd10
[  284.655098]  sock_sendmsg+0xd7/0x130
[  284.658818]  ___sys_sendmsg+0x3e2/0x920
[  284.662795]  ? copy_msghdr_from_user+0x430/0x430
[  284.667562]  ? mark_held_locks+0x100/0x100
[  284.671803]  ? kasan_check_read+0x11/0x20
[  284.675961]  ? __might_fault+0x12b/0x1e0
[  284.680024]  ? find_held_lock+0x35/0x130
[  284.684095]  ? __might_fault+0x12b/0x1e0
[  284.688186]  __sys_sendmmsg+0x1bf/0x4e0
[  284.692173]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  284.696499]  ? kasan_check_write+0x14/0x20
[  284.699306] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.700742]  ? __sb_end_write+0xd9/0x110
[  284.711093]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  284.716621]  ? fput+0x128/0x1a0
[  284.719901]  ? ksys_write+0x1f1/0x2d0
[  284.723715]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  284.728470]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  284.733255]  ? do_syscall_64+0x26/0x620
[  284.737253]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  284.742603]  ? do_syscall_64+0x26/0x620
[  284.746613]  __x64_sys_sendmmsg+0x9d/0x100
[  284.750836]  do_syscall_64+0xfd/0x620
[  284.754623]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  284.759797] RIP: 0033:0x459a59
[  284.762973] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  284.781861] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  284.790005] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
15:53:07 executing program 0 (fault-call:5 fault-nth:10):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  284.797266] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  284.804569] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  284.811833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  284.819090] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
[  284.827245] protocol 88fb is buggy, dev hsr_slave_0
[  284.832341] protocol 88fb is buggy, dev hsr_slave_1
15:53:07 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x0)
ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000100)="c8fb3f984248ccfceedd79686c9c556a39c283bf9ff44f3ec15750870774a1aa6aae587b51f03e7bf9468ea06a74a9fb06b7a522bc800ad4fb0fbe75428cc666fd7baecc9b03186ed899ab4c25f84bb1d555d7c2f9525a4ca308c366666675dd89cd88f90ea38826acb51a925e9af65d00a0ef1c6bfc2fa78ce6488506c1db1b1b464a4db66e11edfafc8069e96a83ff2e596992ef34b0f9e783c9c5f8077d36916a9911f99f5517117acb20ebec7bb386a23792bc13fb461cf8f8d015faeced391414c5a4d23d082800582697a596e47c61f30c9de84124442082e2")
r2 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x2b)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x2}}, 0xe8)
sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0)

15:53:07 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300))
openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x3ba82a695adc17d8, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

15:53:07 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
timer_delete(0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x703803, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)

15:53:07 executing program 4:
r0 = memfd_create(&(0x7f00000000c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99>oJ\x02u\x9b\x94a\xac\x00\x00\x00', 0x3)
fcntl$addseals(r0, 0x409, 0xc)
fallocate(r0, 0x5d247b2e4f33be41, 0x2, 0x3)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}})

[  284.953317] FAULT_INJECTION: forcing a failure.
[  284.953317] name failslab, interval 1, probability 0, space 0, times 0
[  284.964589] CPU: 0 PID: 13125 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  284.971550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  284.980938] Call Trace:
[  284.983549]  dump_stack+0x172/0x1f0
[  284.987322]  should_fail.cold+0xa/0x1b
[  284.991230]  ? ipv6_chk_mcast_addr+0x295/0x6f0
[  284.995836]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  285.000963]  ? find_held_lock+0x35/0x130
[  285.005053]  ? ipv6_chk_mcast_addr+0x2cb/0x6f0
[  285.009663]  __should_failslab+0x121/0x190
[  285.013915]  should_failslab+0x9/0x14
[  285.017736]  kmem_cache_alloc+0x47/0x700
[  285.021814]  ? kasan_check_read+0x11/0x20
[  285.025986]  skb_clone+0x156/0x3e0
[  285.029552]  ip6_finish_output2+0x1886/0x2550
[  285.034060]  ? find_held_lock+0x35/0x130
[  285.038136]  ? ip6_mtu+0x2e6/0x460
[  285.041696]  ? ip6_forward_finish+0x4d0/0x4d0
[  285.046210]  ? __lock_is_held+0xb6/0x140
[  285.050280]  ip6_finish_output+0x574/0xbe0
[  285.054502]  ? ip6_finish_output+0x574/0xbe0
[  285.058922]  ip6_output+0x235/0x7c0
[  285.062539]  ? ip6_finish_output+0xbe0/0xbe0
[  285.066953]  ? ip6_fragment+0x3770/0x3770
[  285.071125]  ip6_xmit+0xe44/0x2030
[  285.074662]  ? ip6_finish_output2+0x2550/0x2550
[  285.079318]  ? lock_downgrade+0x880/0x880
[  285.083455]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  285.088997]  ? ip6_append_data+0x320/0x320
[  285.093242]  inet6_csk_xmit+0x2fb/0x5ba
[  285.097206]  ? inet6_csk_update_pmtu+0x190/0x190
[  285.101947]  ? dst_release+0x62/0xb0
[  285.105674]  ? udp6_set_csum+0xe1/0x5a0
[  285.109652]  l2tp_xmit_skb+0x116c/0x1460
[  285.113728]  pppol2tp_sendmsg+0x4a2/0x6b0
[  285.117955]  ? pppol2tp_getname+0xd10/0xd10
[  285.122273]  sock_sendmsg+0xd7/0x130
[  285.126002]  ___sys_sendmsg+0x3e2/0x920
[  285.129994]  ? copy_msghdr_from_user+0x430/0x430
[  285.134788]  ? mark_held_locks+0x100/0x100
[  285.139030]  ? kasan_check_read+0x11/0x20
[  285.143181]  ? __might_fault+0x12b/0x1e0
[  285.147242]  ? find_held_lock+0x35/0x130
[  285.151374]  ? __might_fault+0x12b/0x1e0
[  285.155458]  __sys_sendmmsg+0x1bf/0x4e0
[  285.159443]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  285.163823]  ? kasan_check_write+0x14/0x20
[  285.168084]  ? __sb_end_write+0xd9/0x110
[  285.172147]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  285.177691]  ? fput+0x128/0x1a0
[  285.180962]  ? ksys_write+0x1f1/0x2d0
[  285.184786]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  285.189539]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  285.194298]  ? do_syscall_64+0x26/0x620
[  285.198269]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  285.203669]  ? do_syscall_64+0x26/0x620
[  285.207658]  __x64_sys_sendmmsg+0x9d/0x100
[  285.212001]  do_syscall_64+0xfd/0x620
[  285.215803]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  285.221080] RIP: 0033:0x459a59
[  285.224270] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  285.243435] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  285.251178] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  285.258441] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  285.265705] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  285.272968] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  285.280248] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:07 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x3600000000000000, 0xffffffffffffffc0, 0x0, &(0x7f00000002c0)="4d50b441e692763113ef870688a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85f2cc4f312a740002152200000000", 0x0, 0x35, 0x0, 0xfffffffffffffcd2, 0xffffffffffffff46, &(0x7f00000003c0)="c19a725fbc3b117fe4cd29503ddbb1de96efafe2d11c316402ca27071d7ac4ad4cb56ff4c64ce491c2d6f28bcb499288efde543d9493d0d0a3e4a0adcfb50311b589aa4c4842267375096c6f9bc0f9f9bef45bcc638e2931babf8bee75f0d4c43674f9", &(0x7f0000000100)}, 0x5)

15:53:07 executing program 3:
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
r1 = dup(r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000100)={{0x80}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000080), 0x4)
ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x20600)
r3 = socket$packet(0x11, 0x0, 0x300)
getsockopt$packet_int(r3, 0x107, 0x14, 0x0, &(0x7f0000000040))
sched_rr_get_interval(0x0, &(0x7f0000000040))
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x150040, 0x0)
setsockopt$packet_int(r3, 0x107, 0x12, &(0x7f0000000240)=0x209, 0x4)
r5 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3f, 0xc8082)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f00000001c0)={0x7, [0x7ff, 0x9, 0xccc3, 0x0, 0x8000, 0x2dc, 0x7ff]}, &(0x7f0000000200)=0x12)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0x0)

15:53:07 executing program 0 (fault-call:5 fault-nth:11):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  285.516710] FAULT_INJECTION: forcing a failure.
[  285.516710] name failslab, interval 1, probability 0, space 0, times 0
[  285.528052] CPU: 0 PID: 13148 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  285.534998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  285.544373] Call Trace:
[  285.546986]  dump_stack+0x172/0x1f0
[  285.550639]  should_fail.cold+0xa/0x1b
[  285.554550]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  285.559672]  ? find_held_lock+0x35/0x130
15:53:07 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000440)={0x0, @aes128})
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r4, 0x0, 0x1ffffd, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x3}, 0x1, 0x0, 0x0, 0x56012715ba588031}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000002c000107000000001f000000f0ffff00", @ANYRES32=r8, @ANYBLOB="02000000000000000300000008000100753332001800020014000500"/44], 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=@delqdisc={0x6c, 0x25, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, r8, {0xffe0, 0x1}, {0x3, 0xb}, {0x0, 0x6}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x14, 0x2, [@TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_LIMIT={0x8, 0x2, 0x8b}]}}, @qdisc_kind_options=@q_fq_codel={{0x10, 0x1, 'fq_codel\x00'}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x2}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x983}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40480d1}, 0x20008004)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
write$USERIO_CMD_REGISTER(r10, &(0x7f0000000400)={0x0, 0x1}, 0x2)

[  285.563758]  __should_failslab+0x121/0x190
[  285.568011]  should_failslab+0x9/0x14
[  285.571820]  kmem_cache_alloc+0x47/0x700
[  285.575891]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  285.581104]  ? br_allowed_ingress+0x1630/0x1630
[  285.585785]  skb_clone+0x156/0x3e0
[  285.589341]  deliver_clone+0x46/0xc0
[  285.593068]  br_flood+0x4da/0x710
[  285.596540]  br_dev_xmit+0xeeb/0x1490
[  285.600359]  ? br_poll_controller+0x10/0x10
[  285.604689]  ? __lock_is_held+0xb6/0x140
[  285.608767]  dev_hard_start_xmit+0x1a5/0x980
[  285.613187]  ? check_preemption_disabled+0x48/0x290
[  285.618225]  __dev_queue_xmit+0x2704/0x2fe0
[  285.622563]  ? mark_held_locks+0x100/0x100
[  285.626810]  ? do_xdp_generic+0x50/0x50
[  285.630803]  ? netdev_pick_tx+0x300/0x300
[  285.634962]  ? ip6_finish_output+0x574/0xbe0
[  285.639391]  ? find_held_lock+0x35/0x130
[  285.643465]  ? ip6_finish_output+0x574/0xbe0
[  285.647887]  ? mark_held_locks+0xb1/0x100
[  285.652050]  ? ip6_finish_output2+0x1784/0x2550
[  285.656732]  ? ip6_finish_output+0x574/0xbe0
[  285.661151]  ? ip6_finish_output2+0x1784/0x2550
[  285.665842]  dev_queue_xmit+0x18/0x20
[  285.669650]  ? dev_queue_xmit+0x18/0x20
[  285.673635]  ip6_finish_output2+0x12fd/0x2550
[  285.678160]  ? ip6_forward_finish+0x4d0/0x4d0
[  285.682672]  ? netif_rx_ni+0x350/0x350
[  285.686582]  ip6_finish_output+0x574/0xbe0
[  285.690823]  ? ip6_finish_output+0x574/0xbe0
[  285.695245]  ip6_output+0x235/0x7c0
[  285.698884]  ? ip6_finish_output+0xbe0/0xbe0
[  285.703305]  ? ip6_fragment+0x3770/0x3770
[  285.707471]  ip6_xmit+0xe44/0x2030
[  285.711029]  ? ip6_finish_output2+0x2550/0x2550
[  285.715704]  ? lock_downgrade+0x880/0x880
[  285.719864]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  285.725416]  ? ip6_append_data+0x320/0x320
[  285.729679]  inet6_csk_xmit+0x2fb/0x5ba
[  285.733665]  ? inet6_csk_update_pmtu+0x190/0x190
[  285.738429]  ? dst_release+0x62/0xb0
[  285.742161]  ? udp6_set_csum+0xe1/0x5a0
[  285.746157]  l2tp_xmit_skb+0x116c/0x1460
[  285.750234]  pppol2tp_sendmsg+0x4a2/0x6b0
[  285.754482]  ? pppol2tp_getname+0xd10/0xd10
[  285.758824]  sock_sendmsg+0xd7/0x130
[  285.762551]  ___sys_sendmsg+0x3e2/0x920
[  285.766795]  ? copy_msghdr_from_user+0x430/0x430
[  285.771566]  ? mark_held_locks+0x100/0x100
[  285.775809]  ? kasan_check_read+0x11/0x20
[  285.780077]  ? __might_fault+0x12b/0x1e0
[  285.784148]  ? find_held_lock+0x35/0x130
[  285.788230]  ? __might_fault+0x12b/0x1e0
[  285.792320]  __sys_sendmmsg+0x1bf/0x4e0
[  285.796309]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  285.800650]  ? kasan_check_write+0x14/0x20
[  285.804907]  ? __sb_end_write+0xd9/0x110
[  285.804947]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  285.814538]  ? fput+0x128/0x1a0
15:53:07 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0)
ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000003c0)={0x4, 0x3, 0x0, [{0xfff, 0x1, 0x100, 0x81, 0x3f, 0x1f, 0x3}, {0x800, 0x1, 0xffff, 0x3, 0x7, 0x8, 0x3}, {0x40400000000000, 0x1, 0xffff, 0x2e, 0x9, 0xc0, 0x8}]})
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
splice(r3, 0x0, r6, 0x0, 0x1ffffd, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0xf40c2771)
r7 = accept4(r2, 0x0, 0x0, 0x0)
r8 = accept4$alg(r7, 0x0, 0x0, 0x0)
splice(r1, 0x0, r8, 0x0, 0x1ffffd, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000))
r9 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r9, 0x0, 0x0, 0x1000f4)
r10 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
sendfile(r9, r10, 0x0, 0x8000fffffffe)
stat(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
removexattr(&(0x7f0000000180)='./bus\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='btrfP.\x00z'])
chown(&(0x7f0000000140)='./bus\x00', r11, 0x0)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0)
r12 = socket$inet(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
r14 = dup(r13)
ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200)
sendmsg(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0)
recvmmsg(r12, &(0x7f0000001380), 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400})

[  285.817828]  ? ksys_write+0x1f1/0x2d0
[  285.821642]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  285.826408]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  285.831646]  ? do_syscall_64+0x26/0x620
[  285.831663]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  285.831677]  ? do_syscall_64+0x26/0x620
[  285.831698]  __x64_sys_sendmmsg+0x9d/0x100
[  285.831716]  do_syscall_64+0xfd/0x620
[  285.831735]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  285.831748] RIP: 0033:0x459a59
[  285.831762] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  285.831770] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  285.831785] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  285.831795] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
15:53:08 executing program 0 (fault-call:5 fault-nth:12):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  285.831804] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  285.831813] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  285.831821] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:08 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
execve(0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1a04, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000040), 0x84000)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)

[  286.081345] FAULT_INJECTION: forcing a failure.
[  286.081345] name failslab, interval 1, probability 0, space 0, times 0
[  286.103748] CPU: 0 PID: 13164 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  286.110714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  286.120077] Call Trace:
[  286.122682]  dump_stack+0x172/0x1f0
[  286.126326]  should_fail.cold+0xa/0x1b
[  286.130283]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  286.135380]  ? lock_downgrade+0x880/0x880
[  286.139522]  __should_failslab+0x121/0x190
[  286.143744]  should_failslab+0x9/0x14
[  286.147531]  kmem_cache_alloc_node+0x26c/0x710
[  286.152104]  __alloc_skb+0xd5/0x5f0
[  286.155727]  ? skb_scrub_packet+0x490/0x490
[  286.160094]  ? refcount_add_not_zero_checked+0x240/0x240
[  286.166763]  sock_wmalloc+0xd9/0x120
[  286.170521]  pppol2tp_sendmsg+0x23b/0x6b0
[  286.174669]  ? selinux_socket_sendmsg+0x36/0x40
[  286.179346]  ? pppol2tp_getname+0xd10/0xd10
[  286.183676]  sock_sendmsg+0xd7/0x130
[  286.187490]  ___sys_sendmsg+0x3e2/0x920
[  286.191483]  ? copy_msghdr_from_user+0x430/0x430
[  286.196235]  ? mark_held_locks+0x100/0x100
[  286.200458]  ? kasan_check_read+0x11/0x20
[  286.204597]  ? __might_fault+0x12b/0x1e0
[  286.208651]  ? find_held_lock+0x35/0x130
[  286.212700]  ? __might_fault+0x12b/0x1e0
[  286.216760]  __sys_sendmmsg+0x1bf/0x4e0
[  286.220725]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  286.225047]  ? kasan_check_write+0x14/0x20
[  286.229300]  ? __sb_end_write+0xd9/0x110
[  286.233352]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  286.238876]  ? fput+0x128/0x1a0
[  286.242153]  ? ksys_write+0x1f1/0x2d0
[  286.245959]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  286.250726]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  286.255478]  ? do_syscall_64+0x26/0x620
[  286.259440]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  286.264890]  ? do_syscall_64+0x26/0x620
[  286.268856]  __x64_sys_sendmmsg+0x9d/0x100
[  286.273084]  do_syscall_64+0xfd/0x620
[  286.276878]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  286.282053] RIP: 0033:0x459a59
[  286.285231] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  286.304210] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  286.311908] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  286.319164] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
15:53:08 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
accept4$alg(r4, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000180)=0x4)

15:53:08 executing program 3:
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x8000001, 0x4062012, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x48000, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x989680}}, &(0x7f0000000280))
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000080)={0xb5, &(0x7f0000000180)=""/181})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.current\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r4, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
read(r0, &(0x7f0000000000)=""/81, 0xffffffd5)

[  286.326418] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  286.333762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  286.341044] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:08 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0)
exit(0x0)
timer_delete(0x0)

15:53:08 executing program 0 (fault-call:5 fault-nth:13):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:08 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x0)
ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006)
mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="82fbc41a4b8e62c3203fab099bdd773532779d8f3cfbb1223dc7fe6d116a4a9894f2a0f06ad654da26e0b3db7ae49bac6b0ed1e72a6ad7fca277d4166bce30f3233829622e638fdf8866d27b37ed8b72dc27e90aecd2edebf44acf36edd882a71c14d41ee539599b9ec5c54cdf3dcc8db28ddc30e5dbd187809979ed50fc92d40a15692432f64bbda640564c9a5ce3e75fc63de209e1f5f1"])
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000270700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2)
ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x3)

[  286.496515] audit: type=1804 audit(1571586788.650:129): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir311334474/syzkaller.tcWq1P/173/memory.events" dev="sda1" ino=17099 res=1
15:53:08 executing program 4:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x15)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000180)={0x14c}, 0x3ed)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  286.603822] bond3 (uninitialized): Released all slaves
[  286.609504] audit: type=1800 audit(1571586788.650:130): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=17099 res=0
[  286.661037] FAULT_INJECTION: forcing a failure.
[  286.661037] name failslab, interval 1, probability 0, space 0, times 0
[  286.676490] CPU: 0 PID: 13192 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  286.683455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  286.692823] Call Trace:
[  286.695426]  dump_stack+0x172/0x1f0
[  286.699067]  should_fail.cold+0xa/0x1b
[  286.702964]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  286.708071]  ? lock_downgrade+0x880/0x880
[  286.713187]  __should_failslab+0x121/0x190
[  286.717425]  should_failslab+0x9/0x14
[  286.721230]  kmem_cache_alloc_node_trace+0x274/0x720
[  286.726340]  ? __alloc_skb+0xd5/0x5f0
[  286.730152]  __kmalloc_node_track_caller+0x3d/0x80
[  286.735085]  __kmalloc_reserve.isra.0+0x40/0xf0
[  286.739805]  __alloc_skb+0x10b/0x5f0
[  286.743521]  ? skb_scrub_packet+0x490/0x490
[  286.747844]  ? refcount_add_not_zero_checked+0x240/0x240
[  286.753307]  sock_wmalloc+0xd9/0x120
[  286.757030]  pppol2tp_sendmsg+0x23b/0x6b0
[  286.761184]  ? selinux_socket_sendmsg+0x36/0x40
[  286.765875]  ? pppol2tp_getname+0xd10/0xd10
[  286.770202]  sock_sendmsg+0xd7/0x130
[  286.773919]  ___sys_sendmsg+0x3e2/0x920
[  286.777894]  ? copy_msghdr_from_user+0x430/0x430
[  286.782659]  ? mark_held_locks+0x100/0x100
[  286.786898]  ? kasan_check_read+0x11/0x20
[  286.791051]  ? __might_fault+0x12b/0x1e0
[  286.795112]  ? find_held_lock+0x35/0x130
[  286.799184]  ? __might_fault+0x12b/0x1e0
[  286.803266]  __sys_sendmmsg+0x1bf/0x4e0
[  286.807249]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  286.811571]  ? kasan_check_write+0x14/0x20
[  286.815821]  ? __sb_end_write+0xd9/0x110
[  286.819886]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  286.825421]  ? fput+0x128/0x1a0
[  286.828703]  ? ksys_write+0x1f1/0x2d0
[  286.832597]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  286.837357]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  286.842114]  ? do_syscall_64+0x26/0x620
[  286.846092]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  286.851468]  ? do_syscall_64+0x26/0x620
[  286.855448]  __x64_sys_sendmmsg+0x9d/0x100
[  286.859688]  do_syscall_64+0xfd/0x620
[  286.863490]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  286.868773] RIP: 0033:0x459a59
[  286.871968] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  286.890865] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  286.898574] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  286.905842] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  286.913109] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  286.920378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  286.927643] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:09 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0xfffffed5)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x1})

15:53:09 executing program 0 (fault-call:5 fault-nth:14):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  287.072990] FAULT_INJECTION: forcing a failure.
[  287.072990] name failslab, interval 1, probability 0, space 0, times 0
[  287.084340] CPU: 1 PID: 13201 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  287.091279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  287.100630] Call Trace:
[  287.103245]  dump_stack+0x172/0x1f0
[  287.106875]  should_fail.cold+0xa/0x1b
[  287.110760]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  287.115872]  __should_failslab+0x121/0x190
[  287.120103]  should_failslab+0x9/0x14
[  287.123905]  kmem_cache_alloc_node_trace+0x5a/0x720
[  287.128930]  ? __kmalloc_node_track_caller+0x3d/0x80
[  287.134043]  ? rcu_read_lock_sched_held+0x110/0x130
[  287.139074]  ? kmem_cache_alloc_node_trace+0x34f/0x720
[  287.144385]  __kmalloc_node_track_caller+0x3d/0x80
[  287.149323]  __kmalloc_reserve.isra.0+0x40/0xf0
[  287.154002]  pskb_expand_head+0x154/0xe20
[  287.158201]  ? lock_downgrade+0x880/0x880
[  287.162403]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  287.167963]  ? iov_iter_advance+0x261/0xe30
[  287.172290]  l2tp_xmit_skb+0xea8/0x1460
[  287.176284]  pppol2tp_sendmsg+0x4a2/0x6b0
[  287.180439]  ? pppol2tp_getname+0xd10/0xd10
[  287.184755]  sock_sendmsg+0xd7/0x130
[  287.188465]  ___sys_sendmsg+0x3e2/0x920
[  287.192441]  ? copy_msghdr_from_user+0x430/0x430
[  287.197202]  ? mark_held_locks+0x100/0x100
[  287.201441]  ? kasan_check_read+0x11/0x20
[  287.205591]  ? __might_fault+0x12b/0x1e0
[  287.209659]  ? find_held_lock+0x35/0x130
[  287.213727]  ? __might_fault+0x12b/0x1e0
[  287.217799]  __sys_sendmmsg+0x1bf/0x4e0
[  287.221769]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  287.226143]  ? kasan_check_write+0x14/0x20
[  287.230389]  ? __sb_end_write+0xd9/0x110
[  287.234455]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  287.239986]  ? fput+0x128/0x1a0
[  287.243253]  ? ksys_write+0x1f1/0x2d0
[  287.247055]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  287.251811]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  287.256647]  ? do_syscall_64+0x26/0x620
[  287.260621]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  287.265992]  ? do_syscall_64+0x26/0x620
[  287.269976]  __x64_sys_sendmmsg+0x9d/0x100
[  287.274202]  do_syscall_64+0xfd/0x620
[  287.278005]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  287.283200] RIP: 0033:0x459a59
[  287.286391] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  287.305296] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  287.312994] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  287.320253] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  287.327528] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  287.334811] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  287.342088] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
[  287.346197] bond3 (uninitialized): Released all slaves
15:53:09 executing program 3:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
syz_open_dev$media(0x0, 0x0, 0x248a40)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r0, 0x200004)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x1}, 0x10)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x421000, 0x0)
sendfile(r1, r0, 0x0, 0x80001d00c0d0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0)

[  287.355934] audit: type=1800 audit(1571586789.240:131): pid=13188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=17099 res=0
15:53:09 executing program 0 (fault-call:5 fault-nth:15):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:09 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x2b, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x4}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100))
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
splice(r3, 0x0, r6, 0x0, 0x1ffffd, 0x0)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r9=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000480)={r9, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x98)
sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x0, 0x3f, 0x5, 0x1a, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x6e6bb0, 0x3, {0x6, 0x6c, 0x2, 0x1, 0x0, 0x400, 0x0, @in=@remote, @in6=@mcast2}}, @sadb_x_nat_t_type={0x1}, @sadb_x_nat_t_type={0x1}, @sadb_address={0x3, 0x3a, 0x7f, 0xcad1f30852b73aed, 0x0, @in={0x2, 0x4e23, @local}}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_address={0x3, 0x5, 0x32, 0x20, 0x0, @in={0x2, 0x4e23, @rand_addr=0x7}}, @sadb_x_sa2={0x2, 0x13, 0xc7, 0x0, 0x0, 0x70bd2a, 0x3500}, @sadb_address={0x5, 0x6, 0xff, 0x80, 0x0, @in6={0xa, 0x4e20, 0xe9, @rand_addr="923f3662bf60a8715be2ef6f77a933e2", 0x4}}]}, 0xd0}}, 0x40000)
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r9, 0x4)

15:53:09 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r6, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r7, 0x0, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR64, @ANYRES16=r6, @ANYRESHEX=r7, @ANYRESHEX, @ANYRESHEX=r4], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x5}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0x701, 0x0, 0x0, {0x0, r5, {0x2}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={r5, @local, @local}, 0xc)
timer_delete(0x0)

[  287.593922] FAULT_INJECTION: forcing a failure.
[  287.593922] name failslab, interval 1, probability 0, space 0, times 0
[  287.605241] CPU: 0 PID: 13217 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  287.612178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  287.621537] Call Trace:
[  287.624130]  dump_stack+0x172/0x1f0
[  287.627753]  should_fail.cold+0xa/0x1b
[  287.631629]  ? ipv6_chk_mcast_addr+0x295/0x6f0
[  287.636204]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  287.641294]  ? find_held_lock+0x35/0x130
[  287.645346]  ? ipv6_chk_mcast_addr+0x2cb/0x6f0
[  287.649922]  __should_failslab+0x121/0x190
[  287.654145]  should_failslab+0x9/0x14
[  287.657936]  kmem_cache_alloc+0x47/0x700
[  287.661985]  ? kasan_check_read+0x11/0x20
[  287.666132]  skb_clone+0x156/0x3e0
[  287.669664]  ip6_finish_output2+0x1886/0x2550
[  287.674148]  ? find_held_lock+0x35/0x130
[  287.678198]  ? ip6_mtu+0x2e6/0x460
[  287.681731]  ? ip6_forward_finish+0x4d0/0x4d0
[  287.686217]  ? __lock_is_held+0xb6/0x140
[  287.690275]  ip6_finish_output+0x574/0xbe0
[  287.694500]  ? ip6_finish_output+0x574/0xbe0
[  287.698903]  ip6_output+0x235/0x7c0
[  287.702532]  ? ip6_finish_output+0xbe0/0xbe0
[  287.706932]  ? ip6_fragment+0x3770/0x3770
[  287.711074]  ip6_xmit+0xe44/0x2030
[  287.714611]  ? ip6_finish_output2+0x2550/0x2550
[  287.719266]  ? lock_downgrade+0x880/0x880
[  287.723404]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  287.728933]  ? ip6_append_data+0x320/0x320
[  287.733171]  inet6_csk_xmit+0x2fb/0x5ba
[  287.737137]  ? inet6_csk_update_pmtu+0x190/0x190
[  287.741980]  ? dst_release+0x62/0xb0
[  287.745691]  ? udp6_set_csum+0xe1/0x5a0
[  287.749660]  l2tp_xmit_skb+0x116c/0x1460
[  287.753760]  pppol2tp_sendmsg+0x4a2/0x6b0
[  287.757913]  ? pppol2tp_getname+0xd10/0xd10
[  287.762247]  sock_sendmsg+0xd7/0x130
[  287.765957]  ___sys_sendmsg+0x3e2/0x920
[  287.769933]  ? copy_msghdr_from_user+0x430/0x430
[  287.774697]  ? mark_held_locks+0x100/0x100
[  287.778945]  ? kasan_check_read+0x11/0x20
[  287.783088]  ? __might_fault+0x12b/0x1e0
[  287.787138]  ? find_held_lock+0x35/0x130
[  287.791192]  ? __might_fault+0x12b/0x1e0
[  287.795258]  __sys_sendmmsg+0x1bf/0x4e0
[  287.799259]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  287.803572]  ? kasan_check_write+0x14/0x20
[  287.807803]  ? __sb_end_write+0xd9/0x110
[  287.811855]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  287.817379]  ? fput+0x128/0x1a0
[  287.820648]  ? ksys_write+0x1f1/0x2d0
[  287.824444]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  287.829195]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  287.833938]  ? do_syscall_64+0x26/0x620
[  287.837904]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  287.843254]  ? do_syscall_64+0x26/0x620
[  287.847221]  __x64_sys_sendmmsg+0x9d/0x100
[  287.851448]  do_syscall_64+0xfd/0x620
[  287.855239]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  287.860415] RIP: 0033:0x459a59
[  287.863598] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  287.882489] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  287.890288] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  287.897562] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  287.904819] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  287.912076] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  287.919352] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:10 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=<r1=>0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
rt_tgsigqueueinfo(r1, r2, 0x8, &(0x7f0000000280)={0x3b, 0x401, 0x5ba})

15:53:10 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='\xb5\xff\x18\x00\x00\x00\xff?\xe9', 0x80000, 0x0)
keyctl$update(0x2, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r1 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x400000)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000003c0)=r1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="66b841008ee80f35c421fe6fcfd39b96000000420f35450f0666b897000f00d866460f38814c64008f2978d6a2166b3b5565400f01cb", 0x36}], 0x1, 0x0, 0x0, 0xffffffffffffff71)
inotify_init1(0x100000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x400, 0x0)
socket$inet6(0xa, 0x5, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f000000a000/0x2000)=nil, &(0x7f0000011000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000009000/0x4000)=nil, &(0x7f000000b000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000017000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)="236aa8205cbcdb952a6b4e485d3340f16ecca2a32c4ebafe5951c6de734d9e6bddc48349823885acc631a7c10288e3af3269282f81fc7e763a4476aeb220ae259903069c4cfa402adbdc0af7793c81b099d49ea6a2", 0x55, r2}, 0x68)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000300))
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
splice(r3, 0x0, r6, 0x0, 0x1ffffd, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x1f, @mcast1, 0x2}, @in6={0xa, 0x4e24, 0x9, @local}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x2, @remote}], 0x68)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_script(r7, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000280)={0x0, &(0x7f0000000540)})
r8 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x9, 0x2002)
ioctl$KIOCSOUND(r8, 0x4b2f, 0x7ff)
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0)
r9 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x20011, r9, 0x0)

15:53:10 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0x0, 0x0, 0x150a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:10 executing program 0 (fault-call:5 fault-nth:16):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  288.263938] FAULT_INJECTION: forcing a failure.
[  288.263938] name failslab, interval 1, probability 0, space 0, times 0
[  288.275316] CPU: 0 PID: 13243 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  288.275327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  288.275332] Call Trace:
[  288.275361]  dump_stack+0x172/0x1f0
[  288.275385]  should_fail.cold+0xa/0x1b
[  288.275406]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  288.275422]  ? find_held_lock+0x35/0x130
15:53:10 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x3600000000000000, 0x44, 0xff04, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000140)}, 0x40)
r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x4080)
connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x3, {0x3, 0x7f, 0x3, 0x0, 0x0, 0x5}, 0x4, 0xdc}, 0xe)

[  288.275446]  __should_failslab+0x121/0x190
[  288.275462]  should_failslab+0x9/0x14
[  288.275478]  kmem_cache_alloc+0x47/0x700
[  288.275493]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  288.275512]  ? br_allowed_ingress+0x1630/0x1630
[  288.275529]  skb_clone+0x156/0x3e0
[  288.275556]  deliver_clone+0x46/0xc0
[  288.275576]  br_flood+0x4da/0x710
[  288.275605]  br_dev_xmit+0xeeb/0x1490
[  288.275626]  ? br_poll_controller+0x10/0x10
[  288.275643]  ? __lock_is_held+0xb6/0x140
[  288.275672]  dev_hard_start_xmit+0x1a5/0x980
[  288.275692]  ? check_preemption_disabled+0x48/0x290
[  288.275713]  __dev_queue_xmit+0x2704/0x2fe0
[  288.275730]  ? mark_held_locks+0x100/0x100
[  288.275743]  ? do_xdp_generic+0x50/0x50
[  288.275765]  ? netdev_pick_tx+0x300/0x300
[  288.275782]  ? ip6_finish_output+0x574/0xbe0
[  288.275798]  ? find_held_lock+0x35/0x130
[  288.275815]  ? ip6_finish_output+0x574/0xbe0
[  288.275835]  ? mark_held_locks+0xb1/0x100
[  288.275852]  ? ip6_finish_output2+0x1784/0x2550
[  288.275866]  ? ip6_finish_output+0x574/0xbe0
[  288.275880]  ? ip6_finish_output2+0x1784/0x2550
[  288.275902]  dev_queue_xmit+0x18/0x20
[  288.275916]  ? dev_queue_xmit+0x18/0x20
[  288.275932]  ip6_finish_output2+0x12fd/0x2550
[  288.275958]  ? ip6_forward_finish+0x4d0/0x4d0
[  288.275978]  ? netif_rx_ni+0x350/0x350
[  288.276005]  ip6_finish_output+0x574/0xbe0
[  288.276023]  ? ip6_finish_output+0x574/0xbe0
[  288.292325]  ip6_output+0x235/0x7c0
[  288.292351]  ? ip6_finish_output+0xbe0/0xbe0
[  288.307549]  ? ip6_fragment+0x3770/0x3770
[  288.307571]  ip6_xmit+0xe44/0x2030
[  288.307598]  ? ip6_finish_output2+0x2550/0x2550
[  288.307615]  ? lock_downgrade+0x880/0x880
[  288.307633]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  288.307649]  ? ip6_append_data+0x320/0x320
[  288.307681]  inet6_csk_xmit+0x2fb/0x5ba
[  288.307699]  ? inet6_csk_update_pmtu+0x190/0x190
[  288.307713]  ? dst_release+0x62/0xb0
[  288.307740]  ? udp6_set_csum+0xe1/0x5a0
[  288.307763]  l2tp_xmit_skb+0x116c/0x1460
[  288.307791]  pppol2tp_sendmsg+0x4a2/0x6b0
[  288.307813]  ? pppol2tp_getname+0xd10/0xd10
[  288.307833]  sock_sendmsg+0xd7/0x130
[  288.307850]  ___sys_sendmsg+0x3e2/0x920
[  288.307867]  ? copy_msghdr_from_user+0x430/0x430
[  288.307890]  ? mark_held_locks+0x100/0x100
[  288.307908]  ? kasan_check_read+0x11/0x20
[  288.307930]  ? __might_fault+0x12b/0x1e0
[  288.307946]  ? find_held_lock+0x35/0x130
[  288.307962]  ? __might_fault+0x12b/0x1e0
[  288.307999]  __sys_sendmmsg+0x1bf/0x4e0
[  288.308018]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  288.308033]  ? kasan_check_write+0x14/0x20
[  288.308058]  ? __sb_end_write+0xd9/0x110
[  288.308076]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  288.308086]  ? fput+0x128/0x1a0
[  288.308101]  ? ksys_write+0x1f1/0x2d0
[  288.316400]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  288.316414]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  288.316428]  ? do_syscall_64+0x26/0x620
[  288.316443]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  288.316457]  ? do_syscall_64+0x26/0x620
[  288.316475]  __x64_sys_sendmmsg+0x9d/0x100
[  288.316492]  do_syscall_64+0xfd/0x620
[  288.316510]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  288.316522] RIP: 0033:0x459a59
15:53:10 executing program 0 (fault-call:5 fault-nth:17):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:10 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

[  288.316542] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  288.324365] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  288.324382] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  288.324391] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  288.324399] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
15:53:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r0=>0x0)
perf_event_open(0x0, r0, 0x2, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
getpid()
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000180)="b0f90d030b4ce463bdb051009cddf3cc", 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
accept4$alg(r3, 0x0, 0x0, 0x0)
write$binfmt_elf32(r3, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xff, 0x80, 0xff, 0x4, 0x2, 0x1a5e1632543f87d1, 0xa055, 0x381, 0x38, 0x347, 0xfffffffa, 0x6, 0x20, 0x2, 0x400, 0x6, 0x3}, [{0x2, 0x9, 0x1ff, 0x4, 0x5, 0xade9, 0x4, 0x2}, {0x3, 0x1, 0x3, 0x4, 0x9, 0xffffffff, 0x1}], "00a80520c3029f3609988124e6bd9069c2a0f86ca0bc02aabf1533786300e1c8a8b7b24e37392988ad96e0e68606b8d0738b1101e35a35711227c643548ac339f016d4cdee526d759401ad47b011a53bb1df85f58f14a27bcfe75015adb1a05e02e901762465654d2206ba4e2b73cfcaba51714b48592669aaff2c5d3170a3bc62528295e78589ef6e4d31675ae5421bd1f0727ddcd02ca19236b6e52f7fa20494ec5d3ed9242a1b81793449892f7bcadaa6b7532c20535bab3e43598dfe68e1dcc9aeaa7658ca6e7d9fb33ec87e63f0feea974f5ebcb86de0c2e619957fe60813c307595065e34455fcf3f58cc341651ec051bc", [[], [], []]}, 0x46c)
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
splice(r4, 0x0, r7, 0x0, 0x1ffffd, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0xac203fe0321ed855)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0x4)
r8 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f00000001c0)={0x5, @pix_mp})
ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05)

[  288.324408] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  288.324416] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:10 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000040))
exit(0x0)
timer_delete(0x0)

[  288.718470] FAULT_INJECTION: forcing a failure.
[  288.718470] name failslab, interval 1, probability 0, space 0, times 0
[  288.775688] CPU: 1 PID: 13253 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  288.782756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  288.792113] Call Trace:
[  288.792140]  dump_stack+0x172/0x1f0
[  288.798340]  should_fail.cold+0xa/0x1b
[  288.798372]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  288.798391]  ? lock_downgrade+0x880/0x880
[  288.798415]  __should_failslab+0x121/0x190
[  288.798430]  should_failslab+0x9/0x14
[  288.819588]  kmem_cache_alloc_node+0x26c/0x710
[  288.824184]  __alloc_skb+0xd5/0x5f0
[  288.827817]  ? skb_scrub_packet+0x490/0x490
[  288.832147]  ? refcount_add_not_zero_checked+0x240/0x240
[  288.837608]  sock_wmalloc+0xd9/0x120
[  288.841331]  pppol2tp_sendmsg+0x23b/0x6b0
[  288.845483]  ? selinux_socket_sendmsg+0x36/0x40
[  288.850160]  ? pppol2tp_getname+0xd10/0xd10
[  288.854485]  sock_sendmsg+0xd7/0x130
[  288.858220]  ___sys_sendmsg+0x3e2/0x920
[  288.862201]  ? copy_msghdr_from_user+0x430/0x430
[  288.866968]  ? mark_held_locks+0x100/0x100
[  288.871210]  ? kasan_check_read+0x11/0x20
[  288.875367]  ? __might_fault+0x12b/0x1e0
[  288.879430]  ? find_held_lock+0x35/0x130
[  288.883492]  ? __might_fault+0x12b/0x1e0
[  288.887577]  __sys_sendmmsg+0x1bf/0x4e0
[  288.891558]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  288.895885]  ? kasan_check_write+0x14/0x20
[  288.900131]  ? __sb_end_write+0xd9/0x110
[  288.904197]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  288.909733]  ? fput+0x128/0x1a0
[  288.913011]  ? ksys_write+0x1f1/0x2d0
[  288.918644]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  288.923406]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  288.928162]  ? do_syscall_64+0x26/0x620
[  288.932135]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  288.937498]  ? do_syscall_64+0x26/0x620
[  288.941481]  __x64_sys_sendmmsg+0x9d/0x100
[  288.945725]  do_syscall_64+0xfd/0x620
[  288.949531]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  288.954718] RIP: 0033:0x459a59
[  288.957909] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  288.976813] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  288.984544] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  288.991820] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  288.999106] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  289.006394] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  289.013678] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:11 executing program 1:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x20)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x400)
ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000880)={0xa, &(0x7f0000000080)=""/46, &(0x7f0000000780)=[{0x3f, 0xf4, 0x4, &(0x7f0000000400)=""/244}, {0x8, 0x2a, 0x9, &(0x7f00000000c0)=""/42}, {0x3, 0xb5, 0x4, &(0x7f00000001c0)=""/181}, {0x861, 0x6e, 0xfffffffc, &(0x7f0000000100)=""/110}, {0x7fff, 0xea, 0x2, &(0x7f0000000500)=""/234}, {0x2, 0x2b, 0xf4a, &(0x7f00000002c0)=""/43}, {0x8001, 0xe3, 0xdc7a, &(0x7f0000000600)=""/227}, {0x2, 0x20, 0x6, &(0x7f0000000300)=""/32}, {0xffffffff, 0xc, 0x7ff, &(0x7f0000000700)=""/12}, {0x12, 0x1a, 0x4, &(0x7f0000000740)=""/26}]})
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x7, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, &(0x7f0000000040))
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_script(r4, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000a00))
r5 = accept4(r3, 0x0, 0x0, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
splice(r2, 0x0, r6, 0x0, 0x1ffffd, 0x0)
name_to_handle_at(r2, &(0x7f00000008c0)='./bus\x00', &(0x7f0000000900)={0xb9, 0xb23f, "17e688b97edaac9237857ded98f2f7fb831adc7330e1b4643f099ecf48055740d492ec6978ef60514dc1cf15fbb330eca19d6914a67f0ccb49eb5bdcb08a5032aff07f3e00355dac3fc15dec907b3c338f19a3084b7764c8aa290e6ab6e86bdfde533bb984a80d16569336cf92f3cba8e1b04cdb09cafce250ff6eb05e718849f45c081bbfdea1d7328a2efbf79da3ceb1fd600792531d01bf34fa2370968057c23ae88b03e6355d28d50a1d3249112e7f"}, &(0x7f00000009c0), 0x400)
sched_rr_get_interval(0x0, &(0x7f0000000040))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
r7 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x108000000000000}]})

15:53:11 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x44, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000140)}, 0x40)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x2000, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000280)={0x1, {{0x2, 0x4e23, @rand_addr=0x2000000}}}, 0x88)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0xfffffed5)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000140)=0x5, &(0x7f0000000380)=0x1)

15:53:11 executing program 3:
add_key(&(0x7f0000000080)='rxrpc\x00', 0x0, &(0x7f0000000240)="f345993ffe7339f4fbbeea936620be0cb308a7f4f9f8e15eb013d32428", 0x1d, 0xfffffffffffffffd)
socket$unix(0x1, 0x1, 0x0)
r0 = semget$private(0x0, 0x2000000010a, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000))
semctl$IPC_RMID(r0, 0x0, 0x0)

15:53:11 executing program 0 (fault-call:5 fault-nth:18):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:11 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @broadcast}, 0x3)
llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=""/4096, 0x1000)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000001980)=ANY=[@ANYBLOB="0100000000000088020000000000000000000001000000000000f7ff000000000000000e00000000e1ffffffff1a00000000fc000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000003276be5c87e4669a00"/144], 0x90)

[  289.240106] FAULT_INJECTION: forcing a failure.
[  289.240106] name failslab, interval 1, probability 0, space 0, times 0
[  289.262138] CPU: 0 PID: 13275 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  289.269095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  289.278457] Call Trace:
[  289.281061]  dump_stack+0x172/0x1f0
[  289.284742]  should_fail.cold+0xa/0x1b
[  289.288639]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  289.293761]  ? lock_downgrade+0x880/0x880
[  289.297908]  __should_failslab+0x121/0x190
[  289.302149]  should_failslab+0x9/0x14
[  289.305953]  kmem_cache_alloc_node_trace+0x274/0x720
[  289.311061]  ? __alloc_skb+0xd5/0x5f0
[  289.314914]  __kmalloc_node_track_caller+0x3d/0x80
[  289.319851]  __kmalloc_reserve.isra.0+0x40/0xf0
[  289.324529]  __alloc_skb+0x10b/0x5f0
[  289.328241]  ? skb_scrub_packet+0x490/0x490
[  289.332579]  ? refcount_add_not_zero_checked+0x240/0x240
[  289.338039]  sock_wmalloc+0xd9/0x120
[  289.341753]  pppol2tp_sendmsg+0x23b/0x6b0
[  289.345892]  ? selinux_socket_sendmsg+0x36/0x40
[  289.350562]  ? pppol2tp_getname+0xd10/0xd10
[  289.354880]  sock_sendmsg+0xd7/0x130
[  289.358598]  ___sys_sendmsg+0x3e2/0x920
[  289.362590]  ? copy_msghdr_from_user+0x430/0x430
[  289.367362]  ? mark_held_locks+0x100/0x100
[  289.371588]  ? kasan_check_read+0x11/0x20
[  289.375729]  ? __might_fault+0x12b/0x1e0
[  289.379790]  ? find_held_lock+0x35/0x130
[  289.383866]  ? __might_fault+0x12b/0x1e0
[  289.387933]  __sys_sendmmsg+0x1bf/0x4e0
[  289.391909]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  289.396242]  ? kasan_check_write+0x14/0x20
[  289.400498]  ? __sb_end_write+0xd9/0x110
[  289.404554]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  289.410080]  ? fput+0x128/0x1a0
[  289.413352]  ? ksys_write+0x1f1/0x2d0
[  289.417143]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  289.422164]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  289.426933]  ? do_syscall_64+0x26/0x620
[  289.430896]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  289.436255]  ? do_syscall_64+0x26/0x620
[  289.440221]  __x64_sys_sendmmsg+0x9d/0x100
[  289.444448]  do_syscall_64+0xfd/0x620
[  289.448244]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  289.453441] RIP: 0033:0x459a59
[  289.456623] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  289.475971] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  289.484033] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
15:53:11 executing program 0 (fault-call:5 fault-nth:19):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  289.491314] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  289.498573] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  289.505839] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  289.513107] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
[  289.584360] FAULT_INJECTION: forcing a failure.
[  289.584360] name failslab, interval 1, probability 0, space 0, times 0
[  289.596676] CPU: 0 PID: 13285 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  289.603597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  289.613483] Call Trace:
[  289.616086]  dump_stack+0x172/0x1f0
[  289.619735]  should_fail.cold+0xa/0x1b
[  289.623630]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  289.628748]  __should_failslab+0x121/0x190
[  289.632980]  should_failslab+0x9/0x14
[  289.636779]  kmem_cache_alloc_node_trace+0x5a/0x720
[  289.641792]  ? __kmalloc_node_track_caller+0x3d/0x80
[  289.646889]  ? rcu_read_lock_sched_held+0x110/0x130
[  289.651896]  ? kmem_cache_alloc_node_trace+0x34f/0x720
[  289.657173]  __kmalloc_node_track_caller+0x3d/0x80
[  289.662097]  __kmalloc_reserve.isra.0+0x40/0xf0
[  289.666760]  pskb_expand_head+0x154/0xe20
[  289.670918]  ? lock_downgrade+0x880/0x880
[  289.675056]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  289.680584]  ? iov_iter_advance+0x261/0xe30
[  289.684903]  l2tp_xmit_skb+0xea8/0x1460
[  289.688878]  pppol2tp_sendmsg+0x4a2/0x6b0
[  289.693022]  ? pppol2tp_getname+0xd10/0xd10
[  289.697343]  sock_sendmsg+0xd7/0x130
[  289.701045]  ___sys_sendmsg+0x3e2/0x920
[  289.705187]  ? copy_msghdr_from_user+0x430/0x430
[  289.709938]  ? mark_held_locks+0x100/0x100
[  289.714184]  ? kasan_check_read+0x11/0x20
[  289.718336]  ? __might_fault+0x12b/0x1e0
[  289.722401]  ? find_held_lock+0x35/0x130
[  289.726452]  ? __might_fault+0x12b/0x1e0
[  289.730518]  __sys_sendmmsg+0x1bf/0x4e0
[  289.734486]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  289.738800]  ? kasan_check_write+0x14/0x20
[  289.743032]  ? __sb_end_write+0xd9/0x110
[  289.747100]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  289.752646]  ? fput+0x128/0x1a0
[  289.755916]  ? ksys_write+0x1f1/0x2d0
[  289.759711]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  289.764455]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  289.769212]  ? do_syscall_64+0x26/0x620
[  289.773177]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  289.778537]  ? do_syscall_64+0x26/0x620
[  289.782513]  __x64_sys_sendmmsg+0x9d/0x100
[  289.786741]  do_syscall_64+0xfd/0x620
[  289.790882]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  289.796060] RIP: 0033:0x459a59
[  289.799245] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  289.818319] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  289.826032] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
15:53:12 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
timer_delete(0x0)
setrlimit(0x7, &(0x7f0000000040)={0x100, 0x8})

15:53:12 executing program 4:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x4ca00, 0x0)
ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000280))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x78)
ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000180))
r2 = socket$inet(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)}, 0x0)

[  289.833291] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  289.840549] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  289.847821] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  289.855081] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:12 executing program 1:
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffed5)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r4, 0x0, 0x1ffffd, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000340))
getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000180)=""/250, &(0x7f0000000000)=0xfa)
r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1)
ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058560f, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "db69e374"}, 0x0, 0x0, @offset=0x9, 0x4})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r6, 0x8992, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'})
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x4)

15:53:12 executing program 4:
r0 = socket$inet(0x2b, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e27, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

15:53:12 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x571e2066, 0x100000)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x5c1f, 0x0, 0x0, 0x4})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x3600000000000000, 0x44, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x32, 0x0, 0x54, 0x0, &(0x7f0000000280)="99f1909816fc3c0d6a15da4e5ae1ff501bc0548b8d175e1708413f564bd434c35badc6f48b368c4ee7a7ca6430a4c0032682c1cfd112828e1dafc4a0348b497f7216ab1e2b314db4882c215d8d80e35f085271ed", &(0x7f0000000100)}, 0x40)

15:53:12 executing program 0 (fault-call:5 fault-nth:20):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  290.115398] FAULT_INJECTION: forcing a failure.
[  290.115398] name failslab, interval 1, probability 0, space 0, times 0
[  290.126666] CPU: 0 PID: 13307 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  290.133715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  290.143074] Call Trace:
[  290.145676]  dump_stack+0x172/0x1f0
[  290.149327]  should_fail.cold+0xa/0x1b
[  290.153214]  ? ipv6_chk_mcast_addr+0x295/0x6f0
[  290.157803]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  290.163021]  ? find_held_lock+0x35/0x130
[  290.168210]  ? ipv6_chk_mcast_addr+0x2cb/0x6f0
[  290.172791]  __should_failslab+0x121/0x190
[  290.177031]  should_failslab+0x9/0x14
[  290.180839]  kmem_cache_alloc+0x47/0x700
[  290.184908]  ? kasan_check_read+0x11/0x20
[  290.189068]  skb_clone+0x156/0x3e0
[  290.192614]  ip6_finish_output2+0x1886/0x2550
[  290.197111]  ? find_held_lock+0x35/0x130
[  290.201171]  ? ip6_mtu+0x2e6/0x460
[  290.204718]  ? ip6_forward_finish+0x4d0/0x4d0
[  290.209216]  ? __lock_is_held+0xb6/0x140
[  290.213274]  ip6_finish_output+0x574/0xbe0
[  290.217506]  ? ip6_finish_output+0x574/0xbe0
[  290.221913]  ip6_output+0x235/0x7c0
[  290.225529]  ? ip6_finish_output+0xbe0/0xbe0
[  290.229944]  ? ip6_fragment+0x3770/0x3770
[  290.234086]  ip6_xmit+0xe44/0x2030
[  290.237637]  ? ip6_finish_output2+0x2550/0x2550
[  290.242315]  ? lock_downgrade+0x880/0x880
[  290.246477]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  290.252062]  ? ip6_append_data+0x320/0x320
[  290.256318]  inet6_csk_xmit+0x2fb/0x5ba
[  290.260295]  ? inet6_csk_update_pmtu+0x190/0x190
[  290.265039]  ? dst_release+0x62/0xb0
[  290.268769]  ? udp6_set_csum+0xe1/0x5a0
[  290.272740]  l2tp_xmit_skb+0x116c/0x1460
[  290.276815]  pppol2tp_sendmsg+0x4a2/0x6b0
[  290.280994]  ? pppol2tp_getname+0xd10/0xd10
[  290.285314]  sock_sendmsg+0xd7/0x130
[  290.289026]  ___sys_sendmsg+0x3e2/0x920
[  290.293016]  ? copy_msghdr_from_user+0x430/0x430
[  290.297787]  ? mark_held_locks+0x100/0x100
[  290.302024]  ? kasan_check_read+0x11/0x20
[  290.306178]  ? __might_fault+0x12b/0x1e0
[  290.310242]  ? find_held_lock+0x35/0x130
15:53:12 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0xffad, &(0x7f0000000c40)=0x5)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0}, &(0x7f0000cab000)=0x105)
r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x2)
write$cgroup_int(r3, &(0x7f0000000200), 0xf)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000180)={0x3, 0x6, 0x3, 0x1, 'syz1\x00', 0x4000400})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={<r6=>0xffffffffffffffff})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(morus640)\x00'}, 0x2a7)
r8 = accept4(r7, 0x0, 0x0, 0x0)
r9 = accept4$alg(r8, 0x0, 0x0, 0x0)
splice(r6, 0x0, r9, 0x0, 0x1ffffd, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r11 = accept4(r10, 0x0, 0x0, 0x0)
accept4$alg(r11, 0x0, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRES64=r6], @ANYRESOCT=r11], 0x5, 0x6)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00')
clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x4, 0x331e, 0x4000000040}}, 0x28)
lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
write$binfmt_script(r12, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$DRM_IOCTL_SET_MASTER(r12, 0x641e)

[  290.314302]  ? __might_fault+0x12b/0x1e0
[  290.318385]  __sys_sendmmsg+0x1bf/0x4e0
[  290.322380]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  290.326722]  ? kasan_check_write+0x14/0x20
[  290.330978]  ? __sb_end_write+0xd9/0x110
[  290.335051]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  290.340597]  ? fput+0x128/0x1a0
[  290.343890]  ? ksys_write+0x1f1/0x2d0
[  290.347703]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  290.352469]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  290.357240]  ? do_syscall_64+0x26/0x620
[  290.361225]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  290.366687]  ? do_syscall_64+0x26/0x620
[  290.370676]  __x64_sys_sendmmsg+0x9d/0x100
[  290.374927]  do_syscall_64+0xfd/0x620
[  290.378741]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  290.383936] RIP: 0033:0x459a59
[  290.387137] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  290.406046] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
15:53:12 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x23, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x200}, 0x10}, 0x253)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x20)
perf_event_open(&(0x7f0000000380)={0x4, 0x70, 0x20, 0x1, 0x5, 0x1, 0x0, 0x1, 0xc380, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x6, @perf_bp={&(0x7f0000000300), 0x3}, 0x1, 0x80000000, 0x5, 0x1, 0x100000000, 0x7be, 0x81}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x5)
write$selinux_create(r1, &(0x7f0000000280)=@objname={'system_u:object_r:auditd_etc_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x9, 0x20, './file0\x00'}, 0x4e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0xfffffed5)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-control\x00', 0x100800, 0x0)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000400)=0x3f)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_script(r3, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0x701, 0x0, 0x0, {0x0, r7, {0x2}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0)
r9 = geteuid()
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast2, @in6=@rand_addr="3a197f13b8e522eccce478ffa5630a8e", 0x4e21, 0x9, 0x4e22, 0x4, 0x13, 0x20, 0x20, 0x32, r7, r9}, {0x3f, 0x5, 0x7, 0x3, 0x5, 0x0, 0xe0, 0x7ff}, {0x920a, 0x3f, 0xebb, 0x9}, 0x6, 0x0, 0x5, 0x2, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6}, 0x5, @in=@multicast2, 0x3506, 0x1, 0x2, 0x0, 0x7fffffff, 0x7, 0xffffff60}}, 0xe8)
ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000004c0)={0x9, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})

[  290.413765] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  290.421047] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  290.428328] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  290.435605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  290.442879] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:12 executing program 4:
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x7, [@dev, @link_local, @dev, @empty, @remote, @remote, @remote]})
mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {0x2}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0)
pipe(&(0x7f0000000380)={<r6=>0xffffffffffffffff})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
r9 = accept4$alg(r8, 0x0, 0x0, 0x0)
splice(r6, 0x0, r9, 0x0, 0x1ffffd, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast1, @in6=@local, 0x4e20, 0xffff, 0x4e23, 0x18, 0x0, 0xc0, 0x0, 0xa1, r4, r10}, {0x6, 0x3, 0x800, 0x400, 0x978b, 0x3, 0x10000, 0x3}, {0x3, 0x5, 0x2, 0x7}, 0x7, 0x6e6bb9, 0x2, 0x0, 0x1}, {{@in6=@rand_addr="f63b89a99381af4a3355e262737d3c23", 0x4d3, 0x33}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x847d}}, 0xe8)
add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='|', 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x800}, 0x20}}, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
socket$inet6_tcp(0xa, 0x1, 0x0)
readahead(0xffffffffffffffff, 0xfff, 0x8141)

15:53:12 executing program 0 (fault-call:5 fault-nth:21):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  290.624841] FAULT_INJECTION: forcing a failure.
[  290.624841] name failslab, interval 1, probability 0, space 0, times 0
[  290.636145] CPU: 1 PID: 13324 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  290.643171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  290.652564] Call Trace:
[  290.655166]  dump_stack+0x172/0x1f0
[  290.658789]  should_fail.cold+0xa/0x1b
[  290.662699]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  290.667804]  ? find_held_lock+0x35/0x130
[  290.671862]  __should_failslab+0x121/0x190
[  290.676096]  should_failslab+0x9/0x14
[  290.679955]  kmem_cache_alloc+0x47/0x700
[  290.684021]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  290.689214]  ? br_allowed_ingress+0x1630/0x1630
[  290.693879]  skb_clone+0x156/0x3e0
[  290.697444]  deliver_clone+0x46/0xc0
[  290.701176]  br_flood+0x4da/0x710
[  290.704628]  br_dev_xmit+0xeeb/0x1490
[  290.708439]  ? br_poll_controller+0x10/0x10
[  290.712939]  ? __lock_is_held+0xb6/0x140
[  290.717081]  dev_hard_start_xmit+0x1a5/0x980
[  290.721487]  ? check_preemption_disabled+0x48/0x290
[  290.726514]  __dev_queue_xmit+0x2704/0x2fe0
[  290.730830]  ? mark_held_locks+0x100/0x100
[  290.735061]  ? do_xdp_generic+0x50/0x50
[  290.739044]  ? netdev_pick_tx+0x300/0x300
[  290.743181]  ? ip6_finish_output+0x574/0xbe0
[  290.747575]  ? find_held_lock+0x35/0x130
[  290.751626]  ? ip6_finish_output+0x574/0xbe0
[  290.756036]  ? mark_held_locks+0xb1/0x100
[  290.760175]  ? ip6_finish_output2+0x1784/0x2550
[  290.764829]  ? ip6_finish_output+0x574/0xbe0
[  290.769380]  ? ip6_finish_output2+0x1784/0x2550
[  290.774051]  dev_queue_xmit+0x18/0x20
[  290.777908]  ? dev_queue_xmit+0x18/0x20
[  290.781873]  ip6_finish_output2+0x12fd/0x2550
[  290.786369]  ? ip6_forward_finish+0x4d0/0x4d0
[  290.790874]  ? netif_rx_ni+0x350/0x350
[  290.794763]  ip6_finish_output+0x574/0xbe0
[  290.798993]  ? ip6_finish_output+0x574/0xbe0
[  290.803405]  ip6_output+0x235/0x7c0
[  290.807039]  ? ip6_finish_output+0xbe0/0xbe0
[  290.811631]  ? ip6_fragment+0x3770/0x3770
[  290.815777]  ip6_xmit+0xe44/0x2030
[  290.819313]  ? ip6_finish_output2+0x2550/0x2550
[  290.823972]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  290.828731]  ? ip6_append_data+0x320/0x320
[  290.832972]  ? retint_kernel+0x2d/0x2d
[  290.836875]  inet6_csk_xmit+0x2fb/0x5ba
[  290.840838]  ? inet6_csk_update_pmtu+0x190/0x190
[  290.845584]  ? dst_release+0x62/0xb0
[  290.849310]  ? udp6_set_csum+0xe1/0x5a0
[  290.853286]  l2tp_xmit_skb+0x116c/0x1460
[  290.857375]  pppol2tp_sendmsg+0x4a2/0x6b0
[  290.861526]  ? pppol2tp_getname+0xd10/0xd10
[  290.865848]  sock_sendmsg+0xd7/0x130
[  290.869553]  ___sys_sendmsg+0x3e2/0x920
[  290.873536]  ? copy_msghdr_from_user+0x430/0x430
[  290.878331]  ? mark_held_locks+0x100/0x100
[  290.882583]  ? kasan_check_read+0x11/0x20
[  290.886721]  ? __might_fault+0x12b/0x1e0
[  290.890770]  ? find_held_lock+0x35/0x130
[  290.894824]  ? __might_fault+0x12b/0x1e0
[  290.898899]  __sys_sendmmsg+0x1bf/0x4e0
[  290.902884]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  290.907209]  ? kasan_check_write+0x14/0x20
[  290.911456]  ? __sb_end_write+0xd9/0x110
[  290.915519]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  290.921052]  ? fput+0x128/0x1a0
[  290.924332]  ? ksys_write+0x1f1/0x2d0
[  290.928149]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  290.932904]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  290.937656]  ? do_syscall_64+0x26/0x620
[  290.941625]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  290.946972]  ? do_syscall_64+0x26/0x620
[  290.950966]  __x64_sys_sendmmsg+0x9d/0x100
[  290.955204]  do_syscall_64+0xfd/0x620
[  290.959000]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  290.964177] RIP: 0033:0x459a59
[  290.967359] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  290.986260] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  290.993965] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  291.001233] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  291.008489] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  291.015758] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
15:53:13 executing program 5:
timer_create(0x2, 0x0, &(0x7f0000000000))
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040))
exit(0x0)

[  291.023034] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:13 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r4, 0x0, 0x1ffffd, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@rand_addr, @empty}, &(0x7f00000000c0)=0xc)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4)
sendto$inet(r0, &(0x7f00000012c0)="03", 0x1, 0x0, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x0)
restart_syscall()
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x1000}, 0x8)

15:53:13 executing program 0 (fault-call:5 fault-nth:22):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  291.194016] FAULT_INJECTION: forcing a failure.
[  291.194016] name failslab, interval 1, probability 0, space 0, times 0
[  291.205322] CPU: 0 PID: 13338 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  291.212250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  291.221621] Call Trace:
[  291.224242]  dump_stack+0x172/0x1f0
[  291.227882]  should_fail.cold+0xa/0x1b
[  291.231771]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  291.236874]  ? find_held_lock+0x35/0x130
[  291.240953]  __should_failslab+0x121/0x190
[  291.245200]  should_failslab+0x9/0x14
[  291.249001]  kmem_cache_alloc+0x47/0x700
[  291.253078]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  291.258278]  ? br_allowed_ingress+0x1630/0x1630
[  291.262948]  skb_clone+0x156/0x3e0
[  291.266483]  deliver_clone+0x46/0xc0
[  291.270199]  br_flood+0x4da/0x710
[  291.273672]  br_dev_xmit+0xeeb/0x1490
[  291.277488]  ? br_poll_controller+0x10/0x10
[  291.281821]  ? __lock_is_held+0xb6/0x140
[  291.285890]  dev_hard_start_xmit+0x1a5/0x980
[  291.290297]  ? check_preemption_disabled+0x48/0x290
[  291.295308]  __dev_queue_xmit+0x2704/0x2fe0
[  291.299631]  ? mark_held_locks+0x100/0x100
[  291.303871]  ? do_xdp_generic+0x50/0x50
[  291.307850]  ? netdev_pick_tx+0x300/0x300
[  291.311987]  ? ip6_finish_output+0x574/0xbe0
[  291.316397]  ? find_held_lock+0x35/0x130
[  291.320466]  ? ip6_finish_output+0x574/0xbe0
[  291.324880]  ? mark_held_locks+0xb1/0x100
[  291.329025]  ? ip6_finish_output2+0x1784/0x2550
[  291.333684]  ? ip6_finish_output+0x574/0xbe0
[  291.338082]  ? ip6_finish_output2+0x1784/0x2550
[  291.342745]  dev_queue_xmit+0x18/0x20
[  291.346535]  ? dev_queue_xmit+0x18/0x20
[  291.350497]  ip6_finish_output2+0x12fd/0x2550
[  291.354993]  ? ip6_forward_finish+0x4d0/0x4d0
[  291.359484]  ? netif_rx_ni+0x350/0x350
[  291.363372]  ip6_finish_output+0x574/0xbe0
[  291.367599]  ? ip6_finish_output+0x574/0xbe0
[  291.372015]  ip6_output+0x235/0x7c0
[  291.375635]  ? ip6_finish_output+0xbe0/0xbe0
[  291.380034]  ? ip6_fragment+0x3770/0x3770
[  291.384179]  ip6_xmit+0xe44/0x2030
[  291.387716]  ? ip6_finish_output2+0x2550/0x2550
[  291.392386]  ? lock_downgrade+0x880/0x880
[  291.396539]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  291.402064]  ? ip6_append_data+0x320/0x320
[  291.406314]  inet6_csk_xmit+0x2fb/0x5ba
[  291.410279]  ? inet6_csk_update_pmtu+0x190/0x190
[  291.415034]  ? dst_release+0x62/0xb0
[  291.418746]  ? udp6_set_csum+0xe1/0x5a0
[  291.422712]  l2tp_xmit_skb+0x116c/0x1460
[  291.426773]  pppol2tp_sendmsg+0x4a2/0x6b0
[  291.430914]  ? pppol2tp_getname+0xd10/0xd10
[  291.435237]  sock_sendmsg+0xd7/0x130
[  291.438947]  ___sys_sendmsg+0x3e2/0x920
[  291.442911]  ? copy_msghdr_from_user+0x430/0x430
[  291.447662]  ? mark_held_locks+0x100/0x100
[  291.451886]  ? kasan_check_read+0x11/0x20
[  291.456027]  ? __might_fault+0x12b/0x1e0
[  291.460166]  ? find_held_lock+0x35/0x130
[  291.464215]  ? __might_fault+0x12b/0x1e0
[  291.468282]  __sys_sendmmsg+0x1bf/0x4e0
[  291.472247]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  291.476556]  ? kasan_check_write+0x14/0x20
[  291.480787]  ? __sb_end_write+0xd9/0x110
[  291.484837]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  291.490360]  ? fput+0x128/0x1a0
[  291.493627]  ? ksys_write+0x1f1/0x2d0
[  291.497422]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  291.502172]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  291.506915]  ? do_syscall_64+0x26/0x620
[  291.510879]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  291.516230]  ? do_syscall_64+0x26/0x620
[  291.520206]  __x64_sys_sendmmsg+0x9d/0x100
[  291.524435]  do_syscall_64+0xfd/0x620
[  291.528229]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  291.533405] RIP: 0033:0x459a59
[  291.536588] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  291.555476] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  291.563177] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  291.570437] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  291.577695] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  291.584954] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  291.592216] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:13 executing program 4:
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
dup(r0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
accept4$alg(r4, 0x0, 0x0, 0x0)
bind$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x2, @multicast2}}, 0x1e)
write$selinux_create(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a61756469745f73706f6f6c5f743a7330202f7362696e2f6468636c69656e74203030303030303030303030303030303030303033202e2f66696c653000ae4314cfe066276d1552eb1dcd94c5e1bfd24a1895349eeb0a4b60064baeb3f97bea68fba948f7dc116f840cb4d91d4d0fc69acb835b351f13ed44af5a1f2a8b16a79fba2f9191de9672474b47a2449ef6e12fbf40b4007205d47bc6f986125e7418ce6973e54eeaf325d9539801b065aad7957a98198faa85b57b36cb4a0e96ce4f"], 0x4f)
sendmsg$nl_netfilter(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)={0x20, 0x2, 0x1, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x1, @u64}]}, 0x20}}, 0x0)

15:53:13 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000002c0)=0x2000000000000071, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @multicast2, 0x0, 0x0, 'dh\x00', 0x4, 0x4}, 0x2c)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x500a201}, 0xc, 0x0}, 0x0)
pipe(&(0x7f0000000380)={<r6=>0xffffffffffffffff})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
r9 = accept4$alg(r8, 0x0, 0x0, 0x0)
splice(r6, 0x0, r9, 0x0, 0x1ffffd, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000340)={[0x59c, 0x1, 0x7fffffff, 0x64b, 0x3, 0x8, 0xbb, 0x77, 0x5, 0x1, 0x7f, 0x8000, 0x101, 0xfffffffffffffff7, 0x4, 0x6], 0x6000, 0x804db06e670a37d})
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffd87, 0x6f, 0x1, {0x13b13b13b13b14a1}}, 0x9)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='highspeed\x00\xcb\xa0I\fQt\x83\b\xf6Q\x92\tD\x9f\xfb\xcd<\x96lY\xe5\xa3C\x00\x98\xf8\xc4\'\xa9\xb8\xb6U3=J+|\xe4U\xec#z5\xce\xdf\xdf\xda\xdc\x02\xb3\x8dn\x82\x00\xf7\xa9\xc9\xc7\x04O\xabT\x94\x8c\x8d\x06\xc34\xf8\xd3*\\\x9f\xd6\x8e\\\xdeu\xba\xa5\xe7\xb1\xb4#\xee\x82\xbd\x15\x9b>z\xfc\xee\x87\xc9al\xbe\x03\xa7\xe6\x8aY\xfc\xb5I\x8a\xc3\xd3v\xd0\xcc\x02\xf5\xc8\x84n\xdbF\xe4\xde\x9eF\x98[X>\xfee\xf1?\xea2@\x9e\xdaqi\xec/\xf3V\xa9\xed\xfc\f\xdf{\xa8\x98\xb3\xa6\xca\xf2f\x13\xed\xd0&\x1f\x89\\\x18O\xd1\xec\xa2#N\x83uD\"\xa5|\\!\xe4\x11ie\xd7\xccw\xaa\xea\xee\xdc\x84\xc8Z\xd1\xae\xd5PH\xc5X', 0x40)
readv(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/226, 0xe2}], 0x1)
sendto$inet(r0, &(0x7f0000000300)='\f', 0x1, 0x11, 0x0, 0x0)
setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "29937a5409357b0eca89255ef957f9e0"}, 0x11, 0x5)

15:53:13 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x23, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x21600, 0x3, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffe, 0x0, 0x0, 0x4}, 0x10}, 0x70)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000140)={0x0, {0x6f8, 0x3, 0x8, 0x5, 0x80, 0x7}})
pipe(&(0x7f00000005c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
accept4$alg(r8, 0x0, 0x0, 0x0)
ioctl$SIOCAX25GETINFOOLD(r8, 0x89e9, &(0x7f0000000280))
r9 = accept4$alg(r6, 0x0, 0x0, 0x0)
splice(r4, 0x0, r9, 0x0, 0x1ffffd, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x5)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:13 executing program 4:
r0 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x7f)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0xed, &(0x7f00000007c0)=[{&(0x7f0000000640)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000440)=0x1)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x2040, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000300)=0x1015300, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
splice(r4, 0x0, r7, 0x0, 0x1ffffd, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000001c0)={<r8=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000280)={r8, 0x6})
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaae53, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000000b00000040000080000000000000006d5ebe5a0000ffff53ef", 0x5cf, 0x400}], 0x1, 0x0)

15:53:13 executing program 0 (fault-call:5 fault-nth:23):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  291.863347] FAULT_INJECTION: forcing a failure.
[  291.863347] name failslab, interval 1, probability 0, space 0, times 0
[  291.874796] CPU: 1 PID: 13357 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  291.881737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  291.881744] Call Trace:
[  291.881773]  dump_stack+0x172/0x1f0
[  291.881797]  should_fail.cold+0xa/0x1b
[  291.881817]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  291.881835]  ? lock_downgrade+0x880/0x880
[  291.901282]  __should_failslab+0x121/0x190
[  291.901301]  should_failslab+0x9/0x14
[  291.901321]  kmem_cache_alloc_node_trace+0x274/0x720
[  291.901336]  ? __alloc_skb+0xd5/0x5f0
[  291.901357]  __kmalloc_node_track_caller+0x3d/0x80
[  291.932569]  __kmalloc_reserve.isra.0+0x40/0xf0
[  291.937235]  __alloc_skb+0x10b/0x5f0
[  291.940952]  ? skb_scrub_packet+0x490/0x490
[  291.945291]  ? refcount_add_not_zero_checked+0x240/0x240
[  291.950763]  sock_wmalloc+0xd9/0x120
[  291.954517]  pppol2tp_sendmsg+0x23b/0x6b0
[  291.958686]  ? selinux_socket_sendmsg+0x36/0x40
[  291.963377]  ? pppol2tp_getname+0xd10/0xd10
[  291.967710]  sock_sendmsg+0xd7/0x130
[  291.971433]  ___sys_sendmsg+0x3e2/0x920
[  291.975420]  ? copy_msghdr_from_user+0x430/0x430
[  291.980235]  ? mark_held_locks+0x100/0x100
[  291.984461]  ? kasan_check_read+0x11/0x20
[  291.988617]  ? __might_fault+0x12b/0x1e0
[  291.992683]  ? find_held_lock+0x35/0x130
[  291.996756]  ? __might_fault+0x12b/0x1e0
[  292.000845]  __sys_sendmmsg+0x1bf/0x4e0
[  292.004834]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  292.009166]  ? kasan_check_write+0x14/0x20
[  292.013516]  ? __sb_end_write+0xd9/0x110
[  292.017571]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  292.023100]  ? fput+0x128/0x1a0
[  292.026370]  ? ksys_write+0x1f1/0x2d0
[  292.030167]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  292.034977]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  292.039829]  ? do_syscall_64+0x26/0x620
[  292.043794]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  292.049148]  ? do_syscall_64+0x26/0x620
[  292.053127]  __x64_sys_sendmmsg+0x9d/0x100
[  292.057360]  do_syscall_64+0xfd/0x620
[  292.061167]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  292.066357] RIP: 0033:0x459a59
[  292.069535] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  292.088427] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  292.096134] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  292.103400] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
15:53:14 executing program 5:
timer_create(0xc4a604faffa16f0d, 0x0, &(0x7f0000000040))
exit(0x0)
timer_delete(0x0)

[  292.110662] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  292.117925] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  292.125191] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:14 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="8c2fb08f70aca1f2e24e7dc4636db1607852800ad7239bfbb123065f680fcd8bd0da6e13b662424ccd67943bc81a1d56defee801abbb295542689614ad3cf075062ecc8fff703998f05b4a75cd21c51a0cdf5c1d22ec6c88b2f328c35d2284ce37375165fc7b892d9211b9f2b8d60d65de6a11b376b8379dea0e24d9d54997f9b0c35fdbb691b6a85b1dd235877eaf2c6b56cdebc12feefdd198891969cc07ec80aa29bcc95a7fa0866e97a784c0ac21edab15d06cfb51b0f47e5f4404", 0xbd}, {&(0x7f0000000340)="4520d8c1ee8e08b9ee293229", 0xc}], 0x2}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a40)=""/38, 0x26}, {&(0x7f0000000a80)=""/108, 0x6c}], 0x2}}], 0x2, 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah\x00', 0x5)
sendto$inet(r0, &(0x7f00000012c0)="0b268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xffffffffffffff0e, 0x58, 0x0, 0x90)

15:53:14 executing program 0 (fault-call:5 fault-nth:24):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  292.235062] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  292.284830] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  292.300783] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  292.311532] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  292.333992] FAULT_INJECTION: forcing a failure.
[  292.333992] name failslab, interval 1, probability 0, space 0, times 0
[  292.345333] CPU: 0 PID: 13377 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  292.352272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  292.361639] Call Trace:
[  292.364233]  dump_stack+0x172/0x1f0
[  292.367856]  should_fail.cold+0xa/0x1b
[  292.371735]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  292.376837]  __should_failslab+0x121/0x190
[  292.381070]  should_failslab+0x9/0x14
[  292.384868]  kmem_cache_alloc_node_trace+0x5a/0x720
[  292.389873]  ? __kmalloc_node_track_caller+0x3d/0x80
[  292.394968]  ? rcu_read_lock_sched_held+0x110/0x130
[  292.399978]  ? kmem_cache_alloc_node_trace+0x34f/0x720
[  292.405246]  __kmalloc_node_track_caller+0x3d/0x80
[  292.410189]  __kmalloc_reserve.isra.0+0x40/0xf0
[  292.414851]  pskb_expand_head+0x154/0xe20
[  292.419005]  ? lock_downgrade+0x880/0x880
[  292.423144]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  292.428700]  ? iov_iter_advance+0x261/0xe30
[  292.433017]  l2tp_xmit_skb+0xea8/0x1460
[  292.436989]  pppol2tp_sendmsg+0x4a2/0x6b0
[  292.441301]  ? pppol2tp_getname+0xd10/0xd10
[  292.445625]  sock_sendmsg+0xd7/0x130
[  292.449332]  ___sys_sendmsg+0x3e2/0x920
[  292.453299]  ? copy_msghdr_from_user+0x430/0x430
[  292.458167]  ? mark_held_locks+0x100/0x100
[  292.462481]  ? kasan_check_read+0x11/0x20
[  292.466621]  ? __might_fault+0x12b/0x1e0
[  292.470671]  ? find_held_lock+0x35/0x130
[  292.474725]  ? __might_fault+0x12b/0x1e0
[  292.478793]  __sys_sendmmsg+0x1bf/0x4e0
[  292.482784]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  292.487094]  ? kasan_check_write+0x14/0x20
[  292.491340]  ? __sb_end_write+0xd9/0x110
[  292.495395]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  292.500925]  ? fput+0x128/0x1a0
[  292.504196]  ? ksys_write+0x1f1/0x2d0
[  292.507992]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  292.512736]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  292.517478]  ? do_syscall_64+0x26/0x620
[  292.521444]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  292.526794]  ? do_syscall_64+0x26/0x620
[  292.530761]  __x64_sys_sendmmsg+0x9d/0x100
[  292.535001]  do_syscall_64+0xfd/0x620
[  292.538796]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  292.543987] RIP: 0033:0x459a59
[  292.547169] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  292.566070] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  292.573768] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  292.581036] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  292.588294] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  292.595573] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  292.602828] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:14 executing program 2:
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffed5)
fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x1, 0xffffffffffffffff})
ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f00000008c0)={0x1, 0x0, 0x2080, {0x4, 0x100000, 0x1}, [], "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", "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"})
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000280)={0x34, 0x0, &(0x7f0000000140)})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$KDSKBLED(r1, 0x4b65, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

[  292.664285] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
15:53:14 executing program 0 (fault-call:5 fault-nth:25):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:14 executing program 3:
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r3, 0x8200)
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
splice(r4, 0x0, r7, 0x0, 0x1ffffd, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0xc0506617, &(0x7f0000000000)={{0x0, 0x0, @descriptor="424f5284c1c0a2f4"}, 0x16, [], "ce08d92d41ca85df707eaa10f6314100c9c34344d2a8"})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0, 0xcf}, 0x0)
getresuid(&(0x7f0000004180), 0x0, 0x0)
io_setup(0x40000000008, &(0x7f0000000240)=<r8=>0x0)
io_submit(r8, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x40000}])

15:53:14 executing program 4:
ioctl(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {0x8, 0x1}]}, 0x54, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0xf4, 0x4, 0x8, "d6c6e75f898596ceed90e34bf7d2b797", "edd119bfb6f889e1705663f1b3aa3bad6ef68e2bfe0abf507024d05c29acab36e74756fad5e3812e0e938fabc7dc30151887a969f8a2854f76516099a4f90955fc44e0c211b2773938682e6f5cb46c86ef4b41b67f04839bfc997f398143ee755cf90a30d2d45044f2e48693fc3c3f21dd1ebd6ff6f47b1f54b4f59fb3b4f27d1d04d2f15ede7c9d86c677e21aecc2efb923691141036eca6508873dc4dd59b41fdd7c7d6573352a837f35414c91b80dd18dce2477d500032f7a499d43b716267190eba67d93bc7de14000ee0bbff929ae17f33619876b8cb555128f9ade4f"}, 0xf4, 0x3)

15:53:14 executing program 1:
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
r0 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', <r1=>0x0})
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
splice(r2, 0x0, r5, 0x0, 0x1ffffd, 0x0)
sendmmsg(r2, &(0x7f0000001840)=[{{&(0x7f00000025c0)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x7a3f891d, @local, 0x6}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000140)="c19677a0dbbdd99c9690411b345ea169a1a87868539d0489078afebfcd61602d1a20909459014b534a4cb9363796e5dd993673b7e741651339baedefdf7d4974044ab1c089b1a3d5515eddf9b8eb33476f9b53d50b39b9c41c302269e7596bf4fb4c6b51a1b33c87c6d8a8ff249a4bfd2f6c3bb86825553b5fc0bbfe6d179da602553d48d225fa68e9b78ba68a5aeff0c9fdd60ff22448485f1a48502d0471d30e63c1bde6ff8a9b9f724c3b720359cd356a7c955b4aef0dd5cb07f47db70243241a7919693384af51e312072a0a0274e60f6509b97c246379cfa2070229781d6e086931ab0b0a0c", 0xe8}, {&(0x7f0000000300)="9d9eddb7a601626f2e16e85664118245634f96b425b9358d632029037a2724ab16d27c35ccbdfd12297861d0f87b4c35ca75e1cd65e8153f4d68962e8d6bb3745185b1d75c5eecabe780b4249be2cde09907531570610f6f7114c8ef22d842", 0x5f}, {&(0x7f0000000380)="659abad4dab4ef1872e98294bf21e1e9af2e9b1ed8c6c98639f1a65b49d4223fe71c3c259e45da76a044de0774ac9c6c8d8fe8e12a098928ac5c3040b27144679129e9f0fbf359c64c3300156f08d2feb2aa5c26ab18518cd39d4411ac69ab7dbeb778028c61470ca1ee2be794fc966292ed2a42f0190a55ff1d48b86498a1629d39af69d39fdaf0bd870b6bbdebd9a90048d43a1e9ca7a8eff0428a85674bbe99ae7d6205ab823533b30da0e1ce3e4ea23be012f081606dce606174dbafa90d8abac09b52ca2c7d4a6f0c86ff55aebccb5218e1bac5435171c712547d7e03fe0fa04e0db3", 0xe5}, {&(0x7f0000000280)="91a44e", 0x3}, {&(0x7f0000000480)="c85c812cd282b31890acff8a5d5173dbfbdf1bc687cd247b401068273ae8417a1c89794e5c504c7b8fadf10e8013d6db563f8a19cf4496401a678ac2f8315909a1849f14375cb5329edbc2f48f2ac0abe433526b291e54e1f0cb8dc096ea2ea250c2b0052d33a2bb7c0a6a21855ff369c0bd32fa19f87a81248b4598ba7434155004e8b3b2c46ddd02fa4828b40390942131ae901d977ea98130aa3b7c08746205b900443b05a71c7200ea2670c3f763", 0xb0}, {&(0x7f0000000540)="f011d2102e8fccf137505dd3d5954f306dbde124c29281bfce537fec1c4142a770704b8e85dcab5cdb352c7cd02c6010cddeda156b336001f9c0f0980680b8bf40382847c37ebf76d540e1f784812c762c0e5676e4bb390d9d1242abe04ea514272e35f1e12f7903639be096d72a9194407fbc5b879b6a13e34f5f93574c98bf460b596375f3f17dea89cd49a051370cef01e583e4a9b09618", 0x99}, {&(0x7f0000000600)="ab8e535bfb7224089cb253005dd65c0b59b23748c2cd388ec6f5b9bab098d8a76c87b65c6bda08e891d4eef4edb64480d45270ecce18f1bf43075e7cebf303485755372124d8500a4854a33f263029b02c00afc0977147a007d12e8dda7b2f79b8ca96e2e93436f800e2bf33ea3be0cbca6228ddf516bdeb62ba63693549fcc67e525306a86f49426bcf3370ebb6e87c837fd42fd1b2616499dbdcc8a59499c41d33ca9abf", 0xa5}, {&(0x7f00000006c0)="ef5cf1e70d657ddb72b08000947a56c4ee6c6eafb85fc54842431adbf48f1302f81aeeed1b3ef411e92ff1e0f5391fb6514ffdda64d8778f40e5b44b54dcd1878705e5d920694eb4411418ead828c51fa6c764b8903f064b4c9f60d85bfdb4f5b2e73b55e464715c6d080f7f2e7e263c9849b1de5eae49380639", 0x7a}], 0x8, &(0x7f0000002100)=[{0x6, 0x1, 0x6, "53c3f50104b9bc2683773ec5fd75008c20d714dc89bc12af32d9aa9221751d4c0ceadcf44c59818d83a9241697cf51f0d4945f521ae9b6c62891d25fee23c4aad2ca7a7b9c101dd6f2750b4de0b8492f498b889422f7ed903f10eefffb24a97e1216833a06b96ddc274566185c25ef467c9db42e644c69300ae6ca851745ae09fccad7330ed5c4deceedf0461758d05de051a5497112678b8454ba5ea50015329add92738898d5b3d6947adabd409a2a10522bd6625140c8a493fcacd90f915447bca1f5822a2ff13dbbe807df9910025434f9d45922006f89"}, {0x88, 0x38c, 0x3, "4f38ea4130542c31a05cb44710131f9c7669bcb086424a2d710e21cc8aa29593db8a40ab4f21c2f89b3d38f0bf7d892a36fd24736e2b5c4a87cba715e721448c1e4a8d0f87fc6c165980d7e676180568c663ff3a97fdca039cfc74623be9add4476e6bebee27f2d5674ea55fdf0a78257ce9a53e8c4e9f73"}, {0x28, 0x119, 0x5, "575f927428c2c760b91d430bbddfb1ac23315338"}, {0xc8, 0x10b, 0x1f, "2493effddbb1ed31991cf7e2181fa5c8eac6732817ae90265ba814b2a562806fc5516ea956727a873bb5b9dcaae199accf144516ec7405b5fa68d379c55df50b15f699beba79cee855091cfab46db49ed910165c38f9819df31170cd1ac15769ecb1eef2ce850618e322eb4e14737d35110aaa7e096e46b9478c70d632c663db214cef8d8e96ccd2e67dc93f97477a16df2510c17d3000aabd666ee5b92273e7dc8322b864638456c877a5d9d512627c2b82a861502f0b"}, {0x70, 0x88, 0x2, "753b241e8d8a91c0dd3763c1d36e08177c9923a11879853174ea1c787fda90e0083b34dcb25c9bfee06d8e2149920500000000000000675e7b9bbd9a0b3b037b243c47f23d42fdc93a1afe327b828228afd79d7b2d191063dc3eb2483d6d0ff23528385389d4215e86be2400000000"}, {0xd0, 0x10a, 0xff, "8b2c05860aff77a62049ae96107a97ab97d1e0c427e5a2f73e1a4e270dd05ffd191853b1160bcc59980c4170eedfd0d049e78f5c192f565326875a30c3aa416d8b2458ff44523971adbe0342fc42423a8b26fc9a0d52dc8bd05b8414ab1badd33e681a12698cdf5fd02ca1151abe2618700fe25fcd2f3dd948336fef474d1f1429431de16bcadeee2534c0fd56c268d9c7fb526545059151254b4cbd5bd7d593f08bbfa296a4c23913e6633ce7b8855290b03a4510d30a7ef811c085e001cb34cf1aeb4c5a"}, {0xd8, 0x113, 0x3, "abff7ae54f80bf28dce5984b8a779053a073142874e24082c495ea3924da46861f24243ad865daed57d2482aa17030437741da87185e02f986482cfcb15e552d2202d784603c1a7e9aa08465197f273a6d8103cbda1c37765c43f512176082c93ab89d8dafdd234d3cd03ce7a013e77e46caa55d67d0f7ef7612d255cf42c2effdb27f0014f7f79bf21c8355b1a598b5b51361b153eafcbe257d2b9959c10722d8f36283e6e3513d55dc4297afd9799fe64365eb7cc7e4aa8de70c7f06a4851895c6372f5238e4"}], 0x480}}, {{&(0x7f0000001bc0)=@in6={0xa, 0x4e24, 0x10000, @remote, 0x8}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000cc0)="aad24c126cd6889def08b02c74471c1f6297b70f4f6b51f90ef1e595a17ffc347ad751bb40358c0bacfbf029a705504b02c8f28a2856d28a58101bf4ecc7c05efbf8a5cb117ebe2951f65f7549f9e79e98a955afc381606c31622833dda50cf6d3dcd86885ec234219caa18d2e828900f26a3600fcfab589d5a3ff8a56c61a77b07ecc06f41a69615bd0d28d9ae3aa78125519bac8ed862a7b8385250e23dab36f03f9e73bda56753436e20b8ae67852bc3d271159b582c8f7a38e55294cb9ff63aa712bea95938f0641527ffcb9453c261b705445e06b55a8", 0xd9}, {&(0x7f0000000dc0)="7b3212ab28b453ca4c972d921c43252a4811113deec57c818baa925e4ad11cb32e821c14dc79ecc72e1fea60546f077216ac1eacf4bc3cd9f2cba7b53e04226f528da32c01c264e64d28b38468fe3832b5b5a840515c421c992e5ac0cca952b29181cc4c9d670df71b7a7b1dd7166bf2c97fb84c1e9e8f498e4a92a48d8ede18fb9b8998d8ddb928b94179722cb64229ff117526e11f3754d31db043b020ba427af62d", 0xa3}, {&(0x7f0000001980)="b9b6c024d69b21202e771aa9668d8bd8f2af4777dfff4c95f5acd32002ce9c4c2e7e94b6455972a625f655529a1c8df71b57e935619ea231e84160b8087a2a409e642cd84f234c5dbd0d7d63b93a022f848d6261f2d7841859b301c5f3fedab4cb4e77931d3c92902e6c8bf979dc51861b23c23c0e3f65711367ed380ec4bdeeda7379279cafe19f82c24ce43730758dccd7c3ec45678beec9c97a3885120f78a21f2b2f2083f7d6b3fbe9f174e691ec3e2ccaf8b69b91e805dcb8ce4b6f7881ae7a013875e8e13d959a437f61ab2b12b9a111204ad67a", 0xd7}, {&(0x7f0000000f80)="d30d58631f6ab1fb2017e881ad3eba535f18baeb2f8fed09930b3a8863124ce4a9fc46effe33da77895f295c3ea14a6247cb422f506e62e20c92af2eab3d151b3fdb076286", 0xffffff1d}], 0x4, &(0x7f0000001040)=[{0xd0, 0x114, 0x9, "be9a78f2fbf1fff52276bb9ad9029b62486df9665fa0430d777b6843bf16c3eab9fae460409b5ee26125c74be713d397da69b9cf3678a8cbc24da856a5f396ac3e0554f46f933cfebd98c017b63d8f66ace8df4a6d57fe18b24376487c9d4e658bcb02e4003429fcef935370f5ab0e05e39bdae7b9b66c577b4ba9dd6dc583c075ac2e7fcce8009684c911507a2f2efb9d9c9be4b68bc4f88ad2deb7124eeeca0b3935f4023a249397bfb9fef1c41d60933d2418d9e7c1fb809f45"}, {0xe0, 0x104, 0xd3b4714, "2686cfae0ce00244bbad94763a32478fa3879b45029a513c974c404f73a6e420f5069053dbe31318e0975e667d5d88b08745172fde9af8272600157b324ec0aa2fbed4c407d92f539778321ab53379674f2dfec4d9141089298d30ba32bdf450289b23853a0cf07234d29e1700c0347d8346f6c302bd3a246642ab7e7def87cb0ee39d037914997bda528272034a8157303ee50e0b8f29823adffaa2578d60b654745e89dd5557dfb50ca0492d0c781f3bf1107d720ec840e5ca5e751b185e2e006303916f8a76be4f60f9cd"}, {0xe8, 0x10d, 0x0, "ee23b60779c7d238f044f11e0086fc8ec8280f677c61c043785f3bc03da8559109cbf1ef9dd406630b8d0e4c1ccd7704c8c5c27b6fd2e64bc4fd39cb97fe54e9d5a8ebc04032e8e2218b8d78fdd0e5c1b419fabb51ac1ccc01329c2b975b44bf43f25000779ea75e2ab6c45c03ebf25b4690b1109c4a3741576d7827231f941a8327653baec06e01ca617ae36dd55a00875c67a84492e6518fc9e585cc054f20c3a3348124936f6329c05b1102ddc49dab97e7b0ac8291b8c0baeedca934d334f3cc4d7472f96cf813cb18e8a96ed7977ba03f9be56405"}, {0x60, 0x0, 0x20, "3ca7106d9ee687d8235109e932f9b401d71de7dbacd65709f7281bc87c1243cf8d094139b6922f0f7d4c6bd590b739910e06917a15af38c08f6d6511c891ad29439078505496e954e7cf438bf0"}, {0x110, 0x119, 0xfffffffd, "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"}, {0x78, 0x10f, 0x3ff, "a0c0bb2350b60f7b6a5e459b92842c15d52699d86e099cd17c91a26a8a143bc1d83e5771adfeb2f69e626357a54806109796a028bc3bc2c061089e89f84dd54b690dc8d62ad4b2f97427c6f96d053d1e4327bdafda5a01f2b4835c0e38f8b4d9ded256d9719d"}, {0x98, 0x111, 0x10001, "6bf5b40ef44cb51cad9e612208238150860a6ead6d9cf3259e554c7b4fd1ae6436ae842eefbca2154af30c92126196c216ed2c1da0f5fdc657bb7f5d8c549f043f2c45f65cc8e974d15dfee659e552e16b3fb6b13fed4db9a529d9e75c55de01585d73a47e5004b8def58a701c0a29cd4383ac350c61e689e40d69b0af4dc14da0416867be820d66"}], 0x518}}, {{&(0x7f0000001580)=@rc={0x1f, {0x7f, 0xd5, 0xb2, 0x8, 0x2, 0x5}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001600)="191de8673221c4a549c869b96d21e5bf416404742be8527149", 0x19}, {&(0x7f0000001a80)="f5bfa590a990a4938ff5e9d27da85e5d1be314cf86c8516ae92cb596e89a497e6d0befd26aecfa2f0be2c3b5bd80178f119a493cf1466c29837770277c63e3cc477cb4325495ad0b3082bdee41e5f46fcdae1b05c7ebe8caded0ee50a3f7ffffff5ba73bad4eb6f4d42c5cfe51ffffffffc3c7789abb242fb2d08c12287693c31c72bdd94908470967a4c8b71b8465131d31c892001421f00bc3ff2462e8f6a1799947be90c69afa76544b2f187406dd4049a2b0571fb215d04cdcb412ede1c9025b2effa8bec5fd5ea181e432150b22a69c02cdb8ab832d044aa0373d6d0c6f6a7bf4ae8c5a5efaab43fe2f3e21593bc4b55c0042be6aab27e6c848c414f46ba1d6a79f1e96535e50d5bbab5fcc48abb3506cd8169b77383dc286ae2a76", 0xe7}, {&(0x7f0000001740)="438d2790a9afc944e4da352593d677a3d49f8ee52eb288f82ea65e262a493bff1a4ac899aba7733b650c57a02828054abf50723e6381add1f38f3ae50eecfd6d58cb6b0e3421ec77a7c04efc8eb1aa62cdb42f6ab6893c0f4d40db54a9c4cecb7d81bf13040b88823e75935d3337047e5809584eaecb9aa161147aeeb1e238e30e0d93cb66c155ee779dfef91fd6b193", 0x90}], 0x3}}], 0x3, 0x8000)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)

[  292.831313] FAULT_INJECTION: forcing a failure.
[  292.831313] name failslab, interval 1, probability 0, space 0, times 0
[  292.842622] CPU: 1 PID: 13390 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  292.842652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  292.842658] Call Trace:
[  292.842683]  dump_stack+0x172/0x1f0
[  292.842703]  should_fail.cold+0xa/0x1b
[  292.842718]  ? ipv6_chk_mcast_addr+0x295/0x6f0
[  292.842736]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  292.842754]  ? find_held_lock+0x35/0x130
[  292.842769]  ? ipv6_chk_mcast_addr+0x2cb/0x6f0
[  292.842790]  __should_failslab+0x121/0x190
[  292.842807]  should_failslab+0x9/0x14
[  292.869293]  kmem_cache_alloc+0x47/0x700
[  292.869309]  ? kasan_check_read+0x11/0x20
[  292.869331]  skb_clone+0x156/0x3e0
[  292.869350]  ip6_finish_output2+0x1886/0x2550
[  292.869365]  ? find_held_lock+0x35/0x130
[  292.869380]  ? ip6_mtu+0x2e6/0x460
[  292.869396]  ? ip6_forward_finish+0x4d0/0x4d0
[  292.869413]  ? __lock_is_held+0xb6/0x140
[  292.869434]  ip6_finish_output+0x574/0xbe0
[  292.885974] audit: type=1804 audit(1571586794.990:132): pid=13393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir311334474/syzkaller.tcWq1P/180/bus" dev="sda1" ino=17124 res=1
[  292.887720]  ? ip6_finish_output+0x574/0xbe0
[  292.887742]  ip6_output+0x235/0x7c0
[  292.887764]  ? ip6_finish_output+0xbe0/0xbe0
[  292.891999] audit: type=1804 audit(1571586794.990:133): pid=13393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir311334474/syzkaller.tcWq1P/180/bus" dev="sda1" ino=17124 res=1
[  292.895770]  ? ip6_fragment+0x3770/0x3770
[  292.895794]  ip6_xmit+0xe44/0x2030
[  292.895819]  ? ip6_finish_output2+0x2550/0x2550
[  292.905411] audit: type=1804 audit(1571586794.990:134): pid=13393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir311334474/syzkaller.tcWq1P/180/bus" dev="sda1" ino=17124 res=1
[  292.907541]  ? lock_downgrade+0x880/0x880
[  292.907562]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  292.907583]  ? ip6_append_data+0x320/0x320
[  292.907621]  inet6_csk_xmit+0x2fb/0x5ba
[  292.907635]  ? inet6_csk_update_pmtu+0x190/0x190
[  292.907647]  ? dst_release+0x62/0xb0
[  292.907672]  ? udp6_set_csum+0xe1/0x5a0
[  292.907693]  l2tp_xmit_skb+0x116c/0x1460
[  292.907720]  pppol2tp_sendmsg+0x4a2/0x6b0
[  292.907739]  ? pppol2tp_getname+0xd10/0xd10
[  293.079203]  sock_sendmsg+0xd7/0x130
[  293.079221]  ___sys_sendmsg+0x3e2/0x920
[  293.079240]  ? copy_msghdr_from_user+0x430/0x430
[  293.079262]  ? mark_held_locks+0x100/0x100
[  293.086949]  ? kasan_check_read+0x11/0x20
[  293.086969]  ? __might_fault+0x12b/0x1e0
[  293.086984]  ? find_held_lock+0x35/0x130
[  293.087001]  ? __might_fault+0x12b/0x1e0
[  293.112291]  __sys_sendmmsg+0x1bf/0x4e0
[  293.116284]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  293.120625]  ? kasan_check_write+0x14/0x20
[  293.124895]  ? __sb_end_write+0xd9/0x110
[  293.128968]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  293.134497]  ? fput+0x128/0x1a0
[  293.137765]  ? ksys_write+0x1f1/0x2d0
[  293.141571]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  293.146328]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  293.151218]  ? do_syscall_64+0x26/0x620
[  293.155191]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  293.160570]  ? do_syscall_64+0x26/0x620
[  293.164617]  __x64_sys_sendmmsg+0x9d/0x100
[  293.168853]  do_syscall_64+0xfd/0x620
[  293.172696]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  293.177931] RIP: 0033:0x459a59
[  293.181120] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  293.200015] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  293.207731] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  293.214997] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  293.222331] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
15:53:15 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x1ffffd, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000000c0)={0xf000, 0x7000})
exit(0x0)
r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x414001, 0x100)
ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000})
timer_delete(0x0)

[  293.229604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  293.236903] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:15 executing program 0 (fault-call:5 fault-nth:26):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  293.354116] FAULT_INJECTION: forcing a failure.
[  293.354116] name failslab, interval 1, probability 0, space 0, times 0
[  293.365524] CPU: 0 PID: 13409 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  293.372458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  293.381809] Call Trace:
[  293.384400]  dump_stack+0x172/0x1f0
[  293.388030]  should_fail.cold+0xa/0x1b
[  293.392954]  ? ipv6_chk_mcast_addr+0x295/0x6f0
[  293.397530]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  293.402633]  ? find_held_lock+0x35/0x130
[  293.406698]  ? ipv6_chk_mcast_addr+0x2cb/0x6f0
[  293.411283]  __should_failslab+0x121/0x190
[  293.415506]  should_failslab+0x9/0x14
[  293.419307]  kmem_cache_alloc+0x47/0x700
[  293.423368]  ? kasan_check_read+0x11/0x20
[  293.427508]  skb_clone+0x156/0x3e0
[  293.431039]  ip6_finish_output2+0x1886/0x2550
[  293.435522]  ? find_held_lock+0x35/0x130
[  293.439578]  ? ip6_mtu+0x2e6/0x460
[  293.443125]  ? ip6_forward_finish+0x4d0/0x4d0
[  293.447614]  ? __lock_is_held+0xb6/0x140
[  293.451687]  ip6_finish_output+0x574/0xbe0
[  293.455930]  ? ip6_finish_output+0x574/0xbe0
[  293.460366]  ip6_output+0x235/0x7c0
[  293.464010]  ? ip6_finish_output+0xbe0/0xbe0
[  293.468426]  ? ip6_fragment+0x3770/0x3770
[  293.472591]  ip6_xmit+0xe44/0x2030
[  293.476166]  ? ip6_finish_output2+0x2550/0x2550
[  293.480849]  ? lock_downgrade+0x880/0x880
[  293.484999]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  293.490541]  ? ip6_append_data+0x320/0x320
[  293.494910]  inet6_csk_xmit+0x2fb/0x5ba
[  293.498953]  ? inet6_csk_update_pmtu+0x190/0x190
[  293.503704]  ? dst_release+0x62/0xb0
[  293.507444]  ? udp6_set_csum+0xe1/0x5a0
[  293.511429]  l2tp_xmit_skb+0x116c/0x1460
[  293.515489]  pppol2tp_sendmsg+0x4a2/0x6b0
[  293.519645]  ? pppol2tp_getname+0xd10/0xd10
[  293.523977]  sock_sendmsg+0xd7/0x130
[  293.527686]  ___sys_sendmsg+0x3e2/0x920
[  293.531667]  ? copy_msghdr_from_user+0x430/0x430
[  293.536441]  ? mark_held_locks+0x100/0x100
[  293.540692]  ? kasan_check_read+0x11/0x20
[  293.544842]  ? __might_fault+0x12b/0x1e0
[  293.548907]  ? find_held_lock+0x35/0x130
[  293.552971]  ? __might_fault+0x12b/0x1e0
[  293.557043]  __sys_sendmmsg+0x1bf/0x4e0
[  293.561008]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  293.565319]  ? kasan_check_write+0x14/0x20
[  293.569560]  ? __sb_end_write+0xd9/0x110
[  293.573618]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  293.579143]  ? fput+0x128/0x1a0
[  293.582411]  ? ksys_write+0x1f1/0x2d0
[  293.586201]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  293.590967]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  293.595735]  ? do_syscall_64+0x26/0x620
[  293.599706]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
15:53:15 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffff162e6405bf93e6ccffc99701a400000000006504ffff010000100404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e172606fe530cb7d7f933eda02ba18ad181867514fe60077d4dd90123d3ee7cf43548ee858e07dfbdfd4e7540ebec677d6ac14c2c794f72cbf5fe31789e70233bfd8115efd90b0c48258f8dbe82e16cf8db95f5b068a9e0000000000000000000000000000000000000000000000000000000000000018287ba7d8807cf077cc420efca6785deb269d0a91985602763e0d70d40424006a3d6eef8fb7fcdd82eb1e4841517fa421cf10a2c4ad05fafb2476059cdc6809af64a35114bc07abd9da28a90ab8ddaccb9c197946c12c77cef24ecf7433b5ac7bbcb6c355b2dfeca73930c32f9056b248ab194a46192904eddc26ce804622202928e20e470df9784b5dc8000e58beef722261adffa906bcb578f6984e247c8c6dab27407a86280995d12b56fa9210b36ed50c67ef158963ec9ac3bd63d351a442623f1df0ba6c196735c624f7b6c15ebc2995a622db34a5999d428b3c93820c6e153ba42337bedf5a5f862f73ff536538587a54f903f6e9b9cdfd7999e875ddad3a0d51813b7b9e9e3d6c371df6e90c33b10b4993e81175715c0b9568fcd7c6df27be722e8c6b8b178ad0e5875442f41b6afb2288fe1bd47f4bc2465ea92644d3a5b7a401e5cd3e4b8bb5cac93a020f73877abba8b6f71d5fd1b6f56b0ff2d284e5a790ba68fb6caff8fa55c6b37e7670214c06ab3aaaa5036f317aa2574c143f35c648ef424cc0eb8e6c9e944509735d7b9feb94e8627144c247b1d5b51c094248708551145045327ac45fff3b633db38d4752d513fc47549a805bdbebdea02dadd1d1400115dd28c3b8f9cb9662d0f74b46b9b145dcdbfaed67cf6bc037d747b9b847bbbade8751977945529ca9b888a3304863952f3e6ba9473576370c063667a29f2c8c02f4c808ee07ed882f28694a4c97"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

[  293.605077]  ? do_syscall_64+0x26/0x620
[  293.609846]  __x64_sys_sendmmsg+0x9d/0x100
[  293.614088]  do_syscall_64+0xfd/0x620
[  293.617912]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  293.623109] RIP: 0033:0x459a59
[  293.626307] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  293.645216] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  293.652917] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  293.660181] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  293.667454] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  293.674725] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  293.682009] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
[  293.700220] audit: type=1804 audit(1571586795.850:135): pid=13393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir311334474/syzkaller.tcWq1P/180/bus" dev="sda1" ino=17124 res=1
[  293.745181] audit: type=1804 audit(1571586795.850:136): pid=13396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir311334474/syzkaller.tcWq1P/180/bus" dev="sda1" ino=17124 res=1
15:53:16 executing program 3:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_script(r3, &(0x7f0000000380)=ANY=[], 0xfffffed5)
write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x9)

[  293.814043] audit: type=1804 audit(1571586795.880:137): pid=13393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir311334474/syzkaller.tcWq1P/180/bus" dev="sda1" ino=17124 res=1
[  293.814601] overlayfs: conflicting lowerdir path
15:53:16 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x1ffffd, 0x0)
ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f00000003c0)={{0x0, 0x3000, 0x3, 0x5, 0x3f, 0x26, 0x1, 0x3, 0x32, 0x6, 0x9, 0x20}, {0x0, 0x1000, 0x9, 0x81, 0x1, 0x3, 0x4, 0x3, 0x1f, 0x2, 0x74, 0x9}, {0x10000, 0x1000, 0xb, 0x7f, 0x9, 0x7, 0x81, 0x4, 0x2, 0x5, 0x6, 0x2}, {0x2000, 0x8, 0xf, 0x81, 0x1, 0x4, 0x0, 0x9, 0x1, 0x3f, 0x3f, 0x5}, {0xd000, 0x3000, 0xd, 0x20, 0x67, 0x1, 0x20, 0xb4, 0x7, 0x8, 0x81, 0x9}, {0x1, 0x3000, 0xe, 0x4, 0x7f, 0x6, 0x7, 0x0, 0xaa, 0x81, 0x3, 0x40}, {0x4, 0x0, 0xe, 0x1, 0x7f, 0x6, 0x0, 0x81, 0x5, 0xc2, 0x6, 0x3}, {0xf000, 0xf000, 0xb, 0x4, 0xff, 0xf8, 0x58, 0x8, 0x0, 0x9, 0x80, 0x2}, {0x2, 0x100000}, {0x0, 0x7b8b14ee7e88082c}, 0x40000, 0x0, 0x4, 0x80, 0xc, 0x1c801, 0x1b001, [0x1, 0x0, 0x4, 0xfffffffffffffffb]})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:16 executing program 0 (fault-call:5 fault-nth:27):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  293.889694] overlayfs: workdir and upperdir must reside under the same mount
15:53:16 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
splice(r2, 0x0, r5, 0x0, 0x1ffffd, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
accept4$alg(r7, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_script(r8, &(0x7f0000000380)=ANY=[], 0xfffffed5)
pipe(&(0x7f0000000380)={<r9=>0xffffffffffffffff})
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r11 = accept4(r10, 0x0, 0x0, 0x0)
r12 = accept4$alg(r11, 0x0, 0x0, 0x0)
splice(r9, 0x0, r12, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={<r13=>0xffffffffffffffff})
r14 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r14, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r15 = accept4(r14, 0x0, 0x0, 0x0)
r16 = accept4$alg(r15, 0x0, 0x0, 0x0)
splice(r13, 0x0, r16, 0x0, 0x1ffffd, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfd, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES16=r0, @ANYPTR=&(0x7f0000000240)=ANY=[]], @ANYPTR, @ANYRES32=0x6, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=r13, @ANYRESOCT, @ANYRES32=r4, @ANYRES64=r0]]], 0x5}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)

15:53:16 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x204800, 0x0)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x198, &(0x7f0000000000)=[{0x2, 0x7, 0x9, 0x5}, {0x6, 0x8, 0x1, 0x14}]})
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
dup2(r3, r0)

15:53:16 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
splice(r2, 0x0, r5, 0x0, 0x1ffffd, 0x0)
ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000180)=""/129)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r6 = accept4(r1, 0x0, 0x0, 0x0)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2b, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
splice(r0, 0x0, r7, 0x0, 0x1ffffd, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000040)={0x2, 0x1})
exit(0x0)
timer_delete(0x0)

[  294.060436] FAULT_INJECTION: forcing a failure.
[  294.060436] name failslab, interval 1, probability 0, space 0, times 0
[  294.077388] CPU: 0 PID: 13431 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  294.084363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  294.093827] Call Trace:
[  294.096429]  dump_stack+0x172/0x1f0
[  294.100085]  should_fail.cold+0xa/0x1b
[  294.103980]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  294.109078]  ? lock_downgrade+0x880/0x880
[  294.113249]  __should_failslab+0x121/0x190
[  294.117501]  should_failslab+0x9/0x14
[  294.121419]  kmem_cache_alloc_node+0x26c/0x710
[  294.126027]  __alloc_skb+0xd5/0x5f0
[  294.130007]  ? skb_scrub_packet+0x490/0x490
[  294.134376]  ? refcount_add_not_zero_checked+0x240/0x240
[  294.139839]  sock_wmalloc+0xd9/0x120
[  294.143553]  pppol2tp_sendmsg+0x23b/0x6b0
[  294.147695]  ? selinux_socket_sendmsg+0x36/0x40
[  294.152359]  ? pppol2tp_getname+0xd10/0xd10
[  294.156684]  sock_sendmsg+0xd7/0x130
[  294.160410]  ___sys_sendmsg+0x3e2/0x920
[  294.164394]  ? copy_msghdr_from_user+0x430/0x430
[  294.169153]  ? mark_held_locks+0x100/0x100
[  294.173377]  ? kasan_check_read+0x11/0x20
[  294.177639]  ? __might_fault+0x12b/0x1e0
[  294.181761]  ? find_held_lock+0x35/0x130
[  294.185828]  ? __might_fault+0x12b/0x1e0
[  294.189901]  __sys_sendmmsg+0x1bf/0x4e0
[  294.193868]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  294.198195]  ? kasan_check_write+0x14/0x20
[  294.202502]  ? __sb_end_write+0xd9/0x110
[  294.206579]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  294.212124]  ? fput+0x128/0x1a0
[  294.215405]  ? ksys_write+0x1f1/0x2d0
[  294.219212]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  294.223970]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  294.228718]  ? do_syscall_64+0x26/0x620
[  294.232681]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  294.238052]  ? do_syscall_64+0x26/0x620
[  294.242029]  __x64_sys_sendmmsg+0x9d/0x100
[  294.246270]  do_syscall_64+0xfd/0x620
[  294.250072]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  294.255319] RIP: 0033:0x459a59
[  294.258506] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  294.277417] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  294.285137] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  294.292404] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  294.299682] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  294.306962] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  294.314241] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:16 executing program 0 (fault-call:5 fault-nth:28):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:16 executing program 4:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev, 0x20000}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f00000001c0)=0xffffffff, 0x4)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r7 = accept4(r5, 0x0, 0x0, 0x0)
r8 = accept4$alg(r7, 0x0, 0x0, 0x0)
splice(r4, 0x0, r8, 0x0, 0x1ffffd, 0x0)
fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140)=0x4, 0x4)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4)

[  294.442008] FAULT_INJECTION: forcing a failure.
[  294.442008] name failslab, interval 1, probability 0, space 0, times 0
[  294.456523] CPU: 1 PID: 13447 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  294.463483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  294.472847] Call Trace:
[  294.475444]  dump_stack+0x172/0x1f0
[  294.479079]  should_fail.cold+0xa/0x1b
[  294.482983]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  294.488213]  ? lock_downgrade+0x880/0x880
[  294.492379]  __should_failslab+0x121/0x190
[  294.496634]  should_failslab+0x9/0x14
[  294.502522]  kmem_cache_alloc_node_trace+0x274/0x720
[  294.507625]  ? __alloc_skb+0xd5/0x5f0
[  294.511419]  __kmalloc_node_track_caller+0x3d/0x80
[  294.516440]  __kmalloc_reserve.isra.0+0x40/0xf0
[  294.521120]  __alloc_skb+0x10b/0x5f0
[  294.524837]  ? skb_scrub_packet+0x490/0x490
[  294.529169]  ? refcount_add_not_zero_checked+0x240/0x240
[  294.534645]  sock_wmalloc+0xd9/0x120
[  294.538375]  pppol2tp_sendmsg+0x23b/0x6b0
[  294.542524]  ? selinux_socket_sendmsg+0x36/0x40
[  294.547205]  ? pppol2tp_getname+0xd10/0xd10
[  294.551517]  sock_sendmsg+0xd7/0x130
[  294.555234]  ___sys_sendmsg+0x3e2/0x920
[  294.559215]  ? copy_msghdr_from_user+0x430/0x430
[  294.563964]  ? mark_held_locks+0x100/0x100
[  294.568188]  ? kasan_check_read+0x11/0x20
[  294.572340]  ? __might_fault+0x12b/0x1e0
[  294.576410]  ? find_held_lock+0x35/0x130
[  294.580466]  ? __might_fault+0x12b/0x1e0
[  294.584550]  __sys_sendmmsg+0x1bf/0x4e0
[  294.588526]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  294.592852]  ? kasan_check_write+0x14/0x20
[  294.597097]  ? __sb_end_write+0xd9/0x110
[  294.601167]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  294.606709]  ? fput+0x128/0x1a0
[  294.609998]  ? ksys_write+0x1f1/0x2d0
[  294.613801]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  294.618556]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  294.624287]  ? do_syscall_64+0x26/0x620
[  294.628264]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  294.633618]  ? do_syscall_64+0x26/0x620
[  294.637591]  __x64_sys_sendmmsg+0x9d/0x100
[  294.641816]  do_syscall_64+0xfd/0x620
[  294.645639]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  294.650838] RIP: 0033:0x459a59
[  294.654032] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  294.672940] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  294.680658] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
15:53:16 executing program 0 (fault-call:5 fault-nth:29):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  294.687927] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  294.695181] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  294.702438] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  294.709700] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r0 = socket$inet(0x15, 0x5, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r4, 0x0, 0x1ffffd, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000140)={0x5, {{0x2, 0x4e22, @loopback}}}, 0x88)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x8}, 0x10)

[  294.795185] FAULT_INJECTION: forcing a failure.
[  294.795185] name failslab, interval 1, probability 0, space 0, times 0
[  294.806522] CPU: 0 PID: 13456 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  294.813464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  294.822867] Call Trace:
[  294.825457]  dump_stack+0x172/0x1f0
[  294.829096]  should_fail.cold+0xa/0x1b
[  294.832992]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  294.839728]  __should_failslab+0x121/0x190
15:53:17 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x3a, @local, 0x4e24, 0x0, 'ovf\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xf3\xff\xff', 0x0, 0x20, 0x1a}, 0x344)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")

15:53:17 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x14, r2, 0xe87a52239f974ee5, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x14, r4, 0xe87a52239f974ee5, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x9c, r4, 0x9e03c66c0a22689a, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7fffffff, @mcast2, 0x100}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x181, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x47ce, @empty, 0x200}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

[  294.843984]  should_failslab+0x9/0x14
[  294.847798]  kmem_cache_alloc_node_trace+0x5a/0x720
[  294.852911]  ? __kmalloc_node_track_caller+0x3d/0x80
[  294.858029]  ? rcu_read_lock_sched_held+0x110/0x130
[  294.863060]  ? kmem_cache_alloc_node_trace+0x34f/0x720
[  294.868360]  __kmalloc_node_track_caller+0x3d/0x80
[  294.873304]  __kmalloc_reserve.isra.0+0x40/0xf0
[  294.878076]  pskb_expand_head+0x154/0xe20
[  294.882237]  ? lock_downgrade+0x880/0x880
[  294.886396]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  294.891949]  ? iov_iter_advance+0x261/0xe30
[  294.896278]  l2tp_xmit_skb+0xea8/0x1460
[  294.900261]  pppol2tp_sendmsg+0x4a2/0x6b0
[  294.904412]  ? pppol2tp_getname+0xd10/0xd10
[  294.908724]  sock_sendmsg+0xd7/0x130
[  294.912437]  ___sys_sendmsg+0x3e2/0x920
[  294.916415]  ? copy_msghdr_from_user+0x430/0x430
[  294.921179]  ? mark_held_locks+0x100/0x100
[  294.925413]  ? kasan_check_read+0x11/0x20
[  294.929554]  ? __might_fault+0x12b/0x1e0
[  294.933616]  ? find_held_lock+0x35/0x130
[  294.937672]  ? __might_fault+0x12b/0x1e0
[  294.941741]  __sys_sendmmsg+0x1bf/0x4e0
[  294.945726]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  294.950093]  ? kasan_check_write+0x14/0x20
[  294.954325]  ? __sb_end_write+0xd9/0x110
[  294.958379]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  294.963903]  ? fput+0x128/0x1a0
[  294.967187]  ? ksys_write+0x1f1/0x2d0
[  294.971040]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  294.975872]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  294.980613]  ? do_syscall_64+0x26/0x620
[  294.984593]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  294.989943]  ? do_syscall_64+0x26/0x620
[  294.993911]  __x64_sys_sendmmsg+0x9d/0x100
[  294.998163]  do_syscall_64+0xfd/0x620
[  295.001978]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  295.007168] RIP: 0033:0x459a59
[  295.010367] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  295.029361] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  295.037106] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  295.044380] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  295.051660] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  295.058942] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  295.066204] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:17 executing program 0 (fault-call:5 fault-nth:30):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:17 executing program 1:
socket$inet6(0xa, 0x400000000001, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fstat(0xffffffffffffffff, &(0x7f00000002c0))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
kexec_load(0x0, 0x10, &(0x7f0000000080)=[{0x0}], 0x0)
timer_create(0x5, &(0x7f0000000280)={0x0, 0x35, 0x2, @thr={&(0x7f0000000100)="9686", &(0x7f0000000200)="92bbea5ec36103c21a2048c11b3989d0f0051a889dbfc1f063df0bd8abb7a21be83714d1c8af41f7ddb641b69b1f806068a07b32e44e0e7221aff4d3f0a202be79ddb5d1b194b0e1995db041973700907132ff8877e596adb6ce17e56ecc0e05e0793198b6d9804809cd59d5c2fd7d733cb95be97707"}}, &(0x7f0000000540)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000300)={{0x77359400}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0)
write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8)
r2 = socket$inet(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x20000800, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37)
r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0x0)
write$vnet(r3, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xcf, 0x0, 0x0, 0x2402}}, 0x68)
write$vnet(r3, &(0x7f0000000040)={0x1, {&(0x7f0000000440)=""/211, 0xd3, 0x0, 0x3, 0x2}}, 0x68)
write$vnet(r3, &(0x7f0000000140)={0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x68)
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f00000000c0)={0x3f, 0x400, 0x1ff, 0x4, 0x7})
ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x4000020)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r1, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$sg(0x0, 0x0, 0x82)
dup3(r4, 0xffffffffffffffff, 0x0)

[  295.248029] FAULT_INJECTION: forcing a failure.
[  295.248029] name failslab, interval 1, probability 0, space 0, times 0
[  295.259312] CPU: 1 PID: 13473 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  295.266247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  295.275609] Call Trace:
[  295.278217]  dump_stack+0x172/0x1f0
[  295.281868]  should_fail.cold+0xa/0x1b
[  295.285769]  ? ipv6_chk_mcast_addr+0x295/0x6f0
[  295.290362]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  295.295474]  ? find_held_lock+0x35/0x130
[  295.299543]  ? ipv6_chk_mcast_addr+0x2cb/0x6f0
[  295.304139]  __should_failslab+0x121/0x190
[  295.308382]  should_failslab+0x9/0x14
[  295.312201]  kmem_cache_alloc+0x47/0x700
[  295.316265]  ? kasan_check_read+0x11/0x20
[  295.320435]  skb_clone+0x156/0x3e0
[  295.323991]  ip6_finish_output2+0x1886/0x2550
[  295.328496]  ? find_held_lock+0x35/0x130
[  295.332565]  ? ip6_mtu+0x2e6/0x460
[  295.336119]  ? ip6_forward_finish+0x4d0/0x4d0
[  295.340713]  ? __lock_is_held+0xb6/0x140
15:53:17 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x23, &(0x7f0000000040)={0x6, 0x2, 0xfffffffffffffffe, 0x5, r1})
r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'Ryz'}, 0x0, 0x0, r2)
keyctl$get_persistent(0x16, 0x0, 0x0)
keyctl$clear(0x7, r3)
request_key(0x0, 0x0, 0x0, r3)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14)

[  295.344799]  ip6_finish_output+0x574/0xbe0
[  295.349043]  ? ip6_finish_output+0x574/0xbe0
[  295.353637]  ip6_output+0x235/0x7c0
[  295.357275]  ? ip6_finish_output+0xbe0/0xbe0
[  295.361782]  ? ip6_fragment+0x3770/0x3770
[  295.365949]  ip6_xmit+0xe44/0x2030
[  295.369512]  ? ip6_finish_output2+0x2550/0x2550
[  295.374190]  ? lock_downgrade+0x880/0x880
[  295.378350]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  295.383905]  ? ip6_append_data+0x320/0x320
[  295.388172]  inet6_csk_xmit+0x2fb/0x5ba
[  295.392162]  ? inet6_csk_update_pmtu+0x190/0x190
[  295.396958]  ? dst_release+0x62/0xb0
[  295.401380]  ? udp6_set_csum+0xe1/0x5a0
[  295.405375]  l2tp_xmit_skb+0x116c/0x1460
[  295.405405]  pppol2tp_sendmsg+0x4a2/0x6b0
[  295.413691]  ? pppol2tp_getname+0xd10/0xd10
[  295.413713]  sock_sendmsg+0xd7/0x130
[  295.413730]  ___sys_sendmsg+0x3e2/0x920
[  295.413748]  ? copy_msghdr_from_user+0x430/0x430
[  295.413771]  ? mark_held_locks+0x100/0x100
[  295.434746]  ? kasan_check_read+0x11/0x20
[  295.438914]  ? __might_fault+0x12b/0x1e0
[  295.442982]  ? find_held_lock+0x35/0x130
[  295.447050]  ? __might_fault+0x12b/0x1e0
[  295.451150]  __sys_sendmmsg+0x1bf/0x4e0
[  295.455146]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  295.459475]  ? kasan_check_write+0x14/0x20
[  295.463705]  ? __sb_end_write+0xd9/0x110
[  295.467759]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  295.473283]  ? fput+0x128/0x1a0
[  295.476551]  ? ksys_write+0x1f1/0x2d0
[  295.480342]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  295.485088]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  295.489829]  ? do_syscall_64+0x26/0x620
[  295.493804]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  295.499162]  ? do_syscall_64+0x26/0x620
[  295.503144]  __x64_sys_sendmmsg+0x9d/0x100
[  295.507395]  do_syscall_64+0xfd/0x620
[  295.511213]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  295.516396] RIP: 0033:0x459a59
[  295.519586] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  295.538493] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
15:53:17 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0)
r0 = syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))
write$vnet(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
syz_mount_image$jfs(&(0x7f0000003200)='jfs\x00', &(0x7f0000003240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003840)=ANY=[@ANYBLOB='quota,\b'])
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[  295.546253] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  295.553522] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  295.560787] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  295.568079] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  295.575342] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:17 executing program 5:
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4)
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
timer_delete(0x0)

15:53:17 executing program 0 (fault-call:5 fault-nth:31):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  295.880866] FAULT_INJECTION: forcing a failure.
[  295.880866] name failslab, interval 1, probability 0, space 0, times 0
[  295.893470] CPU: 1 PID: 13488 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  295.900405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  295.909764] Call Trace:
[  295.912378]  dump_stack+0x172/0x1f0
[  295.916021]  should_fail.cold+0xa/0x1b
[  295.919903]  ? ipv6_chk_mcast_addr+0x295/0x6f0
[  295.924480]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  295.929574]  ? find_held_lock+0x35/0x130
[  295.933626]  ? ipv6_chk_mcast_addr+0x2cb/0x6f0
[  295.938219]  __should_failslab+0x121/0x190
[  295.942442]  should_failslab+0x9/0x14
[  295.946250]  kmem_cache_alloc+0x47/0x700
[  295.950318]  ? kasan_check_read+0x11/0x20
[  295.954482]  skb_clone+0x156/0x3e0
[  295.958026]  ip6_finish_output2+0x1886/0x2550
[  295.962512]  ? find_held_lock+0x35/0x130
[  295.966565]  ? ip6_mtu+0x2e6/0x460
[  295.970097]  ? ip6_forward_finish+0x4d0/0x4d0
[  295.974586]  ? __lock_is_held+0xb6/0x140
[  295.978646]  ip6_finish_output+0x574/0xbe0
[  295.982875]  ? ip6_finish_output+0x574/0xbe0
[  295.987279]  ip6_output+0x235/0x7c0
[  295.990895]  ? ip6_finish_output+0xbe0/0xbe0
[  295.995295]  ? ip6_fragment+0x3770/0x3770
[  295.999453]  ip6_xmit+0xe44/0x2030
[  296.003092]  ? ip6_finish_output2+0x2550/0x2550
[  296.007773]  ? perf_trace_lock+0x510/0x510
[  296.012009]  ? ip6_append_data+0x320/0x320
[  296.016253]  inet6_csk_xmit+0x2fb/0x5ba
[  296.020229]  ? inet6_csk_update_pmtu+0x190/0x190
[  296.024981]  ? dst_release+0x62/0xb0
[  296.028699]  ? udp6_set_csum+0xe1/0x5a0
[  296.032669]  l2tp_xmit_skb+0x116c/0x1460
[  296.036732]  pppol2tp_sendmsg+0x4a2/0x6b0
[  296.040875]  ? pppol2tp_getname+0xd10/0xd10
[  296.045192]  sock_sendmsg+0xd7/0x130
[  296.048897]  ___sys_sendmsg+0x3e2/0x920
[  296.052864]  ? copy_msghdr_from_user+0x430/0x430
[  296.057615]  ? mark_held_locks+0x100/0x100
[  296.061842]  ? debug_smp_processor_id+0x1c/0x20
[  296.066499]  ? perf_trace_lock_acquire+0xf5/0x580
[  296.071339]  ? __might_fault+0x12b/0x1e0
[  296.075396]  ? find_held_lock+0x35/0x130
[  296.079448]  ? __might_fault+0x12b/0x1e0
[  296.083517]  __sys_sendmmsg+0x1bf/0x4e0
[  296.087485]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  296.091801]  ? kasan_check_write+0x14/0x20
[  296.096036]  ? __sb_end_write+0xd9/0x110
[  296.100090]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  296.105613]  ? fput+0x128/0x1a0
[  296.108898]  ? ksys_write+0x1f1/0x2d0
[  296.112694]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  296.117459]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  296.122215]  ? do_syscall_64+0x26/0x620
[  296.126184]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  296.131535]  ? do_syscall_64+0x26/0x620
[  296.135503]  __x64_sys_sendmmsg+0x9d/0x100
[  296.139732]  do_syscall_64+0xfd/0x620
[  296.143524]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  296.148702] RIP: 0033:0x459a59
[  296.151896] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  296.171235] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  296.178940] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  296.186202] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  296.193472] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  296.200732] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  296.208016] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:18 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000002, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000)='\x00', 0xffffffffffffff7f, 0x8000204087ffd, 0x0, 0x138)
recvfrom$inet(r0, 0x0, 0xffffffffffffffda, 0x10120, 0x0, 0xffffffffffffff73)

[  296.227186] jfs: Unrecognized mount option "" or missing value
15:53:18 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0xffffffffffffffb0, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0xcc2, 0x0, 0x0, 0x0, &(0x7f0000000100)="4ea9d8748d8483b05ca0b90b0fe04bd5fccc9787cd321074ff2e9ed03b790c9e0c8287e26e45e80b5bbd06ff24518e435a1941eca70b464cac026b35b54ea5e1841e93784c58e93bd6ce299e11899fbd7ac4d8de3057abf048add198200dd873b2a4a9220aaf424f686e28dc8a5e28", &(0x7f0000000100)}, 0x40)

15:53:18 executing program 3:
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xa)
setreuid(0x0, r1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
r3 = shmget(0x0, 0x1000, 0x54000824, &(0x7f0000ffe000/0x1000)=nil)
shmctl$SHM_UNLOCK(r3, 0xc)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = fcntl$dupfd(r4, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000))
r7 = syz_open_pts(r2, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000200)=0x2)

[  296.321043] jfs: Unrecognized mount option "" or missing value
15:53:18 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/sequencer\x00', 0x200, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000a80)={0x0, 0x8, 0x4, 0x80, <r2=>0x0}, &(0x7f0000000ac0)=0x10)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000480)={r5, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x98)
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000b00)={r2, 0x0, 0x401, 0x7ff, 0x9, 0x9ec2, 0x1ff, 0x42d6, {r5, @in6={{0xa, 0x4e20, 0x8, @mcast1, 0x9}}, 0xc7, 0x1f, 0x5, 0xc8, 0x8000}}, &(0x7f0000000bc0)=0xb0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:18 executing program 1:
syz_emit_ethernet(0x13a, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
pipe2(0x0, 0x0)
pipe2$9p(0x0, 0x4000)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
getpgid(0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x101680, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3)
r1 = syz_open_dev$dspn(&(0x7f0000000780)='/dev/dsp#\x00', 0x0, 0x40)
sendfile(r0, r1, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2)
r4 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x17f)
recvmsg$kcm(r4, 0x0, 0x0)
r5 = dup2(r4, r3)
bind$alg(r5, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58)
socket$nl_generic(0x10, 0x3, 0x10)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0)
r6 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x17f)
ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000500)=0x7)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)

15:53:18 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300090069000007a2e407edab0480582900000046008107a277001419000a00100047fc1f99fd5890253768070000000003f50000", 0x39}], 0x1)

15:53:18 executing program 0 (fault-call:5 fault-nth:32):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:18 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x2200000088)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000001c0)={0x1, 0x6, 0xe8})
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r3, &(0x7f0000000540)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r2, 0x0, 0x0, 0x0)
accept4$alg(r4, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0xbd13ffc220b6924d, @rand_addr=0x7, 0x4e21, 0x800003, 'nq\x00', 0x1, 0x401, 0x4d}, 0x2c)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x1004e20, @empty}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="918d226dc16b0e63fb6c3cd445ccd7ebea81807d3cd23e14de596602da9faf12b579357d4e1e6b19caf3ca857cfba459c4548628130ec0593ec9c1e72834160e74fda5bec9f9215dd5a12161e11ca47436c11f3f07a26924528f43c6c73f9e4c4ade58a27ac2dcd8755afa32db8cd388443d9e685a7963077dba2c85d77c6d4987525654401d6105d8", 0x89}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="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", 0x1000}], 0x3, 0x0, 0x0, 0x8000}, 0x2000)
sendto$inet(r0, 0x0, 0xfffffffffffffdd5, 0x8084, &(0x7f0000000080)={0x2, 0x4e20}, 0x4)
setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000c00)=0x2, 0x4)
recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
mq_open(&(0x7f00000000c0)='crc32-generic\x00', 0x2, 0x21, &(0x7f0000000180)={0x1, 0x2, 0x2, 0x4, 0x1f920000000000, 0xfffffffffffffffe, 0x8, 0x5})
socket$inet6_udp(0xa, 0x2, 0x0)

[  296.588644] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  296.643373] FAULT_INJECTION: forcing a failure.
[  296.643373] name failslab, interval 1, probability 0, space 0, times 0
15:53:18 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15)
r2 = dup(r1)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
splice(r3, 0x0, r6, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r10 = accept4(r9, 0x0, 0x0, 0x0)
r11 = accept4$alg(r10, 0x0, 0x0, 0x0)
splice(r7, 0x0, r11, 0x0, 0x1ffffd, 0x0)
getpeername$packet(r7, &(0x7f0000003480)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000034c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000003fc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003f80)={&(0x7f0000003500)=@deltfilter={0xa6c, 0x2d, 0x72f, 0x70bd25, 0x25dfdbfd, {0x0, r12, {0xffff, 0x4}, {0xffe0, 0xfff2}, {0xffe0, 0x3}}, [@filter_kind_options=@f_matchall={{0x10, 0x1, 'matchall\x00'}, {0x4e4, 0x2, [@TCA_MATCHALL_ACT={0x4d8, 0x2, @m_police={0x4d4, 0x1d, {{0xc, 0x1, 'police\x00'}, {0x410, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x101, 0x400, 0x2, 0x8, 0x3, 0x3ff, 0x2aac1833, 0x81, 0x9, 0x7f, 0x2, 0x4, 0x7fff, 0x80, 0x80000001, 0x6, 0x3e, 0x1, 0x0, 0x1000, 0x7, 0x8, 0x841, 0x800, 0x26a39513, 0xe4ff, 0x4, 0x10001, 0x3, 0x3, 0x1, 0x1, 0x9, 0x1, 0x5, 0x401, 0x0, 0x2, 0x200, 0x7c6f41b2, 0x4, 0x10001, 0x2, 0x3, 0x1f, 0x40, 0x8001, 0x2, 0x7, 0xf73, 0x0, 0xffffffff, 0xfffff9f3, 0x400, 0x7, 0x7fff, 0x7, 0x7, 0x3, 0x1f, 0x80, 0xc7, 0x4, 0x2, 0x0, 0x1ff, 0x7d, 0x7, 0x2, 0x7ff, 0x1, 0x7fffffff, 0x0, 0x40, 0x8f43, 0x400, 0x81, 0x6, 0x3fd, 0x7fff, 0x4e, 0xfdd5, 0xfc9d, 0x101, 0x5, 0x8, 0x676, 0xfff, 0x8001, 0x316, 0xfff00000, 0x5, 0x10000, 0x80, 0x4000000, 0x7fffffff, 0x7ff, 0x1f, 0x9, 0x1ff, 0x6, 0x40, 0x92, 0xfffffffe, 0x1, 0x8, 0xc5d1a64c, 0x4, 0x2000000, 0x62f4, 0x1, 0x6, 0x3e, 0x0, 0x5, 0x101, 0x8b77, 0x7fff, 0x8, 0x4, 0x0, 0x1, 0x652, 0x800, 0x5, 0x2913, 0x4, 0x7, 0x100, 0xa624, 0xfffffc00, 0x7b, 0x80000001, 0x7fff, 0xfffffff8, 0x832b, 0xadce, 0x1000, 0x5, 0x2, 0x1000, 0xffffffff, 0x8, 0x7fffffff, 0x5, 0xb884, 0x4, 0x3f, 0x78, 0x7ff, 0x0, 0xffffffc8, 0x0, 0x8, 0x1c5, 0x5, 0xfffffffd, 0x1ff, 0x0, 0x8, 0x7, 0xae, 0x800, 0x200, 0x8, 0xec3b, 0x5, 0x8, 0x0, 0x2, 0x400, 0x80, 0x6, 0x39e, 0x41, 0x7ff, 0x7f, 0x8001, 0x1, 0x7fff, 0xe8, 0x9, 0x200, 0x6, 0x1, 0x1, 0x80000000, 0x6, 0x9, 0x240000, 0x3, 0x8000, 0x2, 0x9, 0xff, 0x7ff, 0x3, 0x100, 0x9, 0xfff, 0x7670000, 0x1, 0x4, 0x41, 0x7, 0xfffffffb, 0x1, 0x800, 0x80000001, 0x3, 0xe412, 0x2, 0x4, 0x72, 0xffff6d10, 0x2, 0x449, 0x7, 0x1662, 0x7f, 0xff, 0x62, 0xffff0001, 0x229, 0x9, 0x6, 0x44, 0xeb39, 0x7ff, 0x9, 0x1, 0x4, 0x9, 0xfffffff9, 0x8, 0x7fffffff, 0x0, 0x68d, 0x80, 0x182, 0x80, 0xe7, 0xffffffff, 0x3, 0x6, 0x9, 0x9, 0x187, 0x8, 0xfffffffa, 0x5, 0x2, 0x9, 0x1f, 0x1, 0x5]}]}, {0xb0, 0x6, "bbb23afd8949ed87afe08b9bdf570186e3c1b7ee58c0cc7f09349f700d23a26a41b3ba6caf85411f839e66087f6bc2b54625b6ea3b9657cc11542226e3832bcdd8ec0ab7b6f22dd983ce6c82d6a521088ef4c4b8d142d4fc44ccbd92fcb902693c326e4e6d5ccf3ce44aefa686b5cb00e0f493c56761489fb6379a84a1a9c1879853bb751c5d7223b531642e0a8907c895a960a12b61f74fe085894854ef7044c9287d8e8a29680269373a60"}}}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}, @TCA_RATE={0x8, 0x5, {0xd5, 0x81}}, @filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x530, 0x2, [@TCA_TCINDEX_ACT={0xf4, 0x7, @m_ife={0xf0, 0xe, {{0x8, 0x1, 'ife\x00'}, {0x34, 0x2, [@TCA_IFE_TYPE={0x8, 0x5, 0x5}, @TCA_IFE_SMAC={0xc, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x99}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_DMAC={0xc}]}, {0xac, 0x6, "0e8d457ca8af31f3d2bd47a58cefa8c16f9d666ce6ebe6217f795a18e76e55d2bad01f4200f4376bca9a2d1ab4896e33f53e6949ca97f823503512116d45c68d7c932018e2938a4039a6d31779742fec7a3a2aa54d999efd9d8d1aeeeda744ccbb7a2b46cc42d10c16446659c0c0380df291c60fd6c5d86f26422409509c760dad96edf75cc2efa86ce639868d27899bd0586e23e7d1b48921f32d9a956205a712e3cca1511a0727"}}}}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x4}, @TCA_TCINDEX_POLICE={0x408, 0x6, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x401, 0x59b3dbbb, 0x6, 0x9, 0xffffffff, 0x1ff, 0xffff59df, 0x4, 0x0, 0x7fff, 0x299, 0x2, 0x5, 0x6, 0xff, 0x0, 0x8000, 0x6, 0x1ff, 0x5, 0xff, 0x5, 0x7fff, 0x10001, 0x7a1, 0x5, 0x1, 0x6, 0x1, 0x1, 0xc0be, 0x91a, 0x6, 0x9, 0x0, 0xe5fc, 0x4000, 0x1, 0x97, 0x3, 0x7, 0x3, 0x6f, 0x803a, 0xbe53, 0x80000001, 0x8, 0x5, 0x6, 0x1f, 0x9, 0xffffffe0, 0x0, 0x7, 0x7, 0x80000001, 0x8, 0x76c4, 0x1d9, 0xfffffbff, 0x0, 0x7fffffff, 0x31, 0x7, 0x80, 0xe02, 0x8, 0x291b, 0x5, 0xfffffffe, 0x7, 0x1, 0x6, 0x4, 0x4, 0x2, 0x3, 0x8, 0x3, 0x8001, 0x80000001, 0xff, 0x4, 0x3, 0xd57, 0x3, 0x9, 0x1, 0x6, 0xc568, 0x2, 0x4, 0x8, 0x20, 0x0, 0x4, 0x4, 0x6ad, 0x8, 0x5, 0x8, 0x3ff, 0xc1d0, 0x40, 0x3, 0x0, 0xffffffc1, 0xd6, 0x2, 0x8, 0x8000, 0x3, 0x3, 0x1, 0xfffffff8, 0x6, 0x4, 0x8, 0x1, 0x1, 0x0, 0x5, 0x8919, 0x1, 0x1, 0x0, 0x5, 0x4, 0xc3, 0x9, 0x0, 0x800, 0xf, 0x0, 0x1, 0x0, 0x1c96, 0xb8, 0x400, 0x76, 0xffff, 0x80, 0x1f, 0x80000000, 0x1, 0x8001, 0x3, 0x800, 0x0, 0x2, 0x9, 0x4, 0x4, 0x2, 0x3, 0x401, 0x1, 0x760d, 0x7, 0x81, 0x6, 0x30000000, 0x0, 0x8001, 0xfffffff9, 0x5d4, 0x97, 0x2, 0xf1, 0x1, 0x7, 0x6, 0x8, 0x0, 0x2, 0x6, 0x4, 0xfffffffc, 0x7, 0x2, 0x400, 0x1000, 0x9, 0x1ff, 0x9e, 0x6, 0x9, 0x731e1f43, 0x3, 0x0, 0x2, 0x1, 0x80, 0x3, 0x3, 0x390c2498, 0x0, 0x200, 0x8, 0x0, 0x0, 0x408000, 0x13a2, 0x5, 0x3f, 0x7, 0x9, 0x6, 0x0, 0xff, 0x5, 0x0, 0x8a00, 0x8, 0x8, 0x5, 0x9, 0x100, 0x2, 0x7ff, 0xffffffc0, 0x40d8, 0x4, 0x3, 0x3, 0x800, 0x20, 0x7fffffff, 0x1, 0x4, 0x200, 0x1, 0x7, 0x388c, 0x7fffffff, 0x5, 0xffff, 0x31b0, 0x5, 0x3, 0x7ff, 0xbb8b, 0x100, 0x4, 0x1, 0x5, 0x2, 0x7f, 0xffffffff, 0xfffffff8, 0x2, 0xc2d, 0x6deb, 0x4, 0x5]}}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x9, 0x9}}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x1b3a}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x63}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x2d}, @TCA_TCINDEX_MASK={0x8, 0x2, 0x400}]}}, @TCA_RATE={0x8, 0x5, {0x2, 0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x4e}]}, 0xa6c}, 0x1, 0x0, 0x0, 0x80}, 0x800)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
fchdir(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00'])
accept4$nfc_llcp(r8, &(0x7f0000000440), &(0x7f0000000200)=0x60, 0x80800)

[  296.688917] audit: type=1400 audit(1571586798.840:138): avc:  denied  { dyntransition } for  pid=13514 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1
[  296.737924] CPU: 1 PID: 13525 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  296.744901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  296.754268] Call Trace:
[  296.756878]  dump_stack+0x172/0x1f0
[  296.760532]  should_fail.cold+0xa/0x1b
[  296.764460]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  296.764481]  ? lock_downgrade+0x880/0x880
[  296.764504]  __should_failslab+0x121/0x190
[  296.764519]  should_failslab+0x9/0x14
[  296.764534]  kmem_cache_alloc_node+0x26c/0x710
[  296.764558]  __alloc_skb+0xd5/0x5f0
[  296.764575]  ? skb_scrub_packet+0x490/0x490
[  296.778045]  ? refcount_add_not_zero_checked+0x240/0x240
[  296.778072]  sock_wmalloc+0xd9/0x120
[  296.778090]  pppol2tp_sendmsg+0x23b/0x6b0
[  296.778107]  ? selinux_socket_sendmsg+0x36/0x40
[  296.778124]  ? pppol2tp_getname+0xd10/0xd10
[  296.778142]  sock_sendmsg+0xd7/0x130
[  296.778157]  ___sys_sendmsg+0x3e2/0x920
[  296.778184]  ? copy_msghdr_from_user+0x430/0x430
[  296.778207]  ? mark_held_locks+0x100/0x100
[  296.778225]  ? kasan_check_read+0x11/0x20
[  296.837606]  ? __might_fault+0x12b/0x1e0
[  296.841666]  ? find_held_lock+0x35/0x130
[  296.845722]  ? __might_fault+0x12b/0x1e0
[  296.849802]  __sys_sendmmsg+0x1bf/0x4e0
[  296.853776]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  296.858095]  ? kasan_check_write+0x14/0x20
[  296.862353]  ? __sb_end_write+0xd9/0x110
[  296.866413]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  296.871943]  ? fput+0x128/0x1a0
[  296.875225]  ? ksys_write+0x1f1/0x2d0
[  296.879023]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  296.883770]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  296.888518]  ? do_syscall_64+0x26/0x620
[  296.892483]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  296.897856]  ? do_syscall_64+0x26/0x620
[  296.901839]  __x64_sys_sendmmsg+0x9d/0x100
[  296.906071]  do_syscall_64+0xfd/0x620
[  296.910130]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  296.915328] RIP: 0033:0x459a59
[  296.918516] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
15:53:19 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
timer_create(0x2, &(0x7f0000001140)={0x0, 0x1d, 0x9, @thr={&(0x7f0000000040)="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", &(0x7f0000000140)="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"}}, &(0x7f0000001180))
exit(0x0)
timer_delete(0x0)

[  296.937405] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  296.945111] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  296.952373] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  296.959636] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  296.966896] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  296.974166] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:19 executing program 0 (fault-call:5 fault-nth:33):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  297.157967] FAULT_INJECTION: forcing a failure.
[  297.157967] name failslab, interval 1, probability 0, space 0, times 0
[  297.170098] CPU: 0 PID: 13546 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  297.177046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  297.177053] Call Trace:
[  297.177081]  dump_stack+0x172/0x1f0
[  297.177106]  should_fail.cold+0xa/0x1b
[  297.177125]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  297.177143]  ? lock_downgrade+0x880/0x880
[  297.177166]  __should_failslab+0x121/0x190
[  297.177182]  should_failslab+0x9/0x14
[  297.177201]  kmem_cache_alloc_node_trace+0x274/0x720
[  297.177219]  ? __alloc_skb+0xd5/0x5f0
[  297.177247]  __kmalloc_node_track_caller+0x3d/0x80
[  297.177268]  __kmalloc_reserve.isra.0+0x40/0xf0
[  297.177287]  __alloc_skb+0x10b/0x5f0
[  297.177304]  ? skb_scrub_packet+0x490/0x490
[  297.177322]  ? refcount_add_not_zero_checked+0x240/0x240
[  297.177341]  sock_wmalloc+0xd9/0x120
[  297.197042]  pppol2tp_sendmsg+0x23b/0x6b0
[  297.197064]  ? selinux_socket_sendmsg+0x36/0x40
[  297.197083]  ? pppol2tp_getname+0xd10/0xd10
[  297.197102]  sock_sendmsg+0xd7/0x130
[  297.197116]  ___sys_sendmsg+0x3e2/0x920
[  297.197133]  ? copy_msghdr_from_user+0x430/0x430
[  297.197161]  ? mark_held_locks+0x100/0x100
[  297.206426]  ? debug_smp_processor_id+0x1c/0x20
[  297.206444]  ? perf_trace_lock_acquire+0xf5/0x580
[  297.206467]  ? __might_fault+0x12b/0x1e0
[  297.206482]  ? find_held_lock+0x35/0x130
[  297.206496]  ? __might_fault+0x12b/0x1e0
[  297.206537]  __sys_sendmmsg+0x1bf/0x4e0
[  297.206557]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  297.206576]  ? kasan_check_write+0x14/0x20
[  297.206606]  ? __sb_end_write+0xd9/0x110
[  297.318493]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  297.324039]  ? fput+0x128/0x1a0
[  297.327323]  ? ksys_write+0x1f1/0x2d0
[  297.331124]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  297.335872]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  297.340634]  ? do_syscall_64+0x26/0x620
[  297.344599]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  297.349949]  ? do_syscall_64+0x26/0x620
[  297.353931]  __x64_sys_sendmmsg+0x9d/0x100
[  297.358158]  do_syscall_64+0xfd/0x620
[  297.361951]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  297.367141] RIP: 0033:0x459a59
[  297.370326] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  297.389215] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  297.396926] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  297.404184] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  297.411442] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  297.418701] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  297.425960] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:19 executing program 0 (fault-call:5 fault-nth:34):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x2}, 0x8)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)="f4", 0x1}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

15:53:19 executing program 2:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x200, 0x0)
mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0x110, r0, 0x180000000)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

[  297.552037] FAULT_INJECTION: forcing a failure.
[  297.552037] name failslab, interval 1, probability 0, space 0, times 0
[  297.563345] CPU: 1 PID: 13555 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  297.570281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  297.570289] Call Trace:
[  297.570314]  dump_stack+0x172/0x1f0
[  297.570339]  should_fail.cold+0xa/0x1b
[  297.570360]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  297.570387]  __should_failslab+0x121/0x190
[  297.570404]  should_failslab+0x9/0x14
[  297.570421]  kmem_cache_alloc_node_trace+0x5a/0x720
[  297.570436]  ? debug_smp_processor_id+0x1c/0x20
[  297.570451]  ? perf_trace_lock_acquire+0xf5/0x580
[  297.570466]  ? rcu_read_lock_sched_held+0x110/0x130
[  297.570493]  __kmalloc_node_track_caller+0x3d/0x80
[  297.630183]  __kmalloc_reserve.isra.0+0x40/0xf0
[  297.634845]  pskb_expand_head+0x154/0xe20
[  297.638982]  ? lock_downgrade+0x880/0x880
[  297.643127]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  297.648656]  ? iov_iter_advance+0x261/0xe30
[  297.652972]  l2tp_xmit_skb+0xea8/0x1460
[  297.656958]  pppol2tp_sendmsg+0x4a2/0x6b0
[  297.661109]  ? pppol2tp_getname+0xd10/0xd10
[  297.665424]  sock_sendmsg+0xd7/0x130
[  297.669126]  ___sys_sendmsg+0x3e2/0x920
[  297.673115]  ? copy_msghdr_from_user+0x430/0x430
[  297.677876]  ? mark_held_locks+0x100/0x100
[  297.682113]  ? debug_smp_processor_id+0x1c/0x20
[  297.686787]  ? perf_trace_lock_acquire+0xf5/0x580
[  297.691626]  ? __might_fault+0x12b/0x1e0
[  297.695687]  ? find_held_lock+0x35/0x130
[  297.699745]  ? __might_fault+0x12b/0x1e0
[  297.703821]  __sys_sendmmsg+0x1bf/0x4e0
[  297.707788]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  297.712098]  ? kasan_check_write+0x14/0x20
[  297.716333]  ? __sb_end_write+0xd9/0x110
[  297.720384]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  297.725922]  ? fput+0x128/0x1a0
[  297.729191]  ? ksys_write+0x1f1/0x2d0
[  297.732987]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  297.737732]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  297.742478]  ? do_syscall_64+0x26/0x620
[  297.746445]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  297.751797]  ? do_syscall_64+0x26/0x620
[  297.755766]  __x64_sys_sendmmsg+0x9d/0x100
[  297.759992]  do_syscall_64+0xfd/0x620
[  297.763802]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  297.768980] RIP: 0033:0x459a59
[  297.772164] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  297.791079] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
15:53:19 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000040)=""/147, 0x93}, {&(0x7f00000001c0)=""/223, 0xdf}, {&(0x7f0000000140)}, {&(0x7f00000002c0)=""/144, 0x90}], 0x7}, 0x4}, {{&(0x7f0000000400)=@xdp, 0x80, &(0x7f0000002880)=[{&(0x7f0000000480)=""/57, 0x39}, {&(0x7f0000002500)=""/2, 0x2}, {&(0x7f0000002540)=""/168, 0xa8}, {&(0x7f0000002600)=""/181, 0xb5}, {&(0x7f00000026c0)=""/100, 0x64}, {&(0x7f0000002740)=""/134, 0x86}, {&(0x7f0000002800)=""/65, 0x41}], 0x7}, 0x3dd0}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002900)=""/5, 0x5}, {&(0x7f0000002940)=""/196, 0xc4}, {&(0x7f0000002a40)=""/180, 0xb4}, {&(0x7f0000002b00)=""/1, 0x1}], 0x4}, 0xd44f}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002b80)=""/148, 0x94}, {&(0x7f0000002c40)=""/106, 0x6a}, {&(0x7f0000002cc0)=""/54, 0x36}], 0x3, &(0x7f0000002d40)=""/84, 0x54}, 0x2}, {{&(0x7f0000002dc0)=@nfc, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002e40)=""/61, 0x3d}, {&(0x7f0000002e80)=""/90, 0x5a}, {&(0x7f0000002f00)=""/104, 0x68}, {&(0x7f0000002f80)=""/36, 0x24}], 0x4, &(0x7f0000003000)=""/48, 0x30}, 0x1}, {{&(0x7f0000003040)=@nfc, 0x80, &(0x7f0000003380)=[{&(0x7f00000030c0)=""/20, 0x14}, {&(0x7f0000003100)=""/105, 0x69}, {&(0x7f0000003180)=""/119, 0x77}, {&(0x7f0000003200)=""/70, 0x46}, {&(0x7f0000003280)=""/138, 0x8a}, {&(0x7f0000003340)=""/60, 0x3c}], 0x6, &(0x7f0000003400)=""/255, 0xff}, 0x6}, {{&(0x7f0000003500)=@ax25={{0x3, @bcast}, [@rose, @null, @rose, @rose, @default, @null, @rose]}, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003580)}, {&(0x7f00000035c0)=""/200, 0xc8}, {&(0x7f00000036c0)=""/185, 0xb9}, {&(0x7f0000003780)=""/116, 0x74}, {&(0x7f0000003800)=""/182, 0xb6}], 0x5}, 0x52}, {{&(0x7f0000003940)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff}}, 0x80, &(0x7f0000004b80)=[{&(0x7f00000039c0)=""/32, 0x20}, {&(0x7f0000003a00)=""/157, 0x9d}, {&(0x7f0000003ac0)=""/94, 0x5e}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000004b40)=""/21, 0x15}], 0x5, &(0x7f0000004c00)=""/121, 0x79}, 0x7}], 0x8, 0x120, &(0x7f0000004e80)={0x77359400})
ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000004ec0)={@bcast, @null})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x28, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x14, 0x11, @ipv6=@local}]}, 0x28}, 0x1, 0xfdffffff00000000}, 0x0)

[  297.798780] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  297.806036] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  297.813292] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  297.820549] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  297.827807] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:20 executing program 5:
timer_create(0x5, 0x0, &(0x7f00000001c0))
exit(0x0)
timer_delete(0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8)
r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/aJidi#\x00', 0x7, 0x20000)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "9eaa1901e43fad02", "7e58b6bfd0dc4c4db5d88d696196ff83", "21028500"}, 0x28)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
r3 = syz_open_procfs(r2, &(0x7f0000000080)='statm\x00')
ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f00000000c0)={0x2, {0x1, 0x3, 0x9, 0x7}, {0x1000, 0x401, 0x7, 0x1bdd1bbf}, {0x40}})

[  297.940009] audit: type=1400 audit(1571586800.090:139): avc:  denied  { map } for  pid=13558 comm="syz-executor.2" path="/selinux/enforce" dev="selinuxfs" ino=4 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file permissive=1
15:53:20 executing program 0 (fault-call:5 fault-nth:35):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  298.159857] FAULT_INJECTION: forcing a failure.
[  298.159857] name failslab, interval 1, probability 0, space 0, times 0
[  298.171172] CPU: 1 PID: 13575 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  298.178111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  298.178118] Call Trace:
[  298.178147]  dump_stack+0x172/0x1f0
[  298.178178]  should_fail.cold+0xa/0x1b
[  298.178199]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  298.178227]  __should_failslab+0x121/0x190
[  298.178245]  should_failslab+0x9/0x14
[  298.178262]  kmem_cache_alloc_node_trace+0x5a/0x720
[  298.178279]  ? __kmalloc_node_track_caller+0x3d/0x80
[  298.178295]  ? rcu_read_lock_sched_held+0x110/0x130
[  298.178315]  ? kmem_cache_alloc_node_trace+0x34f/0x720
[  298.221009]  __kmalloc_node_track_caller+0x3d/0x80
[  298.221032]  __kmalloc_reserve.isra.0+0x40/0xf0
[  298.221050]  pskb_expand_head+0x154/0xe20
[  298.221066]  ? lock_downgrade+0x880/0x880
[  298.221088]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  298.221104]  ? iov_iter_advance+0x261/0xe30
[  298.236432]  l2tp_xmit_skb+0xea8/0x1460
[  298.236461]  pppol2tp_sendmsg+0x4a2/0x6b0
[  298.236482]  ? pppol2tp_getname+0xd10/0xd10
[  298.236501]  sock_sendmsg+0xd7/0x130
[  298.236515]  ___sys_sendmsg+0x3e2/0x920
[  298.259283]  ? copy_msghdr_from_user+0x430/0x430
[  298.259309]  ? mark_held_locks+0x100/0x100
[  298.259327]  ? kasan_check_read+0x11/0x20
[  298.259350]  ? __might_fault+0x12b/0x1e0
[  298.271787]  ? find_held_lock+0x35/0x130
[  298.271807]  ? __might_fault+0x12b/0x1e0
[  298.271849]  __sys_sendmmsg+0x1bf/0x4e0
[  298.271867]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  298.284281]  ? kasan_check_write+0x14/0x20
[  298.284309]  ? __sb_end_write+0xd9/0x110
[  298.284329]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  298.284339]  ? fput+0x128/0x1a0
[  298.284353]  ? ksys_write+0x1f1/0x2d0
[  298.333902]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  298.338648]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  298.343394]  ? do_syscall_64+0x26/0x620
[  298.347356]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  298.352707]  ? do_syscall_64+0x26/0x620
[  298.356674]  __x64_sys_sendmmsg+0x9d/0x100
[  298.360899]  do_syscall_64+0xfd/0x620
[  298.364690]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  298.369883] RIP: 0033:0x459a59
[  298.373167] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  298.392055] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  298.399754] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  298.407010] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  298.414263] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  298.421532] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  298.428788] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:20 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1ff, 0x90080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000003c0)={0xa, @sdr={0x38415262, 0xcb93}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x23, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x800000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
splice(r3, 0x0, r6, 0x0, 0x1ffffd, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000140)=0x1)
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r7 = getpid()
sched_setscheduler(r7, 0x5, &(0x7f0000000380))
sched_setaffinity(r7, 0x8, &(0x7f0000000500)=0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000100)='nodev}\x00', 0x7)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_script(r8, &(0x7f0000000380)=ANY=[], 0xfffffed5)
sendto$rxrpc(r8, &(0x7f0000000280)="a246091408bdbfd126f7d21ed34034be2860e147692cf1883fb152a9b063826def87eb8ecac7d03b8c1ef83767d1bde77fc7bdc581875295500133cf4faf6aa52d2dd21804bcb860869aeb7e425cc1fe7869c1a9b80fdf03bace6833dd4d", 0x5e, 0x4004881, &(0x7f0000000300)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @empty, 0x400}}, 0x24)

15:53:20 executing program 0 (fault-call:5 fault-nth:36):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:20 executing program 3:
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e7f411f97eb7e666d6c7420757365723a73797a20"], 0x1, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x1, 0x0, "8b1e2fb538f873a8b149351da73b6b7f529903de8c4f74ddfbb91ef2c7be2f294642a4bac67362b963963a6e24915fb7af87b936d058757dfe2c7f8ff8196bce5952adc13580b785cb18ef723119fe90"}, 0xd8)

15:53:20 executing program 4:
r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2207, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffc, 0x10010, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x1}, 0xc)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
accept4$alg(r8, 0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000003c0)={<r9=>r8})
getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, &(0x7f0000000400)={'broute\x00'}, &(0x7f0000000480)=0x78)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r10 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x5, 0x80)
mq_unlink(&(0x7f0000000280)='/dev/dmmidi#\x00')
ioctl$PPPIOCGCHAN(r10, 0x80047437, &(0x7f0000000240))
modify_ldt$read_default(0x2, &(0x7f0000000300)=""/69, 0x45)
r11 = accept4(r4, 0x0, 0x0, 0x0)
r12 = accept4$alg(r11, 0x0, 0x0, 0x0)
splice(r3, 0x0, r12, 0x0, 0x1ffffd, 0x0)
r13 = msgget$private(0x0, 0x40)
msgrcv(r13, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/15], 0xf, 0x0, 0x1000)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000080)={0x0, 0x2, 0xfffffff9})
bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r2, 0x0, 0xffffffffffffff41, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @local}, 0x10)
sendto$inet(r2, &(0x7f0000d7cfcb), 0x835865a932e78c22, 0x0, 0x0, 0xfffffeeb)

[  298.685348] FAULT_INJECTION: forcing a failure.
[  298.685348] name failslab, interval 1, probability 0, space 0, times 0
[  298.696704] CPU: 0 PID: 13587 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  298.703648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  298.713015] Call Trace:
[  298.715633]  dump_stack+0x172/0x1f0
[  298.719277]  should_fail.cold+0xa/0x1b
[  298.723186]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  298.728297]  ? find_held_lock+0x35/0x130
[  298.732726]  __should_failslab+0x121/0x190
[  298.736976]  should_failslab+0x9/0x14
[  298.740786]  kmem_cache_alloc+0x47/0x700
[  298.744859]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  298.750064]  ? br_allowed_ingress+0x1630/0x1630
[  298.754743]  skb_clone+0x156/0x3e0
[  298.758297]  deliver_clone+0x46/0xc0
[  298.762025]  br_flood+0x4da/0x710
[  298.765502]  br_dev_xmit+0xeeb/0x1490
[  298.769315]  ? br_poll_controller+0x10/0x10
[  298.773646]  ? __lock_is_held+0xb6/0x140
[  298.777743]  dev_hard_start_xmit+0x1a5/0x980
[  298.782159]  ? check_preemption_disabled+0x48/0x290
[  298.787194]  __dev_queue_xmit+0x2704/0x2fe0
[  298.791531]  ? mark_held_locks+0x100/0x100
[  298.795775]  ? do_xdp_generic+0x50/0x50
[  298.799759]  ? netdev_pick_tx+0x300/0x300
[  298.803921]  ? ip6_finish_output+0x574/0xbe0
[  298.808867]  ? find_held_lock+0x35/0x130
[  298.812937]  ? ip6_finish_output+0x574/0xbe0
[  298.817388]  ? mark_held_locks+0xb1/0x100
[  298.821542]  ? ip6_finish_output2+0x1784/0x2550
[  298.826220]  ? ip6_finish_output+0x574/0xbe0
[  298.830650]  ? ip6_finish_output2+0x1784/0x2550
[  298.835369]  dev_queue_xmit+0x18/0x20
[  298.839185]  ? dev_queue_xmit+0x18/0x20
[  298.843170]  ip6_finish_output2+0x12fd/0x2550
[  298.847683]  ? ip6_forward_finish+0x4d0/0x4d0
[  298.852208]  ? netif_rx_ni+0x350/0x350
[  298.856118]  ip6_finish_output+0x574/0xbe0
[  298.860361]  ? ip6_finish_output+0x574/0xbe0
[  298.864783]  ip6_output+0x235/0x7c0
[  298.868426]  ? ip6_finish_output+0xbe0/0xbe0
[  298.872854]  ? ip6_fragment+0x3770/0x3770
[  298.877029]  ip6_xmit+0xe44/0x2030
[  298.880589]  ? ip6_finish_output2+0x2550/0x2550
[  298.885270]  ? lock_downgrade+0x880/0x880
[  298.889445]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  298.894998]  ? ip6_append_data+0x320/0x320
[  298.899264]  inet6_csk_xmit+0x2fb/0x5ba
[  298.903249]  ? inet6_csk_update_pmtu+0x190/0x190
[  298.908008]  ? dst_release+0x62/0xb0
[  298.911742]  ? udp6_set_csum+0xe1/0x5a0
[  298.915735]  l2tp_xmit_skb+0x116c/0x1460
[  298.919818]  pppol2tp_sendmsg+0x4a2/0x6b0
[  298.923983]  ? pppol2tp_getname+0xd10/0xd10
[  298.928319]  sock_sendmsg+0xd7/0x130
[  298.932041]  ___sys_sendmsg+0x3e2/0x920
[  298.936024]  ? copy_msghdr_from_user+0x430/0x430
[  298.940791]  ? mark_held_locks+0x100/0x100
[  298.945036]  ? kasan_check_read+0x11/0x20
[  298.949197]  ? __might_fault+0x12b/0x1e0
[  298.953264]  ? find_held_lock+0x35/0x130
[  298.957350]  ? __might_fault+0x12b/0x1e0
[  298.961443]  __sys_sendmmsg+0x1bf/0x4e0
[  298.965456]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  298.969793]  ? kasan_check_write+0x14/0x20
[  298.974051]  ? __sb_end_write+0xd9/0x110
[  298.978128]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  298.983675]  ? fput+0x128/0x1a0
[  298.986963]  ? ksys_write+0x1f1/0x2d0
[  298.990781]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  298.995552]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  299.000320]  ? do_syscall_64+0x26/0x620
[  299.004305]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  299.009689]  ? do_syscall_64+0x26/0x620
[  299.013682]  __x64_sys_sendmmsg+0x9d/0x100
[  299.017940]  do_syscall_64+0xfd/0x620
[  299.021763]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  299.026963] RIP: 0033:0x459a59
[  299.030162] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  299.049073] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  299.056808] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  299.064084] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  299.071360] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  299.078644] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  299.085924] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
[  299.107646] encrypted_key: keyword 'nA—ë~fmlt' not recognized
[  299.130412] encrypted_key: keyword 'nA—ë~fmlt' not recognized
15:53:21 executing program 0 (fault-call:5 fault-nth:37):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:21 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2001, 0x1)
fcntl$setflags(r0, 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0xf, 0xffffffff, 0x8, 0x0, 0xf865d40cdf0fef81})

[  299.283788] FAULT_INJECTION: forcing a failure.
[  299.283788] name failslab, interval 1, probability 0, space 0, times 0
[  299.295114] CPU: 0 PID: 13605 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  299.302058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  299.311425] Call Trace:
[  299.314036]  dump_stack+0x172/0x1f0
[  299.317687]  should_fail.cold+0xa/0x1b
[  299.321619]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  299.326737]  ? find_held_lock+0x35/0x130
[  299.330818]  __should_failslab+0x121/0x190
[  299.335058]  should_failslab+0x9/0x14
[  299.338867]  kmem_cache_alloc+0x47/0x700
[  299.342932]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  299.348139]  ? br_allowed_ingress+0x1630/0x1630
[  299.352864]  skb_clone+0x156/0x3e0
[  299.356420]  deliver_clone+0x46/0xc0
[  299.360147]  br_flood+0x4da/0x710
[  299.363623]  br_dev_xmit+0xeeb/0x1490
[  299.367444]  ? br_poll_controller+0x10/0x10
[  299.371817]  ? __lock_is_held+0xb6/0x140
[  299.375904]  dev_hard_start_xmit+0x1a5/0x980
[  299.380325]  ? check_preemption_disabled+0x48/0x290
[  299.385351]  __dev_queue_xmit+0x2704/0x2fe0
[  299.389679]  ? mark_held_locks+0x100/0x100
[  299.393923]  ? do_xdp_generic+0x50/0x50
[  299.397910]  ? netdev_pick_tx+0x300/0x300
[  299.402067]  ? ip6_finish_output+0x574/0xbe0
[  299.406484]  ? find_held_lock+0x35/0x130
[  299.410556]  ? ip6_finish_output+0x574/0xbe0
[  299.414978]  ? mark_held_locks+0xb1/0x100
[  299.419142]  ? ip6_finish_output2+0x1784/0x2550
[  299.423821]  ? ip6_finish_output+0x574/0xbe0
[  299.428237]  ? ip6_finish_output2+0x1784/0x2550
[  299.432919]  dev_queue_xmit+0x18/0x20
[  299.436732]  ? dev_queue_xmit+0x18/0x20
[  299.440721]  ip6_finish_output2+0x12fd/0x2550
[  299.445239]  ? ip6_forward_finish+0x4d0/0x4d0
[  299.449748]  ? netif_rx_ni+0x350/0x350
[  299.453658]  ip6_finish_output+0x574/0xbe0
[  299.457902]  ? ip6_finish_output+0x574/0xbe0
[  299.462328]  ip6_output+0x235/0x7c0
[  299.465973]  ? ip6_finish_output+0xbe0/0xbe0
[  299.470394]  ? ip6_fragment+0x3770/0x3770
[  299.474560]  ip6_xmit+0xe44/0x2030
[  299.478126]  ? ip6_finish_output2+0x2550/0x2550
[  299.482802]  ? lock_downgrade+0x880/0x880
[  299.486974]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  299.492523]  ? ip6_append_data+0x320/0x320
[  299.496792]  inet6_csk_xmit+0x2fb/0x5ba
[  299.500785]  ? inet6_csk_update_pmtu+0x190/0x190
[  299.505550]  ? dst_release+0x62/0xb0
[  299.509278]  ? udp6_set_csum+0xe1/0x5a0
[  299.513270]  l2tp_xmit_skb+0x116c/0x1460
[  299.517358]  pppol2tp_sendmsg+0x4a2/0x6b0
[  299.521531]  ? pppol2tp_getname+0xd10/0xd10
[  299.525894]  sock_sendmsg+0xd7/0x130
[  299.529618]  ___sys_sendmsg+0x3e2/0x920
[  299.533610]  ? copy_msghdr_from_user+0x430/0x430
[  299.538387]  ? mark_held_locks+0x100/0x100
[  299.542637]  ? kasan_check_read+0x11/0x20
[  299.546801]  ? __might_fault+0x12b/0x1e0
[  299.550870]  ? find_held_lock+0x35/0x130
[  299.554940]  ? __might_fault+0x12b/0x1e0
[  299.559037]  __sys_sendmmsg+0x1bf/0x4e0
[  299.563134]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  299.567473]  ? kasan_check_write+0x14/0x20
[  299.571753]  ? __sb_end_write+0xd9/0x110
[  299.575828]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  299.581373]  ? fput+0x128/0x1a0
[  299.584665]  ? ksys_write+0x1f1/0x2d0
[  299.588478]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  299.593248]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  299.598016]  ? do_syscall_64+0x26/0x620
[  299.602000]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  299.607378]  ? do_syscall_64+0x26/0x620
[  299.611366]  __x64_sys_sendmmsg+0x9d/0x100
[  299.615625]  do_syscall_64+0xfd/0x620
[  299.619444]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  299.624726] RIP: 0033:0x459a59
[  299.627926] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  299.647361] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  299.655090] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  299.662372] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  299.669651] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  299.676935] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  299.684214] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:22 executing program 2:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x23, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x80000)
mknodat(r2, &(0x7f0000000280)='./file0\x00', 0x8000, 0xfff)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000340)={0x6, 0x200, 0x5, 0x8}, 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x0)
accept4$alg(r4, 0x0, 0x0, 0x0)
getsockopt$packet_int(r4, 0x107, 0xe, &(0x7f00000002c0), &(0x7f0000000300)=0x4)

15:53:22 executing program 0 (fault-call:5 fault-nth:38):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:22 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x50, 0x0, &(0x7f0000000280)="4d50b441e692763113e5d4460e2f33ef4444eddf84ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x40)
r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x5, 0x800)
ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000380)=""/251)

[  300.009206] FAULT_INJECTION: forcing a failure.
[  300.009206] name failslab, interval 1, probability 0, space 0, times 0
[  300.073591] CPU: 1 PID: 13621 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  300.080561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  300.089935] Call Trace:
[  300.092554]  dump_stack+0x172/0x1f0
[  300.096191]  should_fail.cold+0xa/0x1b
[  300.096211]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  300.096229]  ? lock_downgrade+0x880/0x880
[  300.096252]  __should_failslab+0x121/0x190
[  300.113602]  should_failslab+0x9/0x14
[  300.117420]  kmem_cache_alloc_node+0x26c/0x710
[  300.122026]  __alloc_skb+0xd5/0x5f0
[  300.125688]  ? skb_scrub_packet+0x490/0x490
[  300.130017]  ? refcount_add_not_zero_checked+0x240/0x240
[  300.135481]  sock_wmalloc+0xd9/0x120
[  300.139203]  pppol2tp_sendmsg+0x23b/0x6b0
[  300.143356]  ? selinux_socket_sendmsg+0x36/0x40
[  300.148032]  ? pppol2tp_getname+0xd10/0xd10
[  300.152364]  sock_sendmsg+0xd7/0x130
[  300.156088]  ___sys_sendmsg+0x3e2/0x920
[  300.160094]  ? copy_msghdr_from_user+0x430/0x430
[  300.164863]  ? mark_held_locks+0x100/0x100
[  300.169114]  ? kasan_check_read+0x11/0x20
[  300.173276]  ? __might_fault+0x12b/0x1e0
[  300.177347]  ? find_held_lock+0x35/0x130
[  300.181423]  ? __might_fault+0x12b/0x1e0
[  300.185880]  __sys_sendmmsg+0x1bf/0x4e0
[  300.189870]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  300.194211]  ? kasan_check_write+0x14/0x20
[  300.198469]  ? __sb_end_write+0xd9/0x110
[  300.202545]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  300.208098]  ? fput+0x128/0x1a0
[  300.211389]  ? ksys_write+0x1f1/0x2d0
[  300.215206]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  300.219972]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  300.224738]  ? do_syscall_64+0x26/0x620
[  300.228726]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  300.234106]  ? do_syscall_64+0x26/0x620
[  300.238098]  __x64_sys_sendmmsg+0x9d/0x100
[  300.242348]  do_syscall_64+0xfd/0x620
[  300.246164]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  300.251362] RIP: 0033:0x459a59
[  300.254570] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
15:53:22 executing program 4:
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x1ffffd, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8)
r5 = geteuid()
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0xf4, 0x4, &(0x7f0000000300)=[{&(0x7f0000000100)="fcad2295f1b671640f06a3b0037296c8841eca62391a17", 0x17, 0xff}, {&(0x7f0000000140)="3a13f2c39d8a66b678b452", 0xb, 0x8000}, {&(0x7f0000000180)="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", 0xfa, 0x9}, {&(0x7f0000000280)="3c3aac739b2cfb4f440d235ac13fa992cd8a38ca966dc06da647585cd2d0d4f2e8f93dd0147654a2ab5e64d8cd1dd8335ab9a5bb2968fa03a914c76b179a942af1df0f92e3f4d76886a32f0987374e2ed8ac9083", 0x54, 0x6}], 0x2002008, &(0x7f00000004c0)={[{@background_gc_on='background_gc=on'}, {@grpjquota={'grpjquota'}}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@background_gc_sync='background_gc=sync'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@context={'context', 0x3d, 'user_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'em1keyring@'}}, {@subj_user={'subj_user', 0x3d, 'em1!'}}, {@obj_type={'obj_type', 0x3d, '^'}}, {@obj_user={'obj_user', 0x3d, 'em0'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r5}}]})
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x15000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xd}, @dev, {[@cipso={0x86, 0x9, 0x0, [{0x0, 0x3, "84"}]}]}}}}}}}, 0x0)

15:53:22 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x11080, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

[  300.254579] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  300.254592] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  300.254605] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  300.295746] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  300.295755] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  300.295763] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:22 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = eventfd2(0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
close(r2)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00,\x00?'], 0x1}}, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r6, &(0x7f0000000380)=ANY=[], 0xffffffffffffffb2)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000000)=0xffffffff, 0x4)
r7 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0)
close(r7)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r9}}, 0x10)
write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x1, {0x8, 0x1, "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", 0xcc, 0x40, 0xe7, 0x0, 0x9, 0x0, 0x4, 0x1}, r9}}, 0x128)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0xc3f, 0x2, 0xffff, 0x6, 0x4, 0x814, 0x7, 0x7, 0x10001, 0x40, 0x401, 0x3, 0x3f, 0x65ce, 0xfffffffffffffff9, 0x80], 0x10000, 0x1000})
close(r0)
socket(0x10, 0x80002, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

15:53:22 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x44800)
r2 = accept4(r1, 0x0, 0x0, 0x40000)
accept4$alg(r2, 0x0, 0x0, 0x0)
getsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
exit(0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xf3b6)
timer_create(0x3, 0x0, &(0x7f0000000140)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
timer_delete(r4)

15:53:22 executing program 0 (fault-call:5 fault-nth:39):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  300.417136] sit: non-ECT from 172.112.20.187 with TOS=0x2
15:53:22 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70200001400006cb4dafa00000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000b20000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fe530cb7d7f933eda02ba18ad181867514fe60077d4dd90123d1be7cf43548ee858e07dfbdfd4e7540ebec677d6ac14c2c794f72cbf5fe31789e70233bfd8115efd90b0c48258f8dbe82e16cf8db95f5b068a9e0000180000000000000000000000000000000000000000005400000000000018287ba7d8807cf077cc420efca6785deb269d0a91985602763e0d70d404d1006a3d6eef8fb7fcdd82eb1ed32a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff}}, &(0x7f0000000280)=0x80)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
fcntl$setownex(r1, 0xf, &(0x7f00000002c0)={0x2, r2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

[  300.495099] FAULT_INJECTION: forcing a failure.
[  300.495099] name failslab, interval 1, probability 0, space 0, times 0
[  300.506379] CPU: 0 PID: 13641 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  300.513327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  300.522692] Call Trace:
[  300.525313]  dump_stack+0x172/0x1f0
[  300.528970]  should_fail.cold+0xa/0x1b
[  300.532887]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  300.538018]  __should_failslab+0x121/0x190
[  300.542265]  should_failslab+0x9/0x14
[  300.546089]  kmem_cache_alloc_node_trace+0x5a/0x720
[  300.551120]  ? __kmalloc_node_track_caller+0x3d/0x80
[  300.556242]  ? rcu_read_lock_sched_held+0x110/0x130
[  300.561274]  ? kmem_cache_alloc_node_trace+0x34f/0x720
[  300.566571]  __kmalloc_node_track_caller+0x3d/0x80
[  300.571523]  __kmalloc_reserve.isra.0+0x40/0xf0
[  300.576209]  pskb_expand_head+0x154/0xe20
[  300.580403]  ? lock_downgrade+0x880/0x880
[  300.584563]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  300.590111]  ? iov_iter_advance+0x261/0xe30
[  300.594453]  l2tp_xmit_skb+0xea8/0x1460
[  300.598451]  pppol2tp_sendmsg+0x4a2/0x6b0
[  300.602625]  ? pppol2tp_getname+0xd10/0xd10
[  300.606964]  sock_sendmsg+0xd7/0x130
[  300.610691]  ___sys_sendmsg+0x3e2/0x920
[  300.614678]  ? copy_msghdr_from_user+0x430/0x430
[  300.619802]  ? mark_held_locks+0x100/0x100
[  300.624050]  ? kasan_check_read+0x11/0x20
[  300.628226]  ? __might_fault+0x12b/0x1e0
[  300.632308]  ? find_held_lock+0x35/0x130
[  300.636391]  ? __might_fault+0x12b/0x1e0
[  300.640483]  __sys_sendmmsg+0x1bf/0x4e0
15:53:22 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$KIOCSOUND(r0, 0x4b2f, 0xd)
sysinfo(&(0x7f0000000000)=""/50)
socket$inet(0x2, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000480)={r5, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x98)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x6}, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')

[  300.644476]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  300.648808]  ? kasan_check_write+0x14/0x20
[  300.653064]  ? __sb_end_write+0xd9/0x110
[  300.657146]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  300.662698]  ? fput+0x128/0x1a0
[  300.666000]  ? ksys_write+0x1f1/0x2d0
[  300.669819]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  300.674584]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  300.679358]  ? do_syscall_64+0x26/0x620
[  300.683347]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  300.688724]  ? do_syscall_64+0x26/0x620
[  300.692713]  __x64_sys_sendmmsg+0x9d/0x100
[  300.696966]  do_syscall_64+0xfd/0x620
[  300.700780]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  300.705974] RIP: 0033:0x459a59
[  300.709175] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  300.728092] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  300.735823] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  300.743111] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  300.750401] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  300.757689] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  300.764976] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:23 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x1ce99a8edb4f66e9, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000140)=0x1f, 0x4)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fe530cb7d7f933eda02ba18ad181867514fe60077d4dd90123d3ee7cf43548ee858e07dfbdfd4e7540ebec677d6ac14c2c794f72cbf5fe31789e70233bfd8115efd90b0c48258f8dbe82e16cf8db95f5b068a9e0000000000000000000000000000000000000000000000000000000000000018287ba7d8807cf077cc420efca6785deb269d0a91985602763e0d70d404da006a3d6eef8fb7fcdd82eb1e4841"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:23 executing program 0 (fault-call:5 fault-nth:40):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  301.020918] FAULT_INJECTION: forcing a failure.
[  301.020918] name failslab, interval 1, probability 0, space 0, times 0
[  301.032384] CPU: 0 PID: 13659 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  301.039325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  301.048684] Call Trace:
[  301.051283]  dump_stack+0x172/0x1f0
[  301.054930]  should_fail.cold+0xa/0x1b
[  301.058812]  ? ipv6_chk_mcast_addr+0x295/0x6f0
[  301.063417]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  301.068534]  ? find_held_lock+0x35/0x130
[  301.072588]  ? ipv6_chk_mcast_addr+0x2cb/0x6f0
[  301.077166]  __should_failslab+0x121/0x190
[  301.081392]  should_failslab+0x9/0x14
[  301.085185]  kmem_cache_alloc+0x47/0x700
[  301.089235]  ? kasan_check_read+0x11/0x20
[  301.093379]  skb_clone+0x156/0x3e0
[  301.096913]  ip6_finish_output2+0x1886/0x2550
[  301.101401]  ? find_held_lock+0x35/0x130
[  301.105452]  ? ip6_mtu+0x2e6/0x460
[  301.108987]  ? ip6_forward_finish+0x4d0/0x4d0
[  301.113475]  ? __lock_is_held+0xb6/0x140
[  301.117534]  ip6_finish_output+0x574/0xbe0
[  301.121756]  ? ip6_finish_output+0x574/0xbe0
[  301.126160]  ip6_output+0x235/0x7c0
[  301.129780]  ? ip6_finish_output+0xbe0/0xbe0
[  301.134182]  ? ip6_fragment+0x3770/0x3770
[  301.138331]  ip6_xmit+0xe44/0x2030
[  301.141872]  ? ip6_finish_output2+0x2550/0x2550
[  301.146531]  ? lock_downgrade+0x880/0x880
[  301.150681]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  301.156212]  ? ip6_append_data+0x320/0x320
[  301.160457]  inet6_csk_xmit+0x2fb/0x5ba
[  301.164434]  ? inet6_csk_update_pmtu+0x190/0x190
[  301.170316]  ? dst_release+0x62/0xb0
[  301.174030]  ? udp6_set_csum+0xe1/0x5a0
[  301.178014]  l2tp_xmit_skb+0x116c/0x1460
[  301.182078]  pppol2tp_sendmsg+0x4a2/0x6b0
[  301.186222]  ? pppol2tp_getname+0xd10/0xd10
[  301.190541]  sock_sendmsg+0xd7/0x130
[  301.194250]  ___sys_sendmsg+0x3e2/0x920
[  301.198219]  ? copy_msghdr_from_user+0x430/0x430
[  301.202972]  ? mark_held_locks+0x100/0x100
[  301.207199]  ? kasan_check_read+0x11/0x20
[  301.211775]  ? __might_fault+0x12b/0x1e0
[  301.215825]  ? find_held_lock+0x35/0x130
[  301.219879]  ? __might_fault+0x12b/0x1e0
[  301.223947]  __sys_sendmmsg+0x1bf/0x4e0
[  301.227923]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  301.232264]  ? kasan_check_write+0x14/0x20
[  301.236504]  ? __sb_end_write+0xd9/0x110
[  301.240554]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  301.246080]  ? fput+0x128/0x1a0
[  301.249348]  ? ksys_write+0x1f1/0x2d0
[  301.253140]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  301.257880]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  301.262632]  ? do_syscall_64+0x26/0x620
[  301.266595]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  301.271950]  ? do_syscall_64+0x26/0x620
[  301.275915]  __x64_sys_sendmmsg+0x9d/0x100
[  301.280141]  do_syscall_64+0xfd/0x620
[  301.283930]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  301.289107] RIP: 0033:0x459a59
[  301.292297] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  301.311275] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  301.318973] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  301.326228] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  301.333490] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  301.340745] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  301.348001] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:23 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
rt_sigprocmask(0x2, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
close(r2)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000200)={0x400, 0x100, 0x8, 0x5, 0xbf4, 0x10000})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
accept4$alg(r5, 0x0, 0x0, 0x0)
splice(r5, 0x0, r3, 0x0, 0x200, 0x0)

15:53:23 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2)
accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x800)
timer_delete(0x0)

15:53:23 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x80201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, @remote}, &(0x7f0000000540)=0x10, 0x800)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000004c0)={'ip6_vti0\x00', {0x2, 0x4e23, @loopback}})
r2 = socket$rxrpc(0x21, 0x2, 0xa)
getsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffc2fedd7b1897ec9680a971a5ff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fe530cb7d7f933eda02ba18ad181867514fe60077d4dd90123d3ee7cf43548ee858e07dfbdfd4e7540ebec677d6ac14c2c794f72cbf5fe31789e70233bfd8115efd90b0c48258f8dbe82e16cf8db95f5b068a9e0000000000000000000000000000000000000000000000000000000000000018287ba7d8807cf077cc420efca6785deb269d0a91985602763e0d70d4f4d9006a3d6eef8fb7fcdd82eb1e4841"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0xffffffbc, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
r4 = semget$private(0x0, 0x2000000010a, 0x0)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000))
semctl$GETPID(r4, 0x2, 0xb, &(0x7f0000000280)=""/172)

15:53:23 executing program 0 (fault-call:5 fault-nth:41):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:23 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x3, 0x11)
sendmsg(r1, &(0x7f0000000280)={&(0x7f0000000c80)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1302}}, 0x80, 0x0}, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0xfffffed5)
recvmsg$kcm(r2, &(0x7f0000000300)={&(0x7f0000000100)=@can, 0x80, 0x0, 0x0, 0x0, 0x2f4}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040)=0xfa, 0x4)
r4 = syz_open_procfs(r3, &(0x7f0000000000)='syscall\x00')
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r5, 0x0, 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB="1f00000009004abbc5fd8dfc5782874206aa33198a45fca4e1aa7cc92f51c4e8c2221f6d77f34899ce40238744296713a1d0f586627875cbb50268a76672f442e22ad631d3c66230bedb9975af717ee91f247df624e0625a48acb6e8aa669cee1d1f447187581ec7e629d2a59f17f92603006fc2682a47c04ecd5af44174a579e59bdbd1a700559dfc116abd645f253c072f47283706837289"])

15:53:23 executing program 3:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c900270fff8a19600"/22, 0x16, 0xfffffffffffffffe}], 0x0, 0x0)
r0 = open(&(0x7f0000000140)='./bus\x00', 0x393000, 0x20)
syz_mount_image$nfs4(&(0x7f0000000200)='nfs4\x00', &(0x7f0000000240)='./bus\x00', 0x3ff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000280)="8eb90baf7390ebdc6143296d83e9045137fa3e27680b996389d7cb33f4709e8317a9a8cd42f107ac", 0x2ba, 0x4}], 0x100000, &(0x7f0000000340)='crc32-generic\x00')
creat(0x0, 0x27)
write$UHID_INPUT(r0, &(0x7f00000015c0)={0x8, "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", 0xfffffffffffffde9}, 0x10000005c)
fadvise64(r0, 0xfffffffffffffffd, 0x0, 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000000)="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")

15:53:23 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x10000, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000040)={0x2, 0x7, 0x3b, 0x80, 0x3ff, 0xf47, 0x491})
ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x4dcb)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
accept4$alg(r3, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x104800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x2, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8008010)

[  301.683229] FAULT_INJECTION: forcing a failure.
[  301.683229] name failslab, interval 1, probability 0, space 0, times 0
[  301.694766] CPU: 0 PID: 13683 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  301.701795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  301.711156] Call Trace:
[  301.713771]  dump_stack+0x172/0x1f0
[  301.717421]  should_fail.cold+0xa/0x1b
[  301.721330]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  301.726442]  ? find_held_lock+0x35/0x130
[  301.730522]  __should_failslab+0x121/0x190
[  301.734768]  should_failslab+0x9/0x14
[  301.738586]  kmem_cache_alloc+0x47/0x700
[  301.742765]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  301.747968]  ? br_allowed_ingress+0x1630/0x1630
[  301.752653]  skb_clone+0x156/0x3e0
[  301.756211]  deliver_clone+0x46/0xc0
[  301.759935]  br_flood+0x4da/0x710
[  301.763405]  br_dev_xmit+0xeeb/0x1490
[  301.767218]  ? br_poll_controller+0x10/0x10
[  301.771560]  ? __lock_is_held+0xb6/0x140
[  301.775645]  dev_hard_start_xmit+0x1a5/0x980
[  301.780067]  ? check_preemption_disabled+0x48/0x290
[  301.785097]  __dev_queue_xmit+0x2704/0x2fe0
[  301.789429]  ? mark_held_locks+0x100/0x100
[  301.793674]  ? do_xdp_generic+0x50/0x50
[  301.797662]  ? netdev_pick_tx+0x300/0x300
[  301.801824]  ? ip6_finish_output+0x574/0xbe0
[  301.806245]  ? find_held_lock+0x35/0x130
[  301.810320]  ? ip6_finish_output+0x574/0xbe0
[  301.814743]  ? mark_held_locks+0xb1/0x100
[  301.818902]  ? ip6_finish_output2+0x1784/0x2550
[  301.823580]  ? ip6_finish_output+0x574/0xbe0
[  301.827995]  ? ip6_finish_output2+0x1784/0x2550
[  301.832683]  dev_queue_xmit+0x18/0x20
[  301.836487]  ? dev_queue_xmit+0x18/0x20
[  301.840470]  ip6_finish_output2+0x12fd/0x2550
[  301.844982]  ? ip6_forward_finish+0x4d0/0x4d0
[  301.849488]  ? netif_rx_ni+0x350/0x350
[  301.853392]  ip6_finish_output+0x574/0xbe0
[  301.857796]  ? ip6_finish_output+0x574/0xbe0
[  301.862221]  ip6_output+0x235/0x7c0
[  301.865870]  ? ip6_finish_output+0xbe0/0xbe0
[  301.870304]  ? ip6_fragment+0x3770/0x3770
[  301.874477]  ip6_xmit+0xe44/0x2030
[  301.878040]  ? ip6_finish_output2+0x2550/0x2550
[  301.882719]  ? lock_downgrade+0x880/0x880
[  301.886883]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  301.892434]  ? ip6_append_data+0x320/0x320
[  301.896700]  inet6_csk_xmit+0x2fb/0x5ba
[  301.900684]  ? inet6_csk_update_pmtu+0x190/0x190
[  301.905442]  ? dst_release+0x62/0xb0
[  301.909169]  ? udp6_set_csum+0xe1/0x5a0
[  301.913158]  l2tp_xmit_skb+0x116c/0x1460
[  301.917237]  pppol2tp_sendmsg+0x4a2/0x6b0
[  301.921401]  ? pppol2tp_getname+0xd10/0xd10
[  301.925736]  sock_sendmsg+0xd7/0x130
[  301.929458]  ___sys_sendmsg+0x3e2/0x920
[  301.933440]  ? copy_msghdr_from_user+0x430/0x430
[  301.938209]  ? mark_held_locks+0x100/0x100
[  301.942455]  ? kasan_check_read+0x11/0x20
[  301.946611]  ? __might_fault+0x12b/0x1e0
[  301.950680]  ? find_held_lock+0x35/0x130
[  301.954754]  ? __might_fault+0x12b/0x1e0
[  301.958844]  __sys_sendmmsg+0x1bf/0x4e0
[  301.962835]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  301.967174]  ? kasan_check_write+0x14/0x20
[  301.971424]  ? __sb_end_write+0xd9/0x110
[  301.975500]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  301.981044]  ? fput+0x128/0x1a0
[  301.984332]  ? ksys_write+0x1f1/0x2d0
[  301.988152]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  301.992920]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  301.997689]  ? do_syscall_64+0x26/0x620
[  302.001675]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  302.007057]  ? do_syscall_64+0x26/0x620
[  302.011048]  __x64_sys_sendmmsg+0x9d/0x100
[  302.015301]  do_syscall_64+0xfd/0x620
[  302.019113]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  302.024308] RIP: 0033:0x459a59
[  302.027509] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  302.046419] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  302.054239] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  302.061525] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  302.068809] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  302.076093] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  302.083550] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:24 executing program 0 (fault-call:5 fault-nth:42):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  302.231308] FAT-fs (loop3): bogus number of reserved sectors
[  302.246541] FAT-fs (loop3): Can't find a valid FAT filesystem
15:53:24 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
timer_delete(0x0)

[  302.370770] FAULT_INJECTION: forcing a failure.
[  302.370770] name failslab, interval 1, probability 0, space 0, times 0
[  302.403564] CPU: 1 PID: 13699 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  302.410541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  302.419992] Call Trace:
[  302.422603]  dump_stack+0x172/0x1f0
[  302.426253]  should_fail.cold+0xa/0x1b
[  302.430158]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  302.435273]  ? lock_downgrade+0x880/0x880
[  302.439445]  __should_failslab+0x121/0x190
[  302.443696]  should_failslab+0x9/0x14
[  302.447505]  kmem_cache_alloc_node+0x26c/0x710
[  302.452115]  __alloc_skb+0xd5/0x5f0
[  302.455764]  ? skb_scrub_packet+0x490/0x490
[  302.460103]  ? refcount_add_not_zero_checked+0x240/0x240
[  302.465574]  sock_wmalloc+0xd9/0x120
[  302.469304]  pppol2tp_sendmsg+0x23b/0x6b0
[  302.473467]  ? selinux_socket_sendmsg+0x36/0x40
[  302.478157]  ? pppol2tp_getname+0xd10/0xd10
[  302.482496]  sock_sendmsg+0xd7/0x130
[  302.486223]  ___sys_sendmsg+0x3e2/0x920
[  302.490207]  ? copy_msghdr_from_user+0x430/0x430
[  302.494989]  ? mark_held_locks+0x100/0x100
[  302.499239]  ? kasan_check_read+0x11/0x20
[  302.503401]  ? __might_fault+0x12b/0x1e0
[  302.507476]  ? find_held_lock+0x35/0x130
[  302.509553] selinux_nlmsg_perm: 8 callbacks suppressed
[  302.509567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13705 comm=syz-executor.3
[  302.511545]  ? __might_fault+0x12b/0x1e0
[  302.511582]  __sys_sendmmsg+0x1bf/0x4e0
[  302.521785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13705 comm=syz-executor.3
[  302.528988]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  302.529009]  ? kasan_check_write+0x14/0x20
[  302.529034]  ? __sb_end_write+0xd9/0x110
[  302.529056]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
15:53:24 executing program 3:
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="74e5ff00", @ANYBLOB="000000000000000000000f000000280002000800010000000000040004000800020000000000080002000000000008000100000000002c00070008000200000000000c000400000000000000000008000100000000000c00040009"], 0x2}}, 0x0)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101102, 0x0)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040))
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
socket(0x10, 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302", 0x11}], 0x1}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0)

[  302.542422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13705 comm=syz-executor.3
[  302.549112]  ? fput+0x128/0x1a0
[  302.549130]  ? ksys_write+0x1f1/0x2d0
[  302.549151]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  302.549165]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  302.549182]  ? do_syscall_64+0x26/0x620
[  302.561697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13705 comm=syz-executor.3
[  302.561806]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  302.575621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13705 comm=syz-executor.3
[  302.579363]  ? do_syscall_64+0x26/0x620
[  302.579388]  __x64_sys_sendmmsg+0x9d/0x100
[  302.579404]  do_syscall_64+0xfd/0x620
[  302.579423]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  302.587529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13705 comm=syz-executor.3
[  302.591226] RIP: 0033:0x459a59
[  302.591241] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  302.591249] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  302.591265] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  302.591274] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  302.591285] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  302.606529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13705 comm=syz-executor.3
[  302.612031] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  302.612040] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:24 executing program 0 (fault-call:5 fault-nth:43):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:25 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x0, 0x84)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x3, 0xa2, [], 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=""/162}, &(0x7f0000000200)=0x78)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
splice(r2, 0x0, r5, 0x0, 0x1ffffd, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfeaf, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x705, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x410}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_OFLAGS={0x8, 0x3, 0x21}]]}}}]}, 0x40}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x1, 0x8, 0x81, 0x42}]}, 0x10)

[  302.876576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13705 comm=syz-executor.3
[  302.882826] FAULT_INJECTION: forcing a failure.
[  302.882826] name failslab, interval 1, probability 0, space 0, times 0
[  302.898167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13705 comm=syz-executor.3
[  302.956375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13705 comm=syz-executor.3
[  302.960573] CPU: 0 PID: 13714 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  302.975660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  302.985028] Call Trace:
[  302.987639]  dump_stack+0x172/0x1f0
[  302.991297]  should_fail.cold+0xa/0x1b
[  302.995204]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  303.000320]  ? lock_downgrade+0x880/0x880
[  303.004485]  __should_failslab+0x121/0x190
[  303.008736]  should_failslab+0x9/0x14
[  303.012552]  kmem_cache_alloc_node_trace+0x274/0x720
[  303.017669]  ? __alloc_skb+0xd5/0x5f0
[  303.021493]  __kmalloc_node_track_caller+0x3d/0x80
[  303.026434]  __kmalloc_reserve.isra.0+0x40/0xf0
[  303.031222]  __alloc_skb+0x10b/0x5f0
[  303.034951]  ? skb_scrub_packet+0x490/0x490
[  303.039288]  ? refcount_add_not_zero_checked+0x240/0x240
[  303.044756]  sock_wmalloc+0xd9/0x120
[  303.048482]  pppol2tp_sendmsg+0x23b/0x6b0
15:53:25 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0xfffffffffffffe6e, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x11b, &(0x7f0000000000), &(0x7f0000000100)}, 0x14)

[  303.052644]  ? selinux_socket_sendmsg+0x36/0x40
[  303.057326]  ? pppol2tp_getname+0xd10/0xd10
[  303.061663]  sock_sendmsg+0xd7/0x130
[  303.065389]  ___sys_sendmsg+0x3e2/0x920
[  303.069383]  ? copy_msghdr_from_user+0x430/0x430
[  303.074155]  ? mark_held_locks+0x100/0x100
[  303.078400]  ? kasan_check_read+0x11/0x20
[  303.082560]  ? __might_fault+0x12b/0x1e0
[  303.086634]  ? find_held_lock+0x35/0x130
[  303.090710]  ? __might_fault+0x12b/0x1e0
[  303.094804]  __sys_sendmmsg+0x1bf/0x4e0
[  303.099058]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  303.103390]  ? kasan_check_write+0x14/0x20
[  303.107645]  ? __sb_end_write+0xd9/0x110
[  303.111713]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  303.117292]  ? fput+0x128/0x1a0
[  303.120601]  ? ksys_write+0x1f1/0x2d0
[  303.124412]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  303.129178]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  303.133938]  ? do_syscall_64+0x26/0x620
[  303.137930]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  303.143301]  ? do_syscall_64+0x26/0x620
[  303.148244]  __x64_sys_sendmmsg+0x9d/0x100
[  303.152500]  do_syscall_64+0xfd/0x620
[  303.156322]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  303.161518] RIP: 0033:0x459a59
[  303.164721] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  303.183640] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  303.191370] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  303.198653] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  303.205936] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  303.213218] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  303.220502] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:25 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@delpolicy={0x50, 0x14, 0x0, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1}}}, 0x50}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
splice(r4, 0x0, r7, 0x0, 0x1ffffd, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r10)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in=@local, 0x4e21, 0x0, 0x4e23, 0x3, 0x5, 0x80, 0x0, 0x2f, r8, r10}, {0xd4, 0x0, 0x800, 0x800, 0x40, 0x4a6, 0x1, 0x2000000000000}, {0x1, 0x40, 0xedc, 0x4}, 0x1, 0x6e6bbf, 0x1, 0x1, 0x2, 0x3}, {{@in=@multicast2, 0x4d2, 0x32}, 0xa, @in=@broadcast, 0x3500, 0x0, 0x0, 0x7, 0x4816, 0x2, 0x2}}, 0xe8)

15:53:25 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)

15:53:25 executing program 0 (fault-call:5 fault-nth:44):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:25 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
timer_delete(0x0)
time(&(0x7f0000000040))

15:53:25 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xaff1}, 0x1fc40, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x1ffffd, 0x0)
r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000280)={0x1, 0x3, 0x2, 0x0, 0x0, [{r0, 0x0, 0x20}, {r4, 0x0, 0x2}]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x23, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffde6, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

[  303.545422] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  303.619671] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  303.643594] FAULT_INJECTION: forcing a failure.
[  303.643594] name failslab, interval 1, probability 0, space 0, times 0
[  303.654917] CPU: 1 PID: 13739 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  303.661855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  303.671340] Call Trace:
[  303.673955]  dump_stack+0x172/0x1f0
[  303.677608]  should_fail.cold+0xa/0x1b
[  303.681519]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  303.686646]  __should_failslab+0x121/0x190
[  303.690897]  should_failslab+0x9/0x14
[  303.694711]  kmem_cache_alloc_node_trace+0x5a/0x720
[  303.699740]  ? __kmalloc_node_track_caller+0x3d/0x80
[  303.704854]  ? rcu_read_lock_sched_held+0x110/0x130
[  303.709896]  ? kmem_cache_alloc_node_trace+0x34f/0x720
[  303.715193]  __kmalloc_node_track_caller+0x3d/0x80
[  303.720139]  __kmalloc_reserve.isra.0+0x40/0xf0
[  303.724830]  pskb_expand_head+0x154/0xe20
[  303.728994]  ? lock_downgrade+0x880/0x880
[  303.733153]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  303.738700]  ? iov_iter_advance+0x261/0xe30
[  303.743044]  l2tp_xmit_skb+0xea8/0x1460
[  303.747046]  pppol2tp_sendmsg+0x4a2/0x6b0
[  303.751217]  ? pppol2tp_getname+0xd10/0xd10
[  303.755560]  sock_sendmsg+0xd7/0x130
[  303.759288]  ___sys_sendmsg+0x3e2/0x920
[  303.763282]  ? copy_msghdr_from_user+0x430/0x430
[  303.768055]  ? mark_held_locks+0x100/0x100
[  303.772302]  ? kasan_check_read+0x11/0x20
[  303.776468]  ? __might_fault+0x12b/0x1e0
[  303.780545]  ? find_held_lock+0x35/0x130
[  303.784617]  ? __might_fault+0x12b/0x1e0
[  303.788710]  __sys_sendmmsg+0x1bf/0x4e0
[  303.792704]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  303.797038]  ? kasan_check_write+0x14/0x20
[  303.801295]  ? __sb_end_write+0xd9/0x110
[  303.805367]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  303.810936]  ? fput+0x128/0x1a0
[  303.814228]  ? ksys_write+0x1f1/0x2d0
[  303.818045]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  303.822817]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  303.827589]  ? do_syscall_64+0x26/0x620
[  303.831577]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  303.836954]  ? do_syscall_64+0x26/0x620
[  303.840959]  __x64_sys_sendmmsg+0x9d/0x100
[  303.845220]  do_syscall_64+0xfd/0x620
[  303.849043]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  303.854238] RIP: 0033:0x459a59
[  303.857445] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  303.876353] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  303.884074] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  303.891356] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  303.898634] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  303.905915] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  303.913199] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:26 executing program 0 (fault-call:5 fault-nth:45):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  303.950922] EXT4-fs error (device loop3): ext4_fill_super:4395: inode #2: comm syz-executor.3: iget: root inode unallocated
[  303.977635] EXT4-fs (loop3): get root inode failed
[  303.982878] EXT4-fs (loop3): mount failed
[  304.132307] FAULT_INJECTION: forcing a failure.
[  304.132307] name failslab, interval 1, probability 0, space 0, times 0
[  304.143719] CPU: 1 PID: 13754 Comm: syz-executor.0 Not tainted 4.19.80 #0
[  304.150671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  304.160038] Call Trace:
[  304.162794]  dump_stack+0x172/0x1f0
[  304.166451]  should_fail.cold+0xa/0x1b
[  304.170356]  ? ipv6_chk_mcast_addr+0x295/0x6f0
[  304.174974]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  304.180099]  ? find_held_lock+0x35/0x130
[  304.184172]  ? ipv6_chk_mcast_addr+0x2cb/0x6f0
[  304.188794]  __should_failslab+0x121/0x190
[  304.193044]  should_failslab+0x9/0x14
[  304.196860]  kmem_cache_alloc+0x47/0x700
[  304.200930]  ? kasan_check_read+0x11/0x20
[  304.205095]  skb_clone+0x156/0x3e0
[  304.208649]  ip6_finish_output2+0x1886/0x2550
[  304.213157]  ? find_held_lock+0x35/0x130
[  304.220013]  ? ip6_mtu+0x2e6/0x460
[  304.223569]  ? ip6_forward_finish+0x4d0/0x4d0
[  304.228077]  ? __lock_is_held+0xb6/0x140
[  304.232158]  ip6_finish_output+0x574/0xbe0
[  304.236406]  ? ip6_finish_output+0x574/0xbe0
[  304.240829]  ip6_output+0x235/0x7c0
[  304.244474]  ? ip6_finish_output+0xbe0/0xbe0
[  304.248896]  ? ip6_fragment+0x3770/0x3770
[  304.253068]  ip6_xmit+0xe44/0x2030
[  304.256633]  ? ip6_finish_output2+0x2550/0x2550
[  304.261313]  ? lock_downgrade+0x880/0x880
[  304.265472]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  304.271024]  ? ip6_append_data+0x320/0x320
[  304.275284]  inet6_csk_xmit+0x2fb/0x5ba
[  304.279270]  ? inet6_csk_update_pmtu+0x190/0x190
[  304.284036]  ? dst_release+0x62/0xb0
[  304.287777]  ? udp6_set_csum+0xe1/0x5a0
[  304.291771]  l2tp_xmit_skb+0x116c/0x1460
[  304.295856]  pppol2tp_sendmsg+0x4a2/0x6b0
[  304.298963] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  304.300016]  ? pppol2tp_getname+0xd10/0xd10
[  304.311680]  sock_sendmsg+0xd7/0x130
[  304.315405]  ___sys_sendmsg+0x3e2/0x920
[  304.319403]  ? copy_msghdr_from_user+0x430/0x430
[  304.324174]  ? mark_held_locks+0x100/0x100
[  304.328426]  ? kasan_check_read+0x11/0x20
[  304.332593]  ? __might_fault+0x12b/0x1e0
[  304.336666]  ? find_held_lock+0x35/0x130
[  304.340743]  ? __might_fault+0x12b/0x1e0
[  304.344837]  __sys_sendmmsg+0x1bf/0x4e0
[  304.348824]  ? __ia32_sys_sendmsg+0xb0/0xb0
[  304.353162]  ? kasan_check_write+0x14/0x20
[  304.357427]  ? __sb_end_write+0xd9/0x110
[  304.361536]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  304.367080]  ? fput+0x128/0x1a0
[  304.370368]  ? ksys_write+0x1f1/0x2d0
[  304.374179]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  304.378942]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  304.383706]  ? do_syscall_64+0x26/0x620
[  304.387692]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  304.393070]  ? do_syscall_64+0x26/0x620
[  304.397173]  __x64_sys_sendmmsg+0x9d/0x100
[  304.401426]  do_syscall_64+0xfd/0x620
[  304.405240]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  304.410525] RIP: 0033:0x459a59
[  304.413727] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  304.432654] RSP: 002b:00007fc5b9da5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  304.440380] RAX: ffffffffffffffda RBX: 00007fc5b9da5c90 RCX: 0000000000459a59
[  304.447659] RDX: 0800000000000059 RSI: 0000000020005fc0 RDI: 0000000000000004
[  304.454943] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  304.462222] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5b9da66d4
[  304.469502] R13: 00000000004c74b8 R14: 00000000004dd1a8 R15: 0000000000000005
15:53:26 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x25}, 0x4}, 0x1c)
listen(r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f00000001c0)=0xfffffffe, 0x4)
sendto$inet6(r2, 0x0, 0xfffffffffffffe4e, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x400000000004e22, 0x0, @empty}, 0x30c)
pipe(&(0x7f0000000380)={<r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
r8 = accept4$alg(r7, 0x0, 0x0, 0x0)
splice(r5, 0x0, r8, 0x0, 0x1ffffd, 0x0)
ioctl$CAPI_GET_ERRCODE(r5, 0x80024321, &(0x7f0000000080))
sendto$inet6(r2, &(0x7f0000000780)="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", 0x218, 0x8000, 0x0, 0x0)
close(r2)

[  304.579573] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  304.625260] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (8100000)
15:53:26 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
timer_delete(0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r4, 0x0, 0x0, 0x0)
r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/mls\x00', 0x0, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x80000)
splice(r3, 0x0, r6, 0x0, 0x1ffffd, 0x0)
write$FUSE_STATFS(r3, &(0x7f00000001c0)={0x60, 0x0, 0x5, {{0xfffffffffffffc00, 0x77f, 0x7ff, 0x3, 0x1f, 0x1, 0x10000, 0x80}}}, 0x60)
r7 = accept4$alg(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r7, 0x0, 0x1ffffd, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180)=0x4, 0x4)
r8 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400400, 0x0)
bind$ax25(r8, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ppp0!\'cpuset\x00'}, 0x10)

15:53:26 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:26 executing program 0 (fault-call:5 fault-nth:46):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:27 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r4, 0x0, 0x1ffffd, 0x0)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x300, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r6, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000000)={0x0, @bt={0x400, 0x1ff, 0x1, 0x1, 0x400, 0x0, 0x100, 0x2, 0x81, 0xffff37b8, 0x40, 0x2, 0x1, 0x80000001, 0x0, 0x38}})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x13)

15:53:27 executing program 3:
openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x2000, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0xfffffed5)
setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000280)=0x3, 0xfffffffffffffff4)
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffed5)
rseq(&(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x100000000, 0x700000000, 0x2}, 0x3}, 0x20, 0x0, 0x0)
ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x0})

15:53:27 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x6, 0x40500)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x2148, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)='syzkaller\x00\xab\xed\xab\xf2\x15\x93\xfb\xaaY\xb9e>\x1e\xcf\xff\x12\xce\xd5\xbb)p4[\x1d\x96\xf1\xd0\x8b\x1b\xfd\x9bC\xaf\x01?\xb7\x14\x1d`/\xc4(\xf2#i\x14S\x99\x98\x84\xe1\xf1\xe5%\xda\x8b\x19\xb1\x8a\xc0\xae\xc8\xb5\x10\x13\x8b|\xb7\x93\xc9\xcf\v\x1cN\x1f6irX\xe3\xb4+zK\xa6\xd78le\xfc\xb6\x9al\x85\xc5Q+\xc6Q^\xe0)}3l\x84\xb0\xca\'\x87\xc3b\x91,\"$\xb2\xfb\xfe?\xa8|\xa9_[\a\x05U\xd2\x15\xe3', 0x21d8, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x40000000, 0x2}, 0x8, 0x10, &(0x7f0000000280), 0x10}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:27 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:27 executing program 3:
rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.\x00')
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffed5)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000000)="ce3cbb0d2b1358a9a392850660fd31dd4f0553d6473707475d68fd6442261f3a0cad1d681ce2b641fdbb0cf7c5495e4a1866eceb2733dc7f91bd81d26d87be9e4bf2bab5bb8e3beb5290d2590d7bd09a62b76353d52a5b284652b7f3d4c8", &(0x7f0000000080)=""/62}, 0x20)

15:53:27 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000002, 0x0)

15:53:27 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1, 0x101000)
exit(0x0)
timer_delete(0x0)

15:53:27 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000003, 0x0)

15:53:27 executing program 4:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/17, 0x20000, 0x1000}, 0x18)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000040)={0x2c, 0x0, r2}, 0x10)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x482801, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000200)={0x55, "3b3ded82ee87b3f62e94167d087fded1a118594b012ce1a12285cd315bbbaa997ee9acba56de1251a69ab675eba2a5fee87623f56b33b15ac18549d3d43efbad77fed10ce2fb85722601603bb4d2280ac1f2cd7f7d"})
bind$xdp(r0, &(0x7f0000000280), 0x10)
inotify_init1(0x80000)

15:53:28 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000004, 0x0)

15:53:28 executing program 4:
pipe(&(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
symlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100)='./bus\x00')
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2)
gettid()
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
pwritev(r2, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r2, 0x0, 0x20000102000007)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

15:53:28 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000005, 0x0)

15:53:28 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x58, 0x40000)
syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x9, 0x80002)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0xe886306a5a2549, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c80, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3)

15:53:28 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000006, 0x0)

15:53:28 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0))
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={0x0}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
modify_ldt$read(0x0, &(0x7f0000000380)=""/227, 0xe3)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b800000019000100000000000000000800000000000000040008000000000001e000190100000000000000fbff000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x3}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000001540)="240000001a00d17da53a7436fef7001d0a0b49ffed00000080002800080003000100", 0x22)
read(0xffffffffffffffff, &(0x7f0000001700)=""/4096, 0x1000)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000)={0x0, 0x6}, 0x2)
socket(0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00'})
openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
setresuid(0xee00, 0x0, 0x0)
close(0xffffffffffffffff)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)

15:53:28 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000007, 0x0)

[  306.335127] netlink: 'syz-executor.4': attribute type 6 has an invalid length.
[  306.405321] netlink: 'syz-executor.4': attribute type 6 has an invalid length.
15:53:28 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000008, 0x0)

15:53:28 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0xfffe}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
syz_open_dev$vbi(0x0, 0x2, 0x2)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x84)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0xb3}, 0x4)
io_setup(0x1fd, &(0x7f0000000000)=<r1=>0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
io_submit(r1, 0x1, &(0x7f0000001a00)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}])
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
accept4$alg(r4, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_script(r5, &(0x7f0000000380)=ANY=[], 0xfffffed5)
io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, r4, &(0x7f0000000080)="14e55a7b7df4242b2e94bf2d1f05c16b402d75afef", 0x15, 0x8, 0x0, 0x2, r5}, &(0x7f0000000100))
write$cgroup_int(r0, &(0x7f0000000040), 0x84)
pipe(&(0x7f0000000380)={<r6=>0xffffffffffffffff})
r7 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x204400)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_script(r8, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r8)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r10 = accept4(r9, 0x0, 0x0, 0x0)
r11 = accept4$alg(r10, 0x0, 0x0, 0x0)
splice(r6, 0x0, r11, 0x0, 0x1ffffd, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r6, 0x80386433, &(0x7f00000001c0)=""/82)
close(r0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)

15:53:28 executing program 5:
timer_create(0x8b19f4743923cbee, 0x0, &(0x7f00000000c0))
exit(0x0)
timer_delete(0x0)

15:53:28 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000100))
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000008c0)={{0x0, 0x1, 0x45, 0x2219, 'syz0\x00', 0x5}, 0x1, [0x101, 0x80000000, 0x7ff, 0x3f, 0x7f, 0x80000000, 0x7fffffff, 0xc9b3, 0xfffffffffffffffe, 0x40, 0x401, 0x5, 0x3, 0x9, 0x7fffffff, 0x3, 0x10001, 0x200000000000, 0x4d, 0x1, 0x3, 0xceb, 0x5, 0x2, 0x9, 0x4, 0x73, 0x27e, 0x6, 0x7f, 0x6, 0x4, 0xed, 0x5, 0x5, 0x8, 0x3f, 0x80000000, 0x5, 0x6, 0xa, 0x4, 0x0, 0x3, 0xfec5, 0x10000, 0x0, 0x0, 0x8, 0x2, 0xffc0000000000000, 0x800, 0x40, 0x4, 0x8, 0x7, 0x4f9c, 0x9, 0x10001, 0xcf5d, 0x7, 0x8000, 0x2, 0x10000, 0xffffffff, 0x8, 0x1ff, 0x1, 0xf09, 0x8, 0x40, 0x1000, 0x2, 0x1bb, 0x4, 0x9, 0x8, 0x2, 0x6, 0x3, 0x2, 0xffffffff, 0x6, 0x1, 0x7ff, 0x1, 0x338, 0x7, 0x1, 0x7f, 0x2, 0x2, 0x0, 0x101, 0x3, 0x9, 0x6, 0x401, 0x7f, 0x4, 0x1, 0x5, 0x10000, 0x20, 0x7, 0x3, 0xd1cc, 0x2, 0x35, 0x1f, 0xb67, 0x1, 0x5, 0x3, 0x0, 0x3, 0x5, 0x41a, 0xff, 0xcad, 0x30, 0x9f5, 0x8, 0x6, 0x6, 0x1000, 0x401], {0x0, 0x989680}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0x701, 0x0, 0x0, {0x0, r6, {0x2}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_script(r8, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0)
ioctl$EVIOCGUNIQ(r12, 0x80404508, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r13=>0x0, <r14=>0x0})
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r11, 0xc0385720, &(0x7f00000000c0)={0x1, {r13, r14+30000000}, 0x0, 0x5})
write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f00000002c0)={0x0, 0x14d114775de95e04, 0xfa00, {0x1, &(0x7f0000000140)={<r15=>0xffffffffffffffff}, 0x200, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r10, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x4, 0x0, 0x8, 0x100000000, 0x5, 0x3}, r15}}, 0xffffffffffffffad)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000b80)={0x3, &(0x7f0000000b40)=[{}, {<r16=>0x0}, {}]})
ioctl$DRM_IOCTL_GET_CTX(r11, 0xc0086423, &(0x7f0000000c00)={r16})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r10, 0xc010641d, &(0x7f0000000100)={r16, &(0x7f0000000000)=""/250})
ioctl$DRM_IOCTL_NEW_CTX(r8, 0x40086425, &(0x7f00000003c0)={r16, 0x2ad320286177b8fb})
r17 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r17, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r18 = accept4(r17, 0x0, 0x0, 0x0)
accept4$alg(r18, 0x0, 0x0, 0x0)
bind$xdp(r2, &(0x7f0000000140)={0x2c, 0x4, r6, 0x9, r18}, 0x10)

15:53:28 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000009, 0x0)

15:53:29 executing program 3:
open(&(0x7f0000000600)='./file0\x00', 0x40000, 0x80)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x97}], 0x1, &(0x7f0000000180)=""/21, 0xfffffffffffffc5a, 0x177}, 0x3f00)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x3bab9cdf30b23e8}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xa8, 0x2c, 0x400, 0x70bd2c, 0x25dfdbfc, {0x7}, [@generic="b3d74e789875cb830d4422409d685e1f6091f1f4c6ddd82a1ee85f6fa3c4916487c3dfdbcb67b89f7c4112", @typed={0x8, 0x72, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="916cc017b77fb7ebde24afaac2157f6acd892773a5e4e5695677b60cf1b7c05d4af82e2ff07f94213aba24172fd4e39c4627e862fd0c0956acd2a172d846115b844816c1c7cc801fa07fa04b135c3526d3fd13fedeabced273d9181134a6027447"]}, 0xa8}, 0x1, 0x0, 0x0, 0x20}, 0x4040010)
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x65)
r2 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$ceph(&(0x7f0000000440)='ceph\x00', &(0x7f00000004c0)='./file0\x00', 0x7, 0x2, &(0x7f0000000580)=[{&(0x7f0000000500)="f5d5df5fa5ac3ea0", 0x8}, {&(0x7f0000000540)="1589ba43f3a9", 0x6, 0x5}], 0x1000, &(0x7f00000005c0)='\x00')

15:53:29 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000000a, 0x0)

15:53:29 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000000b, 0x0)

15:53:29 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000000c, 0x0)

15:53:29 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f00000002c0)=""/199, 0xc7, 0x60000002, 0x0, 0x0)
creat(&(0x7f0000000040)='./bus/file0\x00', 0x0)
truncate(&(0x7f0000000200)='./bus/file0\x00', 0x3)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
open(&(0x7f0000000140)='./bus/file0\x00', 0x1, 0x0)

15:53:29 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_percpu\x00', 0x0, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000440)={'broute\x00', 0x0, 0x3, 0x1000, [], 0x1, &(0x7f0000000400)=[{}], &(0x7f00000008c0)=""/4096}, &(0x7f00000004c0)=0x78)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
splice(r4, 0x0, r7, 0x0, 0x1ffffd, 0x0)
mq_getsetattr(r4, &(0x7f0000000100)={0x6d4, 0x1000, 0x0, 0x3f, 0x9, 0x10001, 0x3, 0x7}, 0x0)
write$binfmt_script(r3, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000280))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
pipe(&(0x7f0000000380)={<r8=>0xffffffffffffffff})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r10 = accept4(r9, 0x0, 0x0, 0x0)
r11 = accept4$alg(r10, 0x0, 0x0, 0x0)
splice(r8, 0x0, r11, 0x0, 0x1ffffd, 0x0)
ioctl$SG_SET_TIMEOUT(r8, 0x2201, &(0x7f0000000500)=0x7)

15:53:29 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000000d, 0x0)

15:53:29 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
timer_delete(0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x84000, 0x0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x98)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r3}, &(0x7f0000000100)=0x8)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0)

15:53:29 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000000e, 0x0)

15:53:29 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000000f, 0x0)

15:53:30 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000010, 0x0)

15:53:30 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000011, 0x0)

15:53:30 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000012, 0x0)

15:53:30 executing program 5:
timer_create(0x6, 0x0, &(0x7f0000000040))
exit(0x0)
timer_delete(0x0)

15:53:30 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:30 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp(0x0, 0x1, 0x0)
r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
r1 = syz_open_dev$vivid(0x0, 0x1, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="07000038e387aa060000000000000000000000126f6d5929cf8d0b05abc000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000cceb80000000c00020008001100"/38], 0x3c}}, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0)
r3 = memfd_create(&(0x7f0000000380)='vmnet1posix_acl_accesswlan0\x00', 0x0)
pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x0)

[  308.614466] selinux_nlmsg_perm: 69 callbacks suppressed
[  308.614497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34787 sclass=netlink_route_socket pig=13953 comm=syz-executor.3
[  308.699843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34787 sclass=netlink_route_socket pig=13958 comm=syz-executor.3
[  310.822042] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.857831] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.038274] device hsr_slave_1 left promiscuous mode
[  314.119577] device hsr_slave_0 left promiscuous mode
[  314.180159] team0 (unregistering): Port device team_slave_1 removed
[  314.192275] team0 (unregistering): Port device team_slave_0 removed
[  314.202716] bond0 (unregistering): Releasing backup interface bond_slave_1
[  314.251462] bond0 (unregistering): Releasing backup interface bond_slave_0
[  314.333872] bond0 (unregistering): Released all slaves
[  314.403517] IPVS: ftp: loaded support on port[0] = 21
[  314.475244] chnl_net:caif_netlink_parms(): no params data found
[  314.519996] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.526564] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.533986] device bridge_slave_0 entered promiscuous mode
[  314.542073] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.548681] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.555841] device bridge_slave_1 entered promiscuous mode
[  314.573595] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  314.583228] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  314.650843] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  314.658931] team0: Port device team_slave_0 added
[  314.664820] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  314.672623] team0: Port device team_slave_1 added
[  314.678313] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  314.686176] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  314.747885] device hsr_slave_0 entered promiscuous mode
[  314.796020] device hsr_slave_1 entered promiscuous mode
[  314.836292] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  314.843433] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  314.866891] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.873300] bridge0: port 2(bridge_slave_1) entered forwarding state
[  314.880046] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.886468] bridge0: port 1(bridge_slave_0) entered forwarding state
[  314.950418] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.965386] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  314.982783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  314.992105] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.004386] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.017877] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  315.023977] 8021q: adding VLAN 0 to HW filter on device team0
[  315.041304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  315.055238] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.061700] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.092228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  315.102747] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.109206] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.135438] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  315.151424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  315.162223] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  315.176374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  315.185076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  315.198674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  315.209594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  315.229699] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  315.239613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  315.250567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  315.265530] 8021q: adding VLAN 0 to HW filter on device batadv0
15:53:37 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7fff, 0x20000)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)

15:53:37 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000013, 0x0)

15:53:37 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x1e9e, 0x6c, 0x9, 0x9, 0x8, 0x5, 0x6, 0x1, 0x8, 0x6, 0x56, 0x8000})

15:53:37 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
timer_delete(0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffed5)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@int=0x1, 0x4)

15:53:37 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
getpid()
ptrace$getregset(0x4205, 0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000180))
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x0, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_script(r3, &(0x7f0000000380)=ANY=[], 0xfffffed5)
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
splice(r4, 0x0, r7, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_script(r8, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0xb0002, 0x0)
ioctl$EVIOCSABS3F(r9, 0x401845ff, &(0x7f0000000240)={0x700, 0x3ff, 0x930, 0x7fffffff, 0x3, 0xaa4})
ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000080)={<r10=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000000c0)={r10, 0x140000, r2})
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f00000001c0)=0x4, 0x4)
ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5)
umount2(0x0, 0x0)

15:53:37 executing program 4:
creat(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000340))
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000))
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x40000000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
accept4$alg(r2, 0x0, 0x0, 0x0)
write$binfmt_misc(r2, 0x0, 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x0, 0x0)
clock_nanosleep(0x7, 0x3, &(0x7f0000000040)={0x0, 0x989680}, 0x0)

15:53:37 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000014, 0x0)

15:53:37 executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0))
ftruncate(r1, 0x2081fc)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0xffffffffffffff3b)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
splice(r3, 0x0, r6, 0x0, 0x1ffffd, 0x0)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000000)=""/88)
open(&(0x7f000000fffa)='./bus\x00', 0x10880, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x3800006, 0x100010, r3, 0x1000)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x3a9)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$binfmt_script(r10, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$TCSETSF(r10, 0x5404, &(0x7f0000000080)={0x5, 0x7, 0xfff, 0x484, 0x10, 0xfd, 0x7f, 0x42, 0x5, 0x80000001, 0xfffff23d, 0x8})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

15:53:38 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000013, 0x0)

15:53:38 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000015, 0x0)

15:53:38 executing program 4:
r0 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="3d4b5ca4ef0730bedfe6a9ce04094365443fdd7c9f350a4e31968c0d887b3e38e749e727ce0b8a254e668274d8f171d35cee04f51f83151ea5e4a41eaf20b77f9d54e22f33c35910f1a7b222d1fabb602b1ef02fc19202e298c635f7f39b97245688c9bc3d2d3a78512f469372968fad997b08d5aaa6f055097a81e9a3c74d1c0d3b210e96587465e87902c70d8886c90c6687d833752658bcc91b58639dc074b2780bd4565d82c0f033439e71acc9b697e218bd53e5390338b737ea624e12046cf6ff0aed372b9e4c54c765926c1b2a8b67afcf1c98b2a44804f9ccbfb608bafe", 0xe1, 0xfffffffffffffff9)
add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="50458cf2577bff1eb97bef65354fd9b895eb7cff1acfc4c32a2234c1e10f705f45b4d859e6d2bd3f51d34d210e42ebd428776adce80865fbf091c6de5ae051a8af0496cb0aedda4248f75ff229aaae2280f16c6b9db8780bdd881a3d60c04e252bd0d6b56eea1ba02af967a870f114fe3fd8c64686544531dc47c1c91ed8ae35f5f711556d160b2b88c902d4d2d5a2897869d3888d3cc055ea042a9c19f8f0675c6b1c3db4d13c6a8ddca8aa0c12493e4e87dc540835b3501b89de2225289be6e254c021", 0xc4, r0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x204000, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={<r2=>0x0, 0x80000001}, &(0x7f0000000380)=0x8)
io_setup(0x9, &(0x7f00000003c0)=<r3=>0x0)
r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000400)='cpuset.mem_exclusive\x00', 0x2, 0x0)
r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
io_submit(r3, 0x3, &(0x7f0000000740)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x2, 0x9, r4, &(0x7f0000000440)="7aee41ff5d84d7dc9a86daabf19ba6277427e8cb0ed8207602d012003cf4f74a36441832cae776960518e9dc54e5b2f7b5fd03015b884525f977b56cf25491301898509e7e5d89deb4ebece9b909cd5a6bff5dd4474f6ddcd75f7386794e6464a42f671893a800939c0eb411f0554daf52a0c51e72460c81569df79f498c7eab2ac8c2e2754d0b5ede9295ae550e1141858a46d4412073cb20234fd6cbca1711173c0bfe179b3700ede42f7f22fd3e7e7213b5ec0d96f604684728763abf8665b91be5", 0xc3, 0xffffffff, 0x0, 0x0, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f00000005c0)="dc56621b8d0b4d754d2120bf52c431447f552dbcbf77aff3d3ff93ba09be7003fe9e08d4ed13d834d0587bd5c42c8f873ad9df124ed6f534d0becb500f0eca1fcef908ed1058bc2620cc0e6759d5f96f15441a860d48a8bb3b8f81fbbe4069469a65c2c42f82039d88e09eb993d78886", 0x70, 0x0, 0x0, 0x2, r1}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x6, 0x42, r1, &(0x7f0000000680)="804d5c264991363c42e89fd9370fc2769ec660e739fe16c89c0bcd0eff8454a5b31b19f36dbc294876c714a5df454b00b5df89270c53bc4696465994689c00068bfa9a7ef9741dcf38dd6e803304dadec856dc5994519d882fadbbba32f8b4322aeba665a00e27c9f44d54dc203f7350", 0x70, 0x2, 0x0, 0x3, r1}])
r6 = add_key$keyring(&(0x7f0000000780)='keyring\x00', &(0x7f00000007c0)={'syz', 0x3}, 0x0, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000840)={<r7=>0x0, <r8=>0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000800)='cpuset.mem_exclusive\x00'}, 0x30)
ioprio_get$pid(0x0, r7)
ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000880))
r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000008c0)={<r10=>r2, 0xff7b, 0x7}, &(0x7f0000000900)=0x8)
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000940)={0x7, 0x6d, 0x2}, 0x7)
ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000980)={0x9, {0x200, 0xffff, 0x80000001}})
r11 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/capi/capi20\x00', 0x200201, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000a00)={r10, @in={{0x2, 0x4e21, @remote}}, 0xe45, 0x1, 0xac, 0xfffffff7, 0x1}, &(0x7f0000000ac0)=0x98)
r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/btrfs-control\x00', 0x13c440, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000c80)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000cc0)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000dc0)=0xe8)
sendmsg$nl_generic(r12, &(0x7f0000003440)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4044a00}, 0xc, &(0x7f0000003400)={&(0x7f0000000e00)={0x25c8, 0x2a, 0x4, 0x70bd2d, 0x25dfdbfe, {0x1c}, [@nested={0x10, 0x13, [@typed={0x8, 0x43, @uid=r13}, @typed={0x4, 0x4}]}, @generic="955a1c7b78ece5c6bdb51603ad045a3bacbabc115ae1f126cd9f0377639efb43385d0c08b4c6d0294dcb07727250be684c87e8d45b951ce9ed56d6642d", @nested={0x170, 0x2e, [@generic="161bb73e83b2fd109e133a78a6dfd48134e712f0a382e875daf300b0b55d26ddc492e63ba7ab7862b1156276448a6049a5414850ab2a38011c3d2656ff480d5f680f205d9183c542c29c99fd05b147f53dfe0d25314088a873cff3e893d61d27c310efc98527045fbc9c", @generic="2db4c0372ee0bdbb94c3d3bd5e0e3d8c3e66bb9751b25b237f404c232ed5f5dbcf7c30b71eec775d54834f9b82632ef5e20f9bd3cfb92ff02abc8ce6e0aeff666af4f4021a84484a6aac10f8904809eea67b2c44954d7142ed6fa4b5ce019c950e8de9adc8d2d983eb825cf778bc0f70af9351eebb25f2552bf730b29e377d07ab383d30e6b7352d8a1cd47c6fed2973dc8eff4637a7083eaf", @generic="8fdc470de468236233ebc325dd064968e8fdf0c5f886269b41ac19e517ef18f19200b260ba04b117173a86eb23c63ebdc2dda6b07e47d0098dc75b2af3187c253ce45ea88ad4020a53d68cc45cc844159e4272468b4baf0eba84c0d5", @typed={0x4, 0x40}, @typed={0x8, 0x9, @str='\'}-\x00'}]}, @generic="613fd14aa7", @typed={0xc, 0x75, @u64=0x401}, @typed={0x4, 0x41}, @generic="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", @nested={0xb8, 0x65, [@generic="d4a71eb95fd6f1670b855f7f85cb5967c3b7d19607839bb8462a69b663bbccefa404af0bd44a64be04b8aead0d1131c35f5552f96ba659e901e2c8d01ae45e369e77451e98d227628a332c2ea79547d5a25e5fa46cd1909be466750a90024c3c532e76363527cd1c6cdeecf84ff86b69c356f097a26af8a3ef42f0aeb46c77ef8ebb9d234e434d2bda2e621770c772875ed81a4f17b90476dae827d636e1", @typed={0x8, 0x56, @pid=r7}, @typed={0xc, 0x7c, @u64=0x400}]}, @nested={0x2a8, 0x65, [@typed={0x8, 0x85, @fd=r11}, @generic, @generic="135355ce675404b404f7861c24bf20027bec162a0ce67111884c15cacd99e3146bd5eeb003d7ddf263a0ca3dc5f7b6dbc3e932ae4325a006bba12f9f2a5b84e9b919f227dc11026d97aae4e45ea0a6a18f1c479d7e91b8453d4d1ed90fa06783b256073fb9892fa5425f", @typed={0x4, 0x5e}, @generic="e501502f513aebaeae333b163a1061553a46e9a542b13553e8be5badcec08e6e101b0ef157be45eb53863ce89c56eda5c52262f8ed1ba2ba670295b5b7a70c88897574c080f4a03b4eae2bdb2e8863d554d42ad8cf5a92c8fbcd72ad9b37c7c2ca7776cbd8e8f267fd222ff9cf810a5984bf9257fae63e735115e770051b2e525621f0b1401b260f6a9475dea9de9e06263ef3e3d79dd1e45e6fb5a6523edc98c4192d8dd9833a2d9a", @generic="85c89aca97c17b81142c58d6df1e68994e941c434afbf79a4aa1035634288add3287da425a386968f37f0d6a9285b351f19918c75cdc2844ad9aea6aa266fa84635b3a7f3a796c21decbe8e3634a59d25604a8ed1d6864fea234145f1b2d354bcf70096e286accaa9614f2bc44b5b6d6ce813aca0b9e02b694e6b5e55fbd08c06cd2793c1b1d2c40b5b61498e5be2c96d29e39b576e007c12e8c92e8d8ffd5bc1841db39b7300bbb952352ffe0ba7fbc7612eed9e0e4d7771522", @typed={0xb8, 0x35, @binary="ba1970e1359b3fe3fe9f8d279dbec4fb08382b094788a2dc979f59359be049906ac6e963389ff4405e824e7a5484c6c5dd5d1feca8761c1abba6bd01a7d3a86b10cccca5ff47543bac66508e1966b827a8c0d0815181e9703805709a42133d0af9b2c449cac8a7ddbe26ddc83211b9324d8a4209d307d26339fadab705f6909ee3819c484628870195ae4d6b96eca84f4a0813503549a1d793662237c4baa5722be35f1bd9651e470d5e53d5518a12380d53c6"}, @typed={0x10, 0x89, @str='*nodevwlan1\x00'}]}, @nested={0x1080, 0x73, [@typed={0x8, 0x7c, @u32=0x3a8}, @generic="2d6fed614732673a4127ebc03a07605cf681d100331bd0baccd768281fca8919284a7571c75bdec301587626cfc90bc79f7b8792693b88297e8b64891e6a311925ea4209df2c5510dca769d206de876957d9db42ef8a5d7c02b8591a9a0736ee473a3f18e72e54", @typed={0x1004, 0xe, @binary="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"}, @typed={0x8, 0x28, @uid=r14}]}]}, 0x25c8}, 0x1, 0x0, 0x0, 0x800}, 0x28001)
r15 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003480)='/dev/sequencer\x00', 0x18140, 0x0)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r15, 0xc0845658, &(0x7f00000034c0)={0x0, @bt={0x3000000, 0x9, 0x1, 0x2, 0x3, 0xfffffffc, 0x307, 0x0, 0x6, 0x1, 0x555, 0xc8, 0x0, 0x1, 0x12, 0x20}})
mount$9p_virtio(&(0x7f0000003580)='+\'\x00', &(0x7f00000035c0)='./file0\x00', &(0x7f0000003600)='9p\x00', 0x4000, &(0x7f0000003640)={'trans=virtio,', {[{@cache_loose='cache=loose'}, {@cache_loose='cache=loose'}, {@fscache='fscache'}, {@afid={'afid'}}, {@uname={'uname', 0x3d, '*nodevwlan1\x00'}}, {@cache_loose='cache=loose'}, {@cachetag={'cachetag'}}, {@version_u='version=9p2000.u'}, {@msize={'msize', 0x3d, 0x8}}], [{@audit='audit'}]}})
r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003740)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r15, &(0x7f00000038c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003880)={&(0x7f0000003780)={0xd4, r16, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2d1}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf6}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lapb0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x4)
getpeername$inet6(r5, &(0x7f0000003900)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000003940)=0x1c)
r17 = fcntl$dupfd(r8, 0x406, r4)
ioctl$UI_DEV_SETUP(r17, 0x405c5503, &(0x7f0000003980)={{0x1f, 0x3, 0x10, 0x1000}, 'syz1\x00', 0x32})

15:53:38 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x2)

[  316.159712] audit: type=1400 audit(1571586818.310:140): avc:  denied  { execute } for  pid=13999 comm="syz-executor.3" path="pipe:[50855]" dev="pipefs" ino=50855 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=fifo_file permissive=1
15:53:38 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000015, 0x0)

15:53:38 executing program 5:
timer_create(0x5, 0x0, &(0x7f0000000000))
exit(0x0)
r0 = getpid()
modify_ldt$write(0x1, &(0x7f0000000080)={0x7, 0xffffffffdfffffff, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10)
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r4, 0x0, 0x1ffffd, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0xb4, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xa0, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x24}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xb4}}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x50000281}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r6, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7c19}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x30}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x509}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}]}, 0x90}}, 0x20034)
sched_getparam(r0, &(0x7f0000000040))
timer_delete(0x0)

15:53:38 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
unshare(0x8000400)
mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00')
preadv(r2, &(0x7f00000017c0), 0x315, 0x800000)

15:53:38 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x4)

15:53:38 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x98)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e20, 0x0, @mcast2, 0x20}}, 0x9, 0xd1d}, 0x90)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008105e00f80ecdb4cb904021d65ef0b007c05e8fe55a10a000500ac14142603000e00050000000000812fa800040029000000e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0)

[  316.537642] IPVS: Error joining to the multicast group
15:53:38 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x800, 0x0)
ioctl$VFIO_GET_API_VERSION(r0, 0x3b64)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, 0x0, 0x202, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x531d6d9bd6aafdfc, 0x22}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44}, 0x40)
r2 = inotify_init1(0x100000)
r3 = socket$kcm(0x29, 0x5, 0x0)
r4 = syz_open_pts(r0, 0x101100)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/load\x00', 0x2, 0x0)
r6 = eventfd2(0x7, 0x80800)
r7 = epoll_create1(0x180000)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x280800, 0x0)
r9 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0xff, 0x258100)
ppoll(&(0x7f00000002c0)=[{r2, 0x80}, {r3, 0x100}, {r4, 0x920}, {r1, 0x2a00}, {r5, 0x4000}, {r6, 0x1c4}, {r7, 0x1068}, {r8, 0x202}, {r9}, {0xffffffffffffffff, 0x1000}], 0xa, &(0x7f0000000340), &(0x7f0000000380)={0x10001}, 0x8)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
r10 = syz_open_dev$vbi(&(0x7f0000000440)='/dev/vbi#\x00', 0x2, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205648, &(0x7f00000004c0)={0x980000, 0x8, 0x1, [], &(0x7f0000000480)={0x9b090f, 0x51d6, [], @ptr=0x800}})
r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x1, 0x0)
write$binfmt_aout(r1, &(0x7f0000000540)={{0xcc, 0x3f, 0x8, 0x2ef, 0x14, 0x4, 0x38a, 0x3}, "3cbfcb8a06fb2aeddcf03de01ad718c7fc2055c9300211aee3787fcbb2d2eb07f19fbf011954621f57468192fe727adfcfb050dedd105cc403c834e677a2eda5b97e7862656b105271902b00298511861ae0fe585a114ffa77aef2de8c711fbb1561a8d283776d71fd27c4874e1494ec80815dfde605208431f58daeb536728f8eb6fa7c41c8b11ceca6d724be27e3d04d6ea9fa770db58db81eb07ab10357d11fe4b356c0f78bf7a26f0799bf03ebccbcde08f4c3feeaf45c4a2291523203b90c16766c43fb8577529a26e5973406f4affaec93525634b81bd3f3ace5aad8ee202d1342044bbf409aae59136ca32eb214", [[], []]}, 0x311)
r12 = openat$ion(0xffffffffffffff9c, &(0x7f0000000880)='/dev/ion\x00', 0x8100, 0x0)
r13 = socket$vsock_dgram(0x28, 0x2, 0x0)
ioctl$FICLONE(r12, 0x40049409, r13)
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000a00)={0x4, 0x0, &(0x7f00000008c0)=[@register_looper], 0xfc, 0x0, &(0x7f0000000900)="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"})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000a40)={<r14=>0xffffffffffffffff})
accept4$inet(r14, 0x0, &(0x7f0000000a80), 0x80000)
syz_open_dev$radio(&(0x7f0000000ac0)='/dev/radio#\x00', 0x1, 0x2)
r15 = syz_open_dev$midi(&(0x7f0000000b00)='/dev/midi#\x00', 0x7f, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r15, 0x0, 0x48f, &(0x7f0000000b40)={0x2f, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x2, 'none\x00', 0x20, 0x20, 0x16}, 0x2c)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000b80))
r16 = openat$audio(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/audio\x00', 0x8000, 0x0)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r16, 0x800442d4, &(0x7f0000000c80)=0x8)

[  316.756731] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=14046 comm=syz-executor.3
[  316.768367] netlink: 'syz-executor.1': attribute type 5 has an invalid length.
[  316.782669] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  316.850655] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=751 sclass=netlink_tcpdiag_socket pig=14046 comm=syz-executor.3
15:53:39 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x5)

[  316.900211] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=14046 comm=syz-executor.3
[  316.930985] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=751 sclass=netlink_tcpdiag_socket pig=14051 comm=syz-executor.3
15:53:39 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x9082, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x80000001, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xffffffffffff2fff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:53:39 executing program 3:
pipe(&(0x7f0000003240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000000)={0xb194, 0x3, 0x800})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x8, {0x453, 0x5, 0x3, 0x80000001, 0x56f, 0x400}})

15:53:39 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x2819f73f7eba4ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8c0d4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x14001, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
fchdir(r0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r5, r6, 0x0, 0x1000007ffff00c)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
getpeername$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10)
recvmsg(r3, 0x0, 0x40)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000380)={0x3, <r7=>0xffffffffffffffff, 0x1})
signalfd4(r7, &(0x7f00000003c0)={0x5}, 0x8, 0x80000)
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000280)=""/202)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x0)
syz_genetlink_get_family_id$nbd(0x0)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

15:53:39 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x7)

15:53:39 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
timer_delete(0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000040)={0x0, 0x0, {0x68, 0x4cb6, 0xc83e, 0x6000000}})

15:53:39 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xa)

15:53:39 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x109000})
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_script(r4, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
pipe(&(0x7f0000000380)={<r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
r8 = accept4$alg(r7, 0x0, 0x0, 0x0)
splice(r5, 0x0, r8, 0x0, 0x1ffffd, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000040)='\x00', 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffdb6)
setsockopt$sock_void(r3, 0x1, 0x1f, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x200)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:53:39 executing program 4:
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
setsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f0000000040)=0x3b, 0x4)
syz_emit_ethernet(0xae, &(0x7f0000000080)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x78, 0x6, 0x86ddffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x608], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x13}, @mcast1, [@dstopts={0x2c, 0x4, [], [@jumbo={0xc2, 0x4, 0x400}, @ra, @jumbo, @jumbo, @enc_lim, @ra, @jumbo]}, @routing={0x0, 0x2000000000000025, 0x0, 0x0, 0x0, [@empty]}]}}}}}}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000180)=""/203, &(0x7f0000000280)=0xcb)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000140)=@v2={0x2, @adiantum, 0x1, [], "770e44d1fdd6d5cdd05715d8999358d9"})

[  317.515382] netlink: 'syz-executor.1': attribute type 5 has an invalid length.
[  317.559413] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
15:53:39 executing program 4:
perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2b00, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x1ffffd, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x58)

15:53:39 executing program 1:
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlockall(0x3)

15:53:39 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xe)

15:53:40 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x3a)

15:53:40 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x58)

15:53:40 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r4, 0x0, 0x1ffffd, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r6, 0x301}, 0x14}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x48, r6, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0xe9cd, 0x1]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x4, 0x1, 0x5, 0x2, 0x1]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xfffffc01, 0xa2f, 0x2]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x400c050)

15:53:40 executing program 3:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {0x2}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000000f00000025000000000000009500000000000000c7945fa8aca77df7b091c97554bb657c101e460080000000000000075900001943449fc1dcf86e495e44fa58f61edfb1b5af0274"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffef1}, 0x48)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x1, 0x1}, 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = getpid()
gettid()
r9 = socket$kcm(0x2b, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, 0x0)
write$cgroup_pid(r9, &(0x7f00000002c0)=r8, 0x12)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00\xc7\xbal&\x1e\xab\ry\xab0\xe6\f<\xed_\xee\xe6\x1b\xc9\xb0\t\x81\xac\x03\xa8s+\x8di\xb7V\xde\x15\xd3,\xb4\xeb\xcfwz\x1b\xac\xf8\xff\xbd\xe4\xa2\x84\v\x17\xf4*\x14\x83\r\xe2>*\xd4{\xdcH\x1b_\xab&\x98\x1b\xd7\x9b\xe9\xd7A\xe2\xc4\xfc\x03\xc9^\xb8\xd4Z\xee\x98', 0x2761, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000140)=ANY=[@ANYBLOB='/rdma \x00cpury /cpu '], 0x18)
write$cgroup_int(r10, &(0x7f0000000080)=0x900000000000000, 0x297ef)

15:53:40 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x60)

15:53:40 executing program 4:
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0)
r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
accept4$alg(r2, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000300)={<r3=>0x0, 0x8, 0x3, 0x3, 0x1, 0x101}, &(0x7f0000000340)=0x14)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)={r3, 0x67, "5ba20b3b33247515e295fc1d071cf19da2106a1b4eeaae508d57edc52ac90598029685ce77f1656d11e8f1aa9da1e71c3f944d941062f5f69a2d1d6b8ca5a56601e0ba52d055632a3eef412c114b7f7db287cb4e87e2b56fc600fccf070ca0d05edc884de3468c"}, &(0x7f0000000400)=0x6f)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r4 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x1001, r4)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)='&:}:/$lo[em1vboxnet1wlan1,\x00')
pipe(&(0x7f0000000380)={<r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
r8 = accept4$alg(r7, 0x0, 0x0, 0x0)
splice(r5, 0x0, r8, 0x0, 0x1ffffd, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r8, &(0x7f0000000440)={0x20002004})
connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, 0x10)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000180)}}, 0x10)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockname(r9, 0x0, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_MAXSEG(r9, 0x84, 0xd, 0x0, 0x0)
unshare(0x40000000)

15:53:41 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2)
connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1, {0x7f, 0x6, 0x1, 0x5, 0x4}, 0x16, 0xff}, 0xe)
ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x1, 0x1)
unshare(0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000100)=0x54)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040), 0xc)

15:53:41 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x15c)

[  319.023419] IPVS: ftp: loaded support on port[0] = 21
15:53:41 executing program 3:
r0 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@dev, @dev}, &(0x7f00000000c0)=0xc)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
accept4$alg(r2, 0x0, 0x0, 0x0)
getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000400)=""/1, &(0x7f0000000440)=0x1)
listen(r0, 0x100000000000012)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
accept4$alg(r4, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000001c0)={<r5=>0x0, @in6={{0xa, 0x4e20, 0x6, @empty}}, [0x8, 0xc9b, 0xa7e7, 0xffff, 0x9, 0x0, 0x3, 0x6, 0x6, 0x4, 0x7, 0x9, 0x1ff, 0x100000001, 0x1]}, &(0x7f00000002c0)=0x100)
r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/checkreqprot\x00', 0x200, 0x0)
ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_script(r8, &(0x7f0000000380)=ANY=[], 0xfffffed5)
accept$netrom(r8, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @null, @null, @default, @null, @rose, @rose, @rose]}, &(0x7f0000000580)=0x9a11ca8614ca24b)
r9 = accept4(r7, 0x0, 0x0, 0x0)
accept4$alg(r9, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000300)={r5, 0x0, &(0x7f0000000340)}, &(0x7f0000000080)=0x10)
pipe(&(0x7f0000000180)={<r10=>0xffffffffffffffff})
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r12 = accept4(r11, 0x0, 0x0, 0x0)
r13 = accept4$alg(r12, 0x0, 0x0, 0x0)
splice(r10, 0x0, r13, 0x0, 0x1ffffd, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r10, 0x84, 0x7, &(0x7f0000000480)={0xffffffff}, 0x4)

15:53:41 executing program 1:
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="cc2476f2ae", 0x5}], 0x1}], 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f000000a000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
epoll_create1(0x80000)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:53:41 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x300, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa)
r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x0, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000140)=0x5)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_script(r5, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001580)={0x6, 0x0, [{0x2000, 0x7c, &(0x7f00000003c0)=""/124}, {0x6000, 0x1000, &(0x7f0000000440)=""/4096}, {0x3000, 0x6, &(0x7f00000001c0)=""/6}, {0x4000, 0x36, &(0x7f0000000240)=""/54}, {0x0, 0xc7, &(0x7f0000001440)=""/199}, {0x1000, 0x14, &(0x7f0000001540)=""/20}]})
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x20, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x800)
timer_delete(0x0)

15:53:41 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x1f4)

15:53:41 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:41 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000280)={0x0, 0x400})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x5, 0x101000)
bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x2, @broadcast}}, 0x1e)

15:53:41 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x3e8)

15:53:41 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x1f4)

[  319.775983] IPVS: ftp: loaded support on port[0] = 21
15:53:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_GROUP_ADDR={0x8}]}}}]}, 0x3c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)

15:53:42 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x500)

15:53:42 executing program 3:
socket$inet6(0xa, 0x803, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x1ff, 0x80)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
r5 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006, 0x810, r5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc)
r7 = syz_genetlink_get_family_id$nbd(0x0)
sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r7], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801}]})
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000040}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000b8", @ANYRES16=r7, @ANYBLOB="000528bd7000fbdbdf250300000008000100000000000c000804ff7fff7f000000000c00040002000000000000000c0006000100000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
r9 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000061c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r11 = accept4(0xffffffffffffffff, &(0x7f0000006200)=@in={0x2, 0x0, @initdev}, &(0x7f0000006280)=0x80, 0x80000)
r12 = creat(&(0x7f00000062c0)='./bus\x00', 0x10)
r13 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000006300)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000006400)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000063c0)={&(0x7f0000006340)={0x78, r7, 0x108, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r9}, {0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008800)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x90008}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4e9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000}, 0x4040)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x60}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040}, 0x0)

15:53:42 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xa93f)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="0fae050f015c27d0ad00000f20e06635040000000f22e03e660f3a0953f9056467f2af0f01ca66b8c10000000f23c00f21f86635030005000f23f80f20e06635002000000f22e0baa100b80000ef", 0x4e}], 0x0, 0xcffa808b513f9dfd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x151, 0x0, 0x81, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$void(0xffffffffffffffff, 0x5450)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  320.087718] audit: type=1400 audit(1571586822.240:141): avc:  denied  { map } for  pid=14189 comm="syz-executor.3" path="socket:[52176]" dev="sockfs" ino=52176 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1
15:53:42 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x8001)
timer_delete(0x0)

15:53:42 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket$inet6(0xa, 0x802, 0x73)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
splice(r2, 0x0, r5, 0x0, 0x1ffffd, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000180)={'team0\x00', {0x2, 0x4e20, @multicast2}})
sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x0, 0x0, @rand_addr="202d39efbdd464b54dade39c7f72acb4"}, 0x1c, 0x0}}], 0x2, 0x0)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x200002, 0x0)
ioctl$SIOCRSSL2CALL(r6, 0x89e2, &(0x7f0000000140)=@null)

15:53:42 executing program 3:
syz_open_dev$admmidi(&(0x7f0000000040), 0x21, 0xc4d41)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x181002, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r4, 0x0, 0x1ffffd, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14)

15:53:42 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x700)

15:53:42 executing program 2:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x10000, 0x2, 0x400, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000100))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:42 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xa00)

[  320.573128] audit: type=1400 audit(1571586822.720:142): avc:  denied  { prog_load } for  pid=14219 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
15:53:42 executing program 2:
r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x1001, r0)
r1 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000280)="a0f2e565757ddafe2dbac552f1429d1ec580eec7ec87bb2d08eee6dcbb1658090ffcf55cfdcfad9ea6e88b44d03a5dbe00d9833a69ab0c0870e1467a0c05ddb66acba17d7cb81b8704b235d2ebbb295622a0ef34f26b7476c81655f361b1a29e7ad7e9e058794e4ab9e530cc43b91e750fccc7ceac7a7883659503ab3f036f96659cb5707c491ec45fa9d39c3873f5de", 0x90, r0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000380)={r1, 0x4a}, &(0x7f00000003c0)={'enc=', 'raw', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f0000000440)="ffbffde29bc89fa93695806afe35f026995eb4bc72bc18a5709cbfcabcc44ca6fc9911bae25ee72972130c426d9cc7c37f55bd787484d49e136052d96a51635119a47ba753ab847022e2", &(0x7f00000004c0))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0xfe05e488b40c6f7d}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fe530cb7d7f933eda02ba18ad181867514fe60077d4dd90123d3ee7cf43548ee858e07dfbdfd4e7540ebec677d6ac14c2c794f72cbf5fe31789e70233bfd8115efd90b0c48258f8dbe82e16cf8db95f5b068a9e0000000000000000000000000000000000000000000000000000000000000018287ba7d8807cf077cc420efca6785deb269d0a91985602763e0d70d404da006a3d6eef8fb7fcdd82eb1e4841"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

[  320.643509] audit: type=1400 audit(1571586822.720:143): avc:  denied  { prog_run } for  pid=14219 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
15:53:42 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xe00)

15:53:43 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000002c0)=@buf)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
splice(r2, 0x0, r5, 0x0, 0x1ffffd, 0x0)
dup(r5)

15:53:43 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xa00)

15:53:43 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x100008001)
timer_delete(0x0)

15:53:43 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x2000)

15:53:43 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000000))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000200)="b805000000b9510000000f01c10f46a78900000066ba2100b07bee66ba4100edb9800000830f32b9800000c00f3235000100000f300f304f215c66b808008ed0660f38806f000f011c268ee0", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_script(r3, &(0x7f0000000380)=ANY=[], 0xfffffed5)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={<r4=>0x0, 0x1000}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={r4, @in={{0x2, 0x4e21, @multicast2}}, 0x8, 0x8}, &(0x7f0000000280)=0x90)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

15:53:43 executing program 3:
setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0x2, 0x0)
r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0)
r2 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x7)
ioctl$NBD_CLEAR_SOCK(r2, 0xab03)
socket$inet(0x2, 0x0, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
getsockopt$ax25_int(r3, 0x101, 0xc, 0x0, &(0x7f00000003c0)=0x3b6)

15:53:43 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x3a00)

[  321.379337] block nbd3: Receive control failed (result -22)
15:53:43 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0x40, 0x4)
r3 = socket(0x200000000000011, 0x4000000000080002, 0x0)
ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000080)=@null)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14)
sendmmsg(r3, &(0x7f0000000d00), 0x1bdd307, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[  321.481617] block nbd3: Attempted send on invalid socket
[  321.487527] block nbd3: shutting down sockets
[  321.492376] print_req_error: I/O error, dev nbd3, sector 0
[  321.500477] buffer_io_error: 1157 callbacks suppressed
[  321.500486] Buffer I/O error on dev nbd3, logical block 0, async page read
[  321.513793] print_req_error: I/O error, dev nbd3, sector 2
[  321.519699] Buffer I/O error on dev nbd3, logical block 1, async page read
[  321.527936] print_req_error: I/O error, dev nbd3, sector 4
[  321.533717] Buffer I/O error on dev nbd3, logical block 2, async page read
[  321.541194] print_req_error: I/O error, dev nbd3, sector 6
[  321.547033] Buffer I/O error on dev nbd3, logical block 3, async page read
[  321.555707] print_req_error: I/O error, dev nbd3, sector 0
[  321.561540] Buffer I/O error on dev nbd3, logical block 0, async page read
[  321.568916] print_req_error: I/O error, dev nbd3, sector 2
[  321.574631] Buffer I/O error on dev nbd3, logical block 1, async page read
[  321.581904] Buffer I/O error on dev nbd3, logical block 2, async page read
[  321.589133] Buffer I/O error on dev nbd3, logical block 3, async page read
[  321.597108] print_req_error: I/O error, dev nbd3, sector 0
[  321.602857] Buffer I/O error on dev nbd3, logical block 0, async page read
[  321.610561] print_req_error: I/O error, dev nbd3, sector 2
[  321.616367] Buffer I/O error on dev nbd3, logical block 1, async page read
[  321.623967] print_req_error: I/O error, dev nbd3, sector 4
[  321.629797] print_req_error: I/O error, dev nbd3, sector 6
[  321.638774] ldm_validate_partition_table(): Disk read failed.
[  321.686722] Dev nbd3: unable to read RDB block 0
[  321.708058]  nbd3: unable to read partition table
[  321.727299] nbd3: partition table beyond EOD, truncated
15:53:43 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x3f00)

15:53:44 executing program 2:
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000004c0)={0x3f, 0x8b7, 0x4, {0x9, @raw_data="e95cc9054a777e2e6e9a4c5081f01f79766ea509811b0d9d6e856ee7516560e6f48f9ee321a351a201a76a836c30f09c3526c3a2a4448f0feb62dd1690bd4cbd465ee03ce2e24591b84e683dd97f4e16d29e672c89f67f1d673aa2fe3cb2111950b9a0ab631bac9f4ee90bc2890e2202323719f157a0c7edd026b6d83652b0c4b5f57f89d6498f52b129958546cb5d08adb46721f98442436389ac89ba52bd47730c5b77a24bc72ea9bd77f037a3c1fa4ea916fba7ababbbbd43ad5882618db3875682252f93c096"}})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:44 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x100, 0x40000)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1f)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0xfffffed5)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={<r3=>0x0, 0x6}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x2, 0x7, 0x2}, 0x10)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)

[  321.885914] protocol 88fb is buggy, dev hsr_slave_0
[  321.891014] protocol 88fb is buggy, dev hsr_slave_1
15:53:44 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x5800)

15:53:44 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0xffffffffffffbffd)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x2000)=nil)
timer_delete(0x0)

15:53:44 executing program 1:
getpgid(0xffffffffffffffff)
gettid()
timer_create(0x5, &(0x7f0000000000)={0x0, 0x2, 0xc926f5c42de5df05, @thr={&(0x7f0000000100)="b457e6", &(0x7f0000000140)="b5911e6c01f5ce2e19f55baf352dfc69216dfab3ff9b71a31b132a12bc6b75ebfb25e70beff8029d818967db68dd0a3eaf14db5365b899236a8fb7f1"}}, &(0x7f00000000c0))
r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'\x05\x00\xfa', 0x0}, &(0x7f0000000240)="c5", 0x1, 0xfffffffffffffffc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
accept4$alg(r2, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000480)={'team0\x00', r3})
keyctl$get_security(0x11, r0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x0, 0x7, 0x8758, 0x3, 0x6}})

15:53:44 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x5c01)

15:53:44 executing program 4:
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f00000084c0)={&(0x7f0000000040)={0x2, 0x2, @local}, 0x10, 0x0, 0x0, &(0x7f0000008440), 0xad}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200082, 0x40)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x18, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x101, 0x200040)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3)
fcntl$getown(r1, 0x9)
syz_mount_image$bfs(&(0x7f0000000140)='bfs\x00', &(0x7f0000000180)='./file0\x00', 0xcabe, 0x5, &(0x7f0000000580)=[{&(0x7f00000001c0)="d081e9ef3430972f066e08ecd9dfb3a3e5c3bfc153fcdba5094427b07e95f149598cf447601cff11e5b4a646089a00626325c392220ad7f97839f326b70a762e2fd4ba47e866df2c5d6f4819ec8545de19c62797ccf1d7cce6d6c8059561f5ebf66033a76ce5af87eb18dd0f918765411104a526d1bfc0f8247efb26450050abffeba7d92b58585f2ef5aab05ce9fe8ea35731fb10bd4e0c048a13ffda2bef7eea358bbb38ae2d974b839fa9476d9ab59a5e388426117c87c7b76454975708c0b153a8bb", 0xc4, 0xc35}, {&(0x7f00000002c0)="2b80ec4648e314cae25a2cc9f983984cf400ee4689473a1fb48a137f2a27f8c25be14ca881a602b5e05603e2f8caf96650ad81cce42f3128ed13fa23f8daef15ba3aea9f26a1abc392eb00d4822192f26ecf7fe07e1d4ff9c51c6f0135b7ac723dfde3150166041720db2738f1821b5ee85a9a91d3b7b7650b4e203bce6c499f601bc5b141c25a9a87ebe5a442f70db8aad60dbbeb135aef52677a04498e6403d0b9591feb31076f39fd78a7c3c54486b1ea511a54bae38372230886d571b1997210dc73dd1469d3178353b2359a32c0019f49323564ccfb0a57e74ce0ee4cea60b2a51582b7afadd204", 0xea, 0x5b}, {&(0x7f00000003c0)="53a462844639a604733ba6c95d0c6dbd21477d7ef17c2ee72668e6c1b1710c5f3e45ce5e1292688559c0cb2c620640b1cd111a6c25d408d08a53e5717aa18ae4f84b9bf9390815ecc6f4e521bb388d34b699be17f7b1306f8cefd8615bcfaeb8e0920abc98ce6b0dca14f80d65e5458d5fab7b91f40b83116e629d21481f219ff52d9b81ccaa7e3f35359344a2b6dc80d373b13fc66316ff02c47896aa64309cafa176f3f2c98e5aed911cd6c05b8f99cd7d3e1036945baca1b4c823554d2a464e664b4e06811fb21e", 0xc9, 0x8}, {&(0x7f00000004c0)="14ad77c5ba7dea5dfcad8c7c27c8a2e5", 0x10, 0x8}, {&(0x7f0000000500)="f29ccc2220789e1b6570c90255a3c8f02db051754f41d65712d8bcef9d5f35bd1c3ecfbadfe82d60436f797622453f5e24009a81a719090c5965fb72d6d650aa2392d7c4d0c03f1463913a568cad1f97f299599af61ce1f1763c8849c999bd1f8b6f339a530b2f3be81c7c72ad75c1d0cd511a8c3c", 0x75, 0xfa3c}], 0x200000, 0x0)

15:53:44 executing program 1:
mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=<r0=>0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x511582, 0x0)
perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x20, 0x0, 0x8, 0x4, 0x0, 0xfffffffffffffffb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x13eb689d17794554, @perf_config_ext={0x5, 0x34}, 0x200, 0x200000000000, 0x7, 0x8, 0x7, 0x8, 0x3f}, r0, 0x1, r1, 0x3)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40000, 0x0)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="c80000000000000002004e2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002004e2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000dbb500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd4700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000709ef2fc144a5c7c4ec6a5226b794cb66dd7d4c0269bc7cf68ef3d8893a085c765dd38cf"], 0x290)
writev(r2, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560284470080ffe0064e200000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e0000000000", 0x46}], 0x1)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
recvfrom$x25(0xffffffffffffffff, &(0x7f0000000440)=""/84, 0x54, 0x0, 0x0, 0x0)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))
r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
r5 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x400000)
ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f00000001c0)=""/14)
write$P9_RATTACH(r4, &(0x7f0000000080)={0x14}, 0xfffffff4)
write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x4, 0x8, 0x5}}, 0x28)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/keycreate\x00', 0x2, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0)

15:53:44 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000580)="b825022489cb7054d2d73cea5c9a87679a5e968f562da92a24267ff0ec7b66c6b3d870a574d3e0d26fa43f1b419f8276054b1ba898febb3872552c08a300cf2489a8f88f49fd38540300cfdae585b178f1329792547eb1f5694755eeaef7ba406a208768d7edf6491bda3dd268dbc658978e5e2c993332fcb542ef8e4145681d1f9b975cff1a7d8af981defa31b1fae503ef5c818551e5cc0b0f50", 0xffffffffffffff47}, {&(0x7f0000000400)="dfb7a9155f896f9b16ea53a44695aa85c1dcf807b8fd49a1682ef4fa8b5a6d058594e980d28da4b6d4b393662e60b2bb8e6d5e0c1fa8aafb0508ff01fbbc14034af4b7ecb3effccd5721cff93ef4f6ecbe0139eb7e8c4fc794f290ffa3a854b0f32180e1a3059e85a0e9869cececd596c3a90efd83969cdf7a51827966031c6bc33fcba489d17db9b0821a5079d4c8ad6317bfc9d90ab1a0cfc1865e712ff59ec2d7325732b12ed5dafc1c208e0f8a099e4519c48c476c80fde2601d457b87a086638789b1afaaf8603b68af82b2025e963db1b838bcc29e45b9", 0xda}, {&(0x7f00000000c0)="e6b2e7ca186c61a585aba2cbbf3c612f52e13492990d2ffbd158b2bbef2ee3ca111fec19a9b84e4b28e4a85acb2400b8461d44212b8ef13ee00d89deabe8cf1ddb82fbc3cafda5264dfc7414fa500a0f1c86738ceb76299fb78f6ca0693c0ff6e4b5", 0x62}, {&(0x7f0000000500)="a33ba32d5b73659ca54819a5d67cc4050b618e015cd0f5ea76473c7677a22313ce327cda1655b4b2a6dc61ae3cf1b325df665755ffe5457ac93d990797c54c68385f4c1d6f21104d8c2d8463415de70a139531f113994ba336a8c0ab45c2f4ec7042f1f2a1c131", 0x6}, {&(0x7f0000000140)="609f5e65876a3a65bbe83f64ae5d559b7e0ee7262829b810f3eb6679e3e08db703520bd8cc601e26734a4434fb3e", 0x2e}], 0x5)
sched_setattr(0x0, &(0x7f0000000080)={0xfffffffffffffd53, 0x6, 0x2, 0x8, 0x3, 0x0, 0x1}, 0x0)
open(0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
splice(r3, 0x0, r6, 0x0, 0x1ffffd, 0x0)
dup2(r3, r0)
dup2(r1, r2)

15:53:44 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x6000)

[  322.514129] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=00000000)
15:53:44 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xe803)

15:53:44 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
epoll_pwait(r3, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f00000000c0)={0x6}, 0x8)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f00000001c0)="69065f6e000066baf80cb884a8908fef66bafc0cedb805000000b94ef54bfc0f01c10fc7700748b804000000000000000f23d00f21f8353000000a0f23f8b9800000c00f3235001000000f30b8010000000f01c166b87e008ec848b812580000000000000f23c00f21f835010009000f23f8b9f0090000b809000000ba000000000f30", 0x83}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:53:45 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x272, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
r1 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x2, 0x1aa800)
write$P9_RWSTAT(r1, &(0x7f0000000380)={0x7, 0x7f, 0x2}, 0x7)
r2 = socket(0xa, 0xa, 0xff)
sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, 0x0, 0xa1a, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000e1)

15:53:45 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x4)
seccomp(0x1, 0x0, &(0x7f00000005c0)={0x3, &(0x7f0000000040)=[{0x1d, 0x0, 0x100000000000001}, {}, {0x6, 0x0, 0x0, 0x50000}]})

15:53:45 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xf401)

15:53:45 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, <r1=>0x0}, &(0x7f0000000340)=0xc)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r3)
syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000240)='./file0\x00', 0x1000, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000280)="a304eb7a98bc1fe4c3be812a729471e4391419ce0c492b0fbe8e514d84186eb67ec540acccee23321400695a113f", 0x2e, 0x1}], 0x0, &(0x7f00000003c0)={[{@dir_umask={'dir_umask', 0x3d, 0x7}}, {@codepage={'codepage', 0x3d, 'koi8-ru'}}, {@session={'session', 0x3d, 0xfff}}, {@quiet='quiet'}, {@creator={'creator', 0x3d, "d1bbce4a"}}, {@umask={'umask', 0x3d, 0x7}}], [{@uid_gt={'uid>', r1}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '%eth1securityvboxnet0\\/'}}, {@dont_hash='dont_hash'}, {@pcr={'pcr', 0x3d, 0x3c}}, {@appraise_type='appraise_type=imasig'}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fowner_eq={'fowner', 0x3d, r3}}]})
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x400000, 0x0)
write$P9_RSETATTR(r5, &(0x7f00000001c0)={0x7, 0x1b, 0x2}, 0x7)
write$binfmt_script(r4, &(0x7f0000000380)=ANY=[], 0xfffffed5)
write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="a7d905a0f6a6e4b8c518a3f168bffa35489455217603e50d17eaa7d9cbe94f88ef29ebb0d248d8e16ba45ca72a3b6037ac483de28dc43c9fad648123454f9cc983bc170389dae06e9f9b754364232de48be09d8c7a8170c24d61acc8a8ccbb3b16e68a99e2bca37ee7946fe7c1750ac2723427d81ad8f7ea1dd2666672009a38280c9bb3142f219f30d73964ca5f9fee2c494fb9d20e52983bc3c87e247daf7b5bf03bba7a83c90496aff2f81d36b2480f2a1d359b119efaf7cd0178f6997b9db9eeccfd73b189bdeb601055bb2223302141830a4648be064c49ffe0b1e671e7c58ace47e62615", @ANYRES32, @ANYRESHEX=r4], 0xfd)
ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000040))
exit(0x0)
pipe(&(0x7f0000000380)={<r6=>0xffffffffffffffff})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
r9 = accept4$alg(r8, 0x0, 0x0, 0x0)
splice(r6, 0x0, r9, 0x0, 0x1ffffd, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000500)={0x5, 0x70, 0x5, 0x7, 0x9, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x200, 0x4, @perf_config_ext={0x40000000000, 0x3}, 0x0, 0x8, 0x2, 0x4, 0x1f, 0x7, 0x3f})
timer_delete(0x0)

15:53:45 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000140)={0xbd1d, 0x0, 0x3f, 0xfa, 0x66, 0x7, 0x1ff}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000280))

15:53:45 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xe803)

15:53:45 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x40000)

15:53:45 executing program 3:
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./bus\x00', r0}, 0x10)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
io_setup(0x40000100000001, &(0x7f00000001c0)=<r1=>0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
splice(r2, 0x0, r5, 0x0, 0x1ffffd, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000100)={0xfffffffa, 0x4, 0x6, 0x100}, 0x10)
io_pgetevents(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)

15:53:45 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:45 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x8001a0)

15:53:45 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000080)={{0x1, 0x1, 0x1, 0x37, 0xfa, 0x3}, 0x4})
syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0)
dup2(0xffffffffffffffff, r3)
socket$inet6(0xa, 0x1, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r5 = syz_open_dev$dmmidi(&(0x7f00000003c0)='/dev/dmmidi#\x00', 0x1, 0x501)
ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000400)=[0xffffffff, 0x5])
accept4(r4, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000380)={0x9, 0x5, 0x5, 0x5, 0xffffffff, 0x5})
r6 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl(r6, 0xffffffffffffffbc, 0x0)
getsockopt$inet_int(r2, 0x0, 0x15, &(0x7f00000000c0), &(0x7f0000000280)=0x4)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
dup3(r6, r7, 0x80000)
r8 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x115)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="60b0a834838836b457d5d2bf21d73862d1bb84bb41fab90b4d8ee23f5155c4b4f62aec4dd8557dc643d8bb6e26e6b8b53d5b81d7a2d0ab2b7a417bf05ba7b9c15d7672c651e55d2444abcc560a98d87c59031b1aa47010da7c41aaaa6482b101f851ce62872b8f5120dd68b60101280aecacba511d1ce0d6ffbe6f07303b34aa283551580e000000000000000000"], &(0x7f0000000180)=0x1)
openat$autofs(0xffffffffffffff9c, 0x0, 0x2400, 0x0)
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300))

15:53:45 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x1c)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)

15:53:45 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:45 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xa2ffff)

15:53:46 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
keyctl$clear(0x7, 0xfffffffffffffffb)
wait4(0x0, 0x0, 0x80000000, 0x0)
tkill(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r1 = gettid()
tkill(r1, 0x38)
connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
creat(0x0, 0x0)
creat(0x0, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, 0x0)
keyctl$get_persistent(0x16, 0x0, 0x0)
r2 = getuid()
r3 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000380)=""/83)
mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x810, &(0x7f0000000840)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532332c74696d656f75743d3078303030303030303030303030303030302c73713d3078303030303030303030303030303030302c64656275673d30783030303030303030ba080000306663652c72713d3078303030303030303030303030303030302c33713d30783030303030303030303030303030302c74696d656f303030303029303030303031303030302c74696d656f75743d30786666666666666666652c7569643d0000000000000000000000000032f8cdef4205d32e89c5177245081e5778b9367ab1efe3ab91bcb73168aca9499aa9ac66033d01b5b32b9c4938e8e6e096dacdda8f610e23c27dda9842e3859d87f06eb6a125c95fcbddf2d8d9f21c654a2c384e910f573755bda5cac312eca45139ddc99926bd9117fd6c8f3ff5854ccf98842dc0831c43bc8e58ddd4abce5f74643a32f0439eb91c7f6757475990a823beec1264c021b52c74ffddb90ca9bfebff2f0389ca618a7320e94da6ff8a5b3518843770b9991691bb7d7c7c0e8e", @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC=r2, @ANYBLOB="8388"])
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
accept4$alg(r5, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)={<r6=>0x0, 0x5e, "754f41da0985fab27dcfef6d50c144ed5655aec23bcdbb7c8a33c8dfbb69d8aa71b67154c1610ad9fb80395522c3e67dbadc0ade16a5cb4ca4e29c02eb826f178caba4ad56a98a5646b18f12cd563d720125dbee502c7708db8600f88779"}, &(0x7f0000000280)=0x66)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000002c0)={r6, 0x9}, &(0x7f0000000300)=0x8)

15:53:46 executing program 5:
timer_create(0x0, 0x0, &(0x7f0000000040))
exit(0x100008)
timer_delete(0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffed5)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000080)=""/247, &(0x7f0000000000)=0x274)

15:53:46 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x23, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0xffffffffffffffc0}, 0x27)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x11f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
sysinfo(&(0x7f00000007c0)=""/154)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000006c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x9, 0x1000000, 0x5, 0x3, 0x0, 0x7fff}}, 0x50)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000280)={0x1, 0x0, 0x1000000, &(0x7f0000000800)})
syz_open_dev$amidi(0x0, 0xfffffffffffffff9, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x6f6, 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000080)=0x4000000000d3, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e21}, 0x10)
setsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000000)=0x5, 0x4)
r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0), &(0x7f00000003c0)=0x4)
readlink(&(0x7f0000000740)='./file0\x00', &(0x7f0000001880)=""/199, 0xc7)
recvmmsg(r1, &(0x7f0000000080), 0x400000000000384, 0x12001, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000440)="8fb542fc97b598e6a3d3fac0d9a1ddcd0bab8f40d17c51f90a78d05bd02ecf6f9a419127bea003b0db6560c8ce167f9c0f04c96d96e4d46e84f9f2a1de0e767d96977e733b4a6acc20d0620c5710620767e3e80d73ca3ac4384e92a5fc1e84eeb6b686f3d3f97a09c6e38f95ada0fd8851e649b7e93eb234e13463a7f87b10868a2d939c0800000000000000be80", 0xfffffffffffffe26}, {0x0}, {&(0x7f0000000100)="5df4e02ace00513d015e05f8e12286312be91c02d9a1713bca6fc341", 0x1c}, {&(0x7f0000001a40)="fb8bdc35cd07cf5ce8f5f39346d6d9f164246cf019976c6bf140cc8a89dfb607b8be847ebf45a5093d3ae0f99a325dbf5a4cb69d29e942fd7cbdd89ab91722426e6a2c238a141cd36186b79e0f963491585ffdd069b5adb945c0c656406ceef3a229fa3256a23ff9f12c467f9e534fb748ef361ef3a8bda72ac550da808a0f52f2347350a9024ef0a8a63bf0499dd6ccad5e3a4feb5f8c696dd95e1eb61c10ec8688c191bf5a168efd7b3e9f1f7939e92fff58a487709e3c3088ca9bd4968c09c2c2f23c5a33f4ce09fca33923e4101dcb1fe8eead86c4a48f1863289e60f2ea91a2ef92ba89ea64d569c55441df93943ac19849a2b0cf9e3671a1a74c6b632168e98a8ce49d4ed4be54d84f059638dfc7b6745873f19b96a793bd195af25ba0b30f783729eace90eb4ce3359467563c0d1beff589986472e0476cd2b3beba705052fec616692b05c568e1277ff1c7881b618f3f0928bbceff382548fbd7e884f7441cc95802f1f4fada29bb16ae54ac875ada7f2b356d399f3d7f39d61d9dba8369bf982b4bb91fae91a8d4c936419646c62eed5a70e5de86554739789a842083979ded84cd93ef1165556ea54149a489cf630e8457978430bbfbac981596aa34131c8acbae52cfeac2b5bd358ee9ca2b336cb05f72a31be640ed3be7fd88e60fa00767485074e2e2e5301d89fc1fa6e6e8aa1ae2fb0df2ba5a009d9e78f31befff3fccebdfb1104fb1917572db80a83dd046312543d8a9670213bc2430fb60cb3e788bd5662b4a42a0419ab528d0b145c81294951dcaf85fec9e2136f26c4e1e30a2212073b5664b82b8a79c2381fcd6a768f952f39ef80d95c4ca1c73840d5ef453f3637519d5656ca41688c7617163ad4bd488dd81b139a0e466f6f7a8eedee41a34cbe2d29723e23bfcf6afb757d1a6ab2e03586e4334cb650a5b81d5502c7b57874c57414f93330f8dfa3ff1c48c718a3f16a9b1ee7cbd783a55bae4d00f8302b9b1c45188b0773b9affe8ccde9a6a31103288557d953a9d354844e1dbff9e8415b2ae634cc2223036d8bdca364549eff3c6d5b9e2bc4104e63a99e9a52ea87a6975f98a0a6df9fa2016d862231a47a4c73c891ce1991a4c650bffe5436b2f0da1641912e1a50a3b36a0344ec67fb42c2512990abb62a5c9dffba7126253355acd1e7f82a0622540e001c987a710b67a44d1ef11ebd7ec290512ff44e9e560334d96a0c75d4de6e4c96154524bc4d34dc6e5ff0cc1682286ff09e3681581dce475be566e6cfd1dd578cd4c33b50aced9a4cd2f54b3de8fb4eebab11f07a9d06dc2982e5e34ab16f2e4fb2209f0b1bcba60af08264088b87c0b64e2c4e808a93be342089eacc9a5788fe9a9666c2bea032eef1ffdf1c630b012b79ca250475a035d5beba8040e3d0f666c89db27a12e8bde85988ce9a1095ba9d15dde4dcde23773c15ac5ca4711afa928843d727591b7fec10c7dbbc669a59236ad83963637d170758f5906a44ed782f4f5c91076d7df6c140835f92293452334281b5d66871b7575867ceca092c352dc1a4df94bfe503cc82b713dfa63c2df58f4e576a6508265248300619c69629ce193a881b92c9158916e4a2f5f60a208fa5cb5494e61aabd3b27da95aedd94707a93894ecd599c3e0c6b3a9b51e6aceff9178296a035973750123badf5ae12c9c0b536276bc96fe00f577f3068e504b01ed6c9dd8bad2cce05d3c6542895547dc3c0c3b9d74cad0b6f8691984550461ece10c2b621d3012ca7c16ff474f7f38906b5ca2fdccf74476ae741da07a2f8b5d836c6e71f1db19656e8c2216bbf57224e1d73484187c04b05640c554df6774b69c312952e320104a57b038c1e01674703f8ca0cee4141841fc7d5d0c9affaed921b7854f71c53c91ee0fe5e60a7557ae14a2e69382ea579fdecc5c07ba1c568c5365236df36f484d9b8bb17ffbd4b17bfee4065997be9ce6e9bc6d613b1c6cdf672a350ef3a9b96423c492235d1b66271bd37ccacf42b8ab8e2393de8e337628ff91529b1f39a7c40d6f2e1ab0860f0c1e9296d6e8c5f9c4a5056259255e15f60607d947451ae394164a9cbf43b33cb951de38a46ae332bd8e93bdbd5047aca3c192e30b7f52226d8bbba47a2132aeaebfd657595b087f0e658e0779d4465b6213513fedbf2c158428cf1328bc35d5965e05c076fd79abcfa38adab2a14fa3a6456bb1f12e7004f34afcb788137f9a63a88c0035b5ee314bc421e53d47804c5a2efa1cf1b2c50a7f1a9a2fd72f73bd9732ba762f60177fd9b7bbf4c2c43dfc93c3b10f9b14add4ea1822a38350d59c429d2b30efd48dc87ba863b514d368ebb8c4f484609e7536bc26365d74deb9033e2ffa79d738280beca6b57646e4f382bd7f839236c3eb77e66d32f3388e733742aba6b522314b579d434bb6888fb8bc61444e98a09d7effb7edef8d8dfbee73af1cfaaadf4d5f4b6339e19c655319a56f7a66632ecf06b6e53b27eeab86a74f45dc568fc8953342e9113570c2d4e0324026d9405ab2ce8d8022206d525af0e256b575d7ec84bd2d1b0c2bc591790737b302ebde7b59ca6a090c08dd5417e92befb2710936bc0f36fd6c64811c9c756c7b7fd3fe2d65d8b8bd52b36924bc8010b7a6c1f7d9e8fde548369e360efe2ac130f3a12c780a798cee65e9d2a0b84662de6af8452817196e3b3aed7782fad59c2873b67e140ff4c8102bd135952b57e92b4575b36874a6c733297342e8747d8234e5b539fb9c64c9e9fc9cab84edf37ce760661725211b8b56b2c93abd54d4ff9aa7df14a8918988e32904cba26d3134ab555a98305f2a55d9744b50b89a68cdeac951f9ae78f6b36f37dc14e980c930b132e721226177a23508def67cef0cc03ee72ee19ef23d0740483f402148e3fc50d2bdb02920ac933285848982b070f6e86e9ecd1d076841435598eb1954a5b099813b80396e8c87e89cb9c63d9bb48ced82a58c8888de6cc2b900dea25f3b242c51c72d4925e4d72e4b5a2d3d7b07e22408d6bfa7060e7b64680650f6dfcc411f46b42829e1b6493069309c73f06beca84a2ce973a81c1cb927e2758b02853944b483ec340241308c32111e7d2577a218255267762d8f25d1cd495a626c2204c4ef6bd4aa031c3e81a5e15f6fb2ea8730a87ff12bd2f605a379564c8b92e1178cb5e8cee9265a053156de19af1b48f9f99fd9bb36b595e67c1fc1c02f71ada6edd5332931d674e36a24a244a0a85376b044d52df51dd96e0f680c0774e0165f7be59c5122ea59da5a9bfec7cfea0545409f7b5e5d981064711213028571241003d3196e0a6c42cb8b24f20e3e230a153afff46a5f402571b3108b655cd4eb0a5944027e11cbcbc78df829d3b392817b4af59221e017b365095ea8bc883e5d6e97a9e0c33454331977903d97c9fe178f440b153f71e45bbf45394684b46d1c5baf294353a572df19791da8ff02006f00b918a2a1520cbafe833f9b35dafd362f48ea1d3c406d6928190a07e3511d2d6308761bd3ef239ffa946b789207a615b8f228ed98083531313080f0e947612f198b33340cceddfe6a31028c7344f6f4744f7f53323fdd7cc90fff52ba44acf3d28c931f3ec5a6a05ed006c0373294253ae7265c0a4f00a92018d8a2b96c59dfb1075b0a34e2ac634cf35f57a135012ea09a9b37bbbd87fdf9d8cc62cbacee3f1ed955dcb7d6f12fb1f35739db8f0763bb48222126cbc6e25a7a9216f84469a529f18825a1705ec31c0fcd385b2c979ee25e08b5cb428cbae5fa8dd83b6cf92535cd2676fdda9ca5767f107b46fc6fbeb1108f9b5e9dfe6c444c0f0f741078ea09de44a5dbec83ef91d289ec5b5e4d348b628045fbd736e3e949ed6cc8b0d2df6a382f99c4325ee8dd801f5afeb32d5e4ca9bc9e35c5957cc063d4f7ec827392cdf32f1251302441ea6923068bebdcaa63ce1f2f680f100e7a9c4220f998cca91c99a1d6d96fbf034e964949b51666b1c8c1f877c931d1e52204c1563fea1d2b55d3671777dd45164ca967253e5c4d616c76e019e36b3cb1a493d168f6bc7dfb184074566e61536e6a09aa9c823d4a852ce41c8f0e9e4be499d6a59bea83d28e14002d501644a524f1c286998be86ab9110f8dd9589bca291da7fe94f84521ecdf71d967035362f13bf80d906dac91192918d694716a1d6820ab611eb979f674f9a104f9ea9eb3702f54d7645c58fb73434de0b2c797b84b6d8a0c5d9ffddfc88f8104a226138aabed37e299e5070e41771418f2ce287568606dcdb714fcdaaca247cefc002a1144b209aa59ac49aecf31f74682b7d41f4dcaf80222088c5add538c60b07174ca0e91ba3787fbf6deebf1f6b6de2736d8e71c589e3caac243c9ba3eddcc56ecc1dc898d7d53edd60fc62d8ec0ff2fbd1e8656dd9a406c9f7b56fc9faaece8b159a6e2a72044bdfdb0f23a87a3b6964bde1c6e695c64d13f311d11b0034b44a53eaab490a6dcce8ea91d653a5c37af26edd535ca754ff5e5c81bb06c09c2cc050f072c6d0f9fc9f963d2877ab985148b415cd9f86ad93d4bdbafe28ee59e6b7299df5b87d53cadb0ddb1cd1bd23bb5a1711deab16bdfb8b5fe1564db739233166ac45b2ac2578a378cb2168836cff4b2ce70967b101e06ee2c440ead8b16cd6acdebe780e904a384bb8bbd31d31d9a0e965590c1092e6a1533a89d86ad126f4bb3a11044e46d7055c0e64fd3c25c87a858a3487f270038dec6392411807b10762fa6773ba39cffc820907376dd1391fc5992305e8569e5e178ddc95c91223f540ef8ef79d4163c3939ef151bbf12ebf8cfd43324c829ed7a96cd9bdc6e7d16554f2cb2b7b3117b47e109ef1a37cc8d269a60af85f6d6c6ebba0ef0cc51c414f43d3a7eacffa39c435724829075fd3df8b6a3aafdd6065c47f48c12fbc127f677e9bb567494fd1687d0f8940f0df42cb75733a60113bfc0803ef1b1fa7be8706ad672e0715af7b8137f0f24f2b4cc2dfd4f886c49bfbaacac146c33ffef4a2357a3fa78a41b7dca97f7556ce531fc80eac2fe8748af927e9a09a53cc22bcdac5d7eb5ba68356577559886f68e4964ba1787213b1ca2845b501e40775475e860124445eb3b190c0747104d5d4d145e9385ee900434e2c899ca64d2d83302ed3da3411b9beaa821a384a0bac50fdf59064e91c9f0f1abeca287169d6b85cc3087b5f7518e7aacb410bc6688b442ba85b3ef3c6b7540e45dd3cf119b38bcd69eb95ef313ee2ce964bcd6a1d78dc1cb8181237a941808fd5c4317aa53c43d8d5ebe87afa94acb4293f41d3a3f13c6a25763c4844824b2d9762c5794f2b8a74a52a96b621bd44cede24e69ada42c0e321b1f6e301c4d55b150dd803f3f7b3eb570c12d046bf57be979b4108e9bd6f273ad7f2aca2e766c854d535c4bd6c10efde16f2d7b69772637ee2b757b0d526a107c8b24ebd25bfd742cbbe81234d8be247aab3e92eab0fb592fea238b2eead863e1b96171c610ed49864d45562214bb500cfbc408d1dc95090246e73d4e3172223e94b9ffa21ee55f1c32637d66613dd253d8e0694fd0b57ae592e6f59aaa44cddb0bd385a39728edd416045f851215c0788b12e133627386df4625a47b242ee40ae5802c6a0dfc2f39958cf6cf6f834079477e5bd2ce12f5201e9adac60b5233b8bcb2f136ffd7c454be0d51740ce0700"/4048, 0xfd0}, {&(0x7f0000001980)="7c0bf69db7245b1b89c918798157b7bbf301af297c093d0aa9edbe8e246a064d66e702f9a2c45dd824dfdd13cf77e4c45a05bead21df0019a749ff007363e79daad582c0bb810d8c0444624c7f847c24f290b8ecc7913b7e188f8042cd4f4dc7c5ff90eb08fb82056fa82e430790c5a6a89b34a11fa8067ef6e23cc7ad6dc562beb2aceb169ba7c50b3e4bae72642762d26448af9b1822ca", 0x442}, {&(0x7f0000000180)="7be935150ea6399e889e177ae8ae737c774f30e1bcc2e7d1e0a953a53e6d0797af377ea59775a2d5", 0x28}, {&(0x7f0000000500)="53bb3d82f4ecfea5d7ad705ec75139f08c607f7a7e92e7687e435a823cfa89a30e38f2", 0x23}, {&(0x7f00000005c0)="a3e8b3fd08b7fcff6603c1f536a89e0b0b7b6894c654e8878ff5d5fda7b19211b8abc6f6652fbe7a06829ff89400ff754cddc0dfceb75ad47832334f00bc6e232bd1d7c6abf7b366a0c035806dc8c51edb19c22fb7040c9ffceb588075b7e36a2c415857c21576c1b43b9cbbdcc86cd2bef0c2542aa0fcb5", 0x78}], 0x8)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
splice(r3, 0x0, r6, 0x0, 0x1ffffd, 0x1)
mq_notify(r3, &(0x7f0000000300)={0x0, 0x15, 0x2, @thr={&(0x7f00000002c0)="8ee33e9d996c525639df0fd6747d4ac7ea62bf02ef1243297c214c3e9901b388b4cacccca8fb0befb42c297267c0f3", &(0x7f0000000880)="055fee3772f1c207b14f67ad89c4e04c1e14126613f9fe7510b17e22a91c19aaec7b039680320a581ef6cc323b85025b3d4e0c6c1b3d2cc3cdf178b014c700c62591e3d9413daa676ed70f01170f72e70a8d7e168e878583da64ddd040d6987b1e07e32e989cfc0cf996175056d5b52dcdc053d11a7fcc7addcf8f4591d8681937e2c4fc79ee6034f8b346d9e754981b4ec593c1abbc38b927415591391f451bd0af8a88"}})
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x2, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r8}}, 0x48)
r9 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r10 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
fadvise64(r10, 0x0, 0x0, 0x1)
sendfile(r9, r10, 0x0, 0x8000fffffffe)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = fcntl$dupfd(r12, 0x0, r11)
ioctl$VIDIOC_S_EDID(r13, 0xc0285629, &(0x7f0000000540)={0x0, 0x2, 0x1, [], &(0x7f0000000400)=0x4})
open(0x0, 0x0, 0x0)

15:53:46 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x1000000)

15:53:46 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x6, @local}, 0x10, {0x2, 0x4e20, @dev}, 'veth1_to_team\x00'})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000400)={0x1, @pix_mp})
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000180)={0x10001})
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
prctl$PR_SET_ENDIAN(0x14, 0x3)
r0 = socket$inet6(0xa, 0x803, 0x3)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
fchmod(r1, 0x8)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
accept4$alg(r3, 0x0, 0x0, 0x0)
getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'})

15:53:46 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x23, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/380], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:46 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
lsetxattr$security_capability(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v2, 0x14, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = open$dir(&(0x7f0000000380)='./bus\x00', 0x101000, 0x100)
renameat2(r7, &(0x7f00000003c0)='./bus\x00', r2, &(0x7f0000000400)='./bus\x00', 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\t\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000002c00010700"/20, @ANYRES32=r6, @ANYBLOB="020000000000000003000000080001007533320018000200140000e3ff000000000000387452000000000000000000"], 0x44}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8913, &(0x7f0000000040)={'hsr0\x00', @ifru_addrs=@can={0x1d, r6}})
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000340)=0x6)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$evdev(r0, &(0x7f0000000140)=[{{0x0, 0x2710}}], 0x18)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000440)=@req3={0x10000, 0x8001, 0xffff, 0x2, 0x7, 0x8, 0x3}, 0x1c)

15:53:46 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x2000000)

[  324.428452] audit: type=1804 audit(1571586826.580:144): pid=14442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir559392256/syzkaller.Mc7kcV/18/bus" dev="sda1" ino=17199 res=1
15:53:46 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x4000000)

[  324.563981] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.572692] bridge0: port 1(bridge_slave_0) entered disabled state
15:53:46 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r3)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r5)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r7)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0, <r8=>0x0}, 0x0)
lchown(&(0x7f0000000300)='./file0\x00', 0x0, r8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0, <r9=>0x0}, &(0x7f0000000a40)=0xc)
lchown(0x0, 0x0, r9)
lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0xe345578f065f956b}, [{0x2, 0x4, r1}, {}, {0x2, 0x0, r3}, {0x2, 0x6, r5}, {0x2, 0x3, r7}], {0x4, 0x2}, [{0x8, 0x7, r8}, {0x8, 0x1, r9}]}, 0x5c, 0x1)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x23, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd}, 0x10}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
r11 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7e, 0x40000)
ioctl$KVM_S390_VCPU_FAULT(r11, 0x4008ae52, &(0x7f0000000140)=0xaed)

15:53:46 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r0, 0x0, r4, 0x0, 0x1ffffd, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x2, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x101000, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$vsock_dgram(0x28, 0x2, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
write$binfmt_script(r11, &(0x7f0000000380)=ANY=[], 0xfffffed5)
pipe(&(0x7f0000000380)={<r12=>0xffffffffffffffff})
r13 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r14 = accept4(r13, 0x0, 0x0, 0x0)
r15 = accept4$alg(r14, 0x0, 0x0, 0x0)
splice(r12, 0x0, r15, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
write$binfmt_script(r16, &(0x7f0000000380)=ANY=[], 0xfffffed5)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
write$binfmt_script(r17, &(0x7f0000000380)=ANY=[], 0xfffffed5)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYPTR=&(0x7f0000000640)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR64, @ANYRES32=r6, @ANYRES64=r11], @ANYBLOB="a562a4aaa642a26fbe483b3d34bcb01fa661c214bed97fbb0bbae9a070d13ac1c6ae89b175d867fa49f72a2367cada1d0c16a15f568446056ab499036e9b1c044a859ab90699ca48b9bd245ad1c4732424dad7d3727a18f01607039fd6a72646328cc014a3eb59f9e8fec455ecb99d5ff6ddda98974e", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRES16, @ANYRESOCT=r15], @ANYRES64=0x0, @ANYRESHEX, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64], @ANYPTR=&(0x7f0000000600)=ANY=[@ANYRES32=r16], @ANYRES64=r17]], 0x5}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r10, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r18 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000002c00010700"/20, @ANYRES32=r10, @ANYBLOB="020000a65211490003000000080001007533320018000200140105000000ff0300"/44], 0x44}}, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000140)={@ipv4={[], [], @multicast1}, 0x15, r10})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:47 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
timer_delete(0x0)
syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x7e8124b6, 0x4, &(0x7f00000003c0)=[{&(0x7f00000000c0)="347814041866463d193d8ab9d3afd9e48c145350f16d64a68209ba5fb074d7289a8dcc0345af55517f9d9939a117cee929858f012bacd58a49ce560687b10c3fbc3f16f582da765e19d8acb4afe689de5b1476a22a4465b2cf8258334ac62f412d7339ce22ec7775c04edef377bd55c8b1f49fab857bebdcf48238ef58fbe2f676d7cd1dea3a824df1e0e80f22b62e71f3b30b020fb7bf6cca60570a0689faf7dfb7deb46e9f65c42052babba738f9ab8063ac5c4292cbf549389817083fdcb8d931cd7f314220cd8dafa80525", 0xcd, 0x4}, {&(0x7f00000001c0)="d36e2bb9bdf14daaf227f15dbc6111c621e3682d1e761f9083ccb605eb04ff7223a48fc9b0743c92e0011009a5ce0b84cc02c12593e38a1894f5539fba2b", 0x3e, 0x1}, {&(0x7f0000000200)="b998df8f6a49047c74737158ffc44a4da01b6d5fdf39f823c71baf4401f6767cc30009040f6d237fb1a2042bbc26782474af6c99a43b6913a764644a52105f0c379a7c3f3d21d0f80e572017e4195d9c27d6be50a05dad3270275507dcf873f3cd17acbcc23adeedd91934c55be9e47441c1c7235aea35bcc817e30fee4dda5154f3aa38a1bab81322e46857c3f3c5", 0x8f, 0x6}, {&(0x7f00000002c0)="362ffd9b930b325fc39d55e8aac0da704834db57f98c7f52f897c9aa784357b2272f3c703b43fbc0313101824c16b8d2725f3f2647a568224072efe46044e1224e90cdaa167f05025137de141a6e407996e78d2b7930191a53b808761030e09b5232caa6614682ea4e6664b9e84a94f22193ba2a8472c5fd63e2bfb1d155ad1a64e5d85af1a554acd7fcec51a843b7578b93c56e6f57d52d5467a55ef7502ee399cfe30b11d02f4b3243ad087a9c87726fe128ac7ccb908f299c97f06e2c1821aee44c5e488d7b8b9c675786863327c8f73bff736c055d2e77108d06b8c48bab63637ddb45", 0xe5, 0x7fffffff}], 0x4, &(0x7f0000000440)={[{@discard='discard'}, {@discard='discard'}, {@fsync_mode_posix='fsync_mode=posix'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@usrjquota={'usrjquota', 0x3d, '{'}}, {@six_active_logs='active_logs=6'}, {@quota='quota'}], [{@obj_type={'obj_type', 0x3d, 'ppp1cpusetselfcpuset{bdevem0trustedvboxnet0]'}}, {@smackfsroot={'smackfsroot'}}, {@smackfsdef={'smackfsdef', 0x3d, '%'}}, {@smackfsdef={'smackfsdef', 0x3d, 'vmnet1vboxnet1&\\]-'}}, {@permit_directio='permit_directio'}, {@audit='audit'}]})

[  324.845783] protocol 88fb is buggy, dev hsr_slave_0
[  324.850972] protocol 88fb is buggy, dev hsr_slave_1
[  324.926113] protocol 88fb is buggy, dev hsr_slave_0
[  324.931471] protocol 88fb is buggy, dev hsr_slave_1
[  324.937561] protocol 88fb is buggy, dev hsr_slave_0
[  324.943092] protocol 88fb is buggy, dev hsr_slave_1
15:53:47 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x5000000)

15:53:47 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071101800000000006d050020000000009500000000000000"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x2, 0x42000)
fchdir(r0)

[  324.959106] audit: type=1804 audit(1571586827.110:145): pid=14466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir254642148/syzkaller.QVKmhj/196/bus" dev="sda1" ino=17203 res=1
[  325.022049] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  325.088994] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
15:53:47 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040))
r1 = syz_open_pts(r0, 0x0)
read(r1, &(0x7f0000000000)=""/19, 0xfffffc84)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000002c0))
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
r2 = syz_open_dev$cec(0x0, 0x0, 0x2)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_script(r3, &(0x7f0000000380)=ANY=[], 0xfffffed5)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xab, "0eebf0402bc3b0a4d6f10f055e93b141e295d196a2422810f74fd1aaedd996308adc4bad17cbdb52288cd6dc39ceba2a7987301c1f495fbae8eb33a94d46b383e7853745d907eb05224f22dcb79c83aaef5186c382a3bec928b4eded1fee5fb36f299c0cc7b222619ac5a7b41162d957e5f7204c4215d9f026b6525b5d9fb26d2af4b725c23bb6c50606441d98762bcc5fc737f2c768dbcbdb95bba8ecf2bda7e1a35b112df4aa763182df"}, &(0x7f00000001c0)=0xb3)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000080)={0xd0})

[  325.137041] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  325.164522] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  325.198355] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  325.209605] audit: type=1804 audit(1571586827.360:146): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir559392256/syzkaller.Mc7kcV/18/bus" dev="sda1" ino=17199 res=1
[  325.222532] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
15:53:47 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x7000000)

[  325.296589] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  325.313719] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
15:53:47 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xa000000)

15:53:47 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10)
ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f00000004c0)={"11b1f21f10c42745e9cd662e110ba5c1e5b788f152dc248bf55372776767d98c30aeabf9969663864871d0bbe46909a7962a84c003c276261afd3375635081c21eb6f4bcca224d29a7c5f0693a10bb5321aae136cad6e17d67473ebdfb64927afa65b1098ca841fb211bcf4c12390306fad40dd52193e4d0ca34f07b47a8ab161152f8c09fb3b73b54b7b991436c932770a7193e9e97264f6945c1077eec8aa538da1bdb38bba9507fb4142f162862b4edf18f5dbdf5dd4f309eb802eddca4b39c1583aca084b1e29d0d8981eb60e2ccbbe539770d2fd2aca6e367e7ba612b5846e3152d0c64ef9c64e15284e66f06db4003f082787a0e8917cd6358174cd2e1bf1b566ac15e176a942ea531fba123bbcfafbb8246c9b7e690935429b0365c13ec07dec8f5e6b1687ba2cc3173c49130169cae068ec3fa8b5d67d052cda2c5615639a71a0cad5340e88216513099ddfac497ec3be93913c8f0d1f8c8b1f9aa6f40ca89afb2df5ad5fa3be1b7a19f3144e5b93ba1621b0ae21aae38bf2d421055af87c87949487343c3337147c5a3b6b1673a925c1a37b31eb9e4c4050aa20a68241bfaddcfeab25f2deef294eab924a473f674702b4af9d1aa053577a249901434f7d284fd628eaaa50e2f5f8404e06dff978fcebc691b4689550abd4f4c1716703faaf22ab8795e74aee8334c410128597dc7f1bd985492eedcc4ae5a1d3d08e6d726f23c26754376f9faf63555cbced07837732614a0d53060d16d9355fa8e3be139c1912812b542bd8b4ae657db0294e7cfb0558b9d7ec676b5c3a1336459a1b0e935fe440ee90d9c9f44a53855ab3683dedcc747179dc3e2900388ccbfeeabb6b6fd00117efc9557000ad356bb8f27c9bcdc8cd66b50296db2491f7b2b61f291b2d238c6a25253ea6a1c2836e9a7803447cc3cc06f8d40f6a8d5974666d5675cf65d7f67615be3aa4dfe16c5f52b120552c4b3b0681aa76baceef87d341f0924ff00186d451bec795247b0a6508ae841ccf317e13259df968a77082f1bf1bff8572f8273a46ffe42e64d29e27487be8a7d48895108e2a335b56620d6e63a02745900ad67e9d447030cdbd6bdd12bf97634e3e71976a5e22ffce8d3d90967e45325d7f8d8f63ee2bae2bccd7521b673755846f064d4b898aaa546ac12af22e5aa14dc144527025f18fa9b32a80ea55c923262af0dce25b671f4b691781914c68dee9f3adfb1accb69148ca5ac878e9e6638fcc6b7f80f90ea81b1403069a8970592b1c33d3fe6f2f69e250eb0ab42fea19740953251ffb9243d38bfee9840e0274e53798f0057105748d96f75412a6c5397e0969230522ddc72fef8c03536f59cb504a30e86635589234d8d29c11ad844c6621c224f5fca24397f89c1fb0012b1bb163c8b24f68c51dd501bbee0822c5255726736915d54c348f0f0344b98"})
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0)
getpid()
r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$get_persistent(0x16, 0x0, 0x0)
keyctl$clear(0x7, r2)
request_key(0x0, 0x0, 0x0, r2)
socket$inet6(0xa, 0x1, 0x8010000000000084)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080), 0x14)

15:53:47 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r4, 0x0, 0x1ffffd, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r5, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r6=>0xffffffffffffffff})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
r9 = accept4$alg(r8, 0x0, 0x0, 0x0)
splice(r6, 0x0, r9, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$binfmt_script(r10, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$sock_SIOCSPGRP(r0, 0x8902, 0xfffffffffffffffd)

15:53:47 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x5, 0x400000)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)
r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x1000)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
accept4$alg(r4, 0x0, 0x0, 0x0)
ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f0000000380)={'eql\x00', 0x3ff, 0x5})
sendto$inet(r2, &(0x7f00000008c0)="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", 0x1000, 0x2, &(0x7f0000000140)={0x2, 0x4e20}, 0x10)

15:53:47 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
accept4$alg(r2, 0x0, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x0)
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[0x401, 0x78, 0x7, 0x8001, 0x8]})
exit(0x0)
timer_delete(0x0)

15:53:48 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xe000000)

15:53:48 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x23, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x7}, 0x10}, 0x70)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x1ffffd, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0xfffffffffffffcfb, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x22f, &(0x7f0000000380)="4604273dcabd64d2e82309000000000000009e32b070e1373fa5e262a428d5953831365bc65d1bbeaa3d837644019364872ddd18fe9b05edd7152a3b9a1548b09d4f224762bfa9cea1c1418c6855fc6fbcd7582addff6673e8c2cc296b8930f548346746278e6883cde17ebcb1733dd3a53ad40a99f410af2f067ecf0afa11d6d7b10993372fbe4499161aab4bfbbf7ac856ff243e8b883c5de3b7f584f4ab6603cffe5f4a7ef089af53bcccff31ac6aa8c1", &(0x7f0000000140)="406b47040890f1f8d2efd7061c4a0bb38f71"}, 0x2)

15:53:48 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x0, 0x73)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
splice(r2, 0x0, r5, 0x0, 0x1ffffd, 0x0)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, r5)
getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000040), 0x4)
connect(r0, &(0x7f0000000180)=@in={0x2, 0x0, @remote}, 0x80)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x80000000, 0x0, 0x2003, 0x4, 0x8, 0x3, 0x3})
sendmmsg(r0, &(0x7f0000001540), 0x24c, 0x0)
pipe(&(0x7f0000000380)={<r7=>0xffffffffffffffff})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x0)
r10 = accept4$alg(r9, 0x0, 0x0, 0x0)
splice(r7, 0x0, r10, 0x0, 0x1ffffd, 0x0)
r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ioctl$BLKRESETZONE(r6, 0x40101283, &(0x7f0000000300)={0x15ae000, 0x99c9})
r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r12, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r13=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000480)={r13, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x98)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000200)={r13, @in6={{0xa, 0x4e21, 0x3, @mcast2, 0x7fff}}, [0x7, 0xd1, 0x7, 0x20, 0x100000001, 0x100000000, 0x1ff, 0x8, 0x401, 0x100, 0x5, 0x1, 0x1, 0xfffffffffffffff8, 0x10000]}, &(0x7f0000000080)=0x100)

15:53:48 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x20000000)

15:53:48 executing program 1:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x81)
ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0xc028ae92, &(0x7f0000000080))
r2 = socket$inet6(0xa, 0x5, 0x0)
dup2(r2, r1)

15:53:48 executing program 3:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
read(r3, &(0x7f0000000000)=""/17, 0xfffffcd6)
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
splice(r4, 0x0, r7, 0x0, 0x1ffffd, 0x0)
dup(r4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

15:53:48 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000002c0)="650f0fa8a4000dbaa000b86340ef6465660febb600580f7885f2009a1d86d900660fc7b77b0026360fc76800baf80c66b8d4dcf98366efbafc0c66ed0f78cc0f09", 0x41}], 0x1, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r6=>0xffffffffffffffff})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x0)
accept4$alg(r9, 0x0, 0x0, 0x0)
setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc)
r10 = accept4(r7, 0x0, 0x0, 0x0)
r11 = accept4$alg(r10, 0x0, 0x0, 0x0)
splice(r6, 0x0, r11, 0x0, 0x1ffffd, 0x0)
getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

15:53:48 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x3a000000)

15:53:48 executing program 3:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={<r2=>0x0, 0x80000000}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={<r3=>0x0, 0x3, 0x5b}, &(0x7f0000000100)=0x8)
link(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00')
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000140)={r2, 0x6, 0x6, 0x4, 0x6, 0x6, 0x3ff, 0x4, {r3, @in={{0x2, 0x4e20, @remote}}, 0x4, 0x0, 0x959c, 0x401, 0x3}}, &(0x7f0000000200)=0xb0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0x0, 0x5)

15:53:48 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x3f000000)

15:53:49 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
timer_delete(0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x1ffffd, 0x0)
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)=0x86e)

15:53:49 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x58000000)

15:53:49 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r0 = socket$inet6(0xa, 0x8000008000080003, 0x5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x3aa5, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013003586000000030000000007000000", @ANYRES32=r4, @ANYBLOB="02000005000023000c001a0008000200c1000400"], 0x2c}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f0000000140), 0x2, 0x0)

15:53:49 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x8, 0x8000)
r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0)
close(r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x1, {0x3, 0x1c8a, "a099ecafd38e66bbd6aa4d583eb768258847f1bb5372aaf47f8029a193645b3bbcc9d18dfc4be98c9ae7b28bbcd5056b4bcbdac3d70ae6d9d54ff8b6edda4b7081c183ccf83952fd0d8401f04e5d7aa223a3746d27095a1cc5ca5ecfeb6261bcdf3c96236458a91688fa7dd854317a0e7edc43e94ecf4e11e2627cd73494d8e07500cc2f79a5717561ca1e4956b8380225653119e31b607ce70245200321b7d39f289e64e0531edc85e8773c0bd4ed5cf94491046611e6952cacbae7e31f2500e11c20625172f254cf92bf2dab3f5b474bb9c06a9273bcd4cbad3f93cf604668e8e8946bb810df4982ad77e6c21502530e95286372acb5fb35d4af33fc2adf79", 0x4e, 0x5, 0x2c, 0x80, 0x9d, 0x0, 0xec, 0x1}, r4}}, 0x128)

15:53:49 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fe530cb7d58f66b20536e6e25995df57f933eda02ba18ad181867514fe60077d4dd90123d3ee7cf43548ee858e07dfbdfd4e7540ebec677d6ac14c2c794f72cbf5fe31789e70233bfd8115efd90b0c48258f8dbe82e16cf8db95f5b068a9e00000000000000000000000000000000e0e30000000000000000000000000018287ba7d8807cf077cc420efca6785deb269d0a91985602763e0d70d404da006a3d6eef8fb7fcdd82eb1e484147058958f7f40496024da888d29155db62ab6c2a53a6ee024b82fd4a30c865ee555f991fcba48b85c712e8e8a5ab76377a19e6253d9ca13ba5fde86ca53072a6ce4e7517a36835c91e46fe234672719eebedf47298572e4de4da8c15d53a654fed856b8f579e5b89d1cf361e1cba7f1eecd96ae0f902d9cda62983a26fe9e413e1317f3b0d717cb76c688b1835e9e0d658a34d63e8beca0208761acb29d23e61294e003feb938c5b9bb5418ee7d9462b4a18e28391"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:49 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x5c010000)

15:53:49 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, {0x0, 0x0, 0x8}}, 0x8)
socket$inet6(0xa, 0x5, 0x2)
listen(r0, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x1be0b171dd43ee7f)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)=""/198)
r2 = socket$netlink(0x10, 0x3, 0x0)
dup3(r2, r0, 0x0)

15:53:49 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)

15:53:49 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x60000000)

15:53:49 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
accept4$alg(r3, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={<r4=>0x0, 0x7ff, 0x0, 0x7ff, 0x19}, &(0x7f0000000140)=0x18)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r4, 0x401}, 0x8)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0)

[  328.846307] device 0 left promiscuous mode
[  328.906707] device 1 left promiscuous mode
[  329.344476] audit: type=1400 audit(1571586831.490:147): avc:  denied  { map } for  pid=14624 comm="syz-executor.3" path="/root/syz-executor.3" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[  329.564404] IPVS: ftp: loaded support on port[0] = 21
[  329.911689] chnl_net:caif_netlink_parms(): no params data found
[  330.080854] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.087359] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.094453] device bridge_slave_0 entered promiscuous mode
[  330.101720] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.108536] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.116120] device bridge_slave_1 entered promiscuous mode
[  330.257591] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  330.267074] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  330.414207] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  330.422265] team0: Port device team_slave_0 added
[  330.428108] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  330.435638] team0: Port device team_slave_1 added
[  330.441388] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  330.564518] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  330.618100] device hsr_slave_0 entered promiscuous mode
[  330.656089] device hsr_slave_1 entered promiscuous mode
[  330.804460] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  330.812558] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  330.828133] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.834490] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.841147] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.848495] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.886976] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  330.893216] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.902349] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  330.942195] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.950024] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.957967] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  330.968785] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  330.977512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  330.984524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  330.993800] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  331.003670] 8021q: adding VLAN 0 to HW filter on device team0
[  331.013925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  331.021747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  331.030125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  331.038068] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.044405] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.090754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  331.103336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  331.111505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  331.119446] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.125890] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.139303] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  331.146950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  331.201792] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  331.210075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  331.221522] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  331.229316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  331.238954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  331.250710] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  331.307861] device bridge_slave_1 left promiscuous mode
[  331.313438] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.346691] device bridge_slave_0 left promiscuous mode
[  331.352229] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.357911] device hsr_slave_1 left promiscuous mode
[  334.409969] device hsr_slave_0 left promiscuous mode
[  334.481006] team0 (unregistering): Port device team_slave_1 removed
[  334.492266] team0 (unregistering): Port device team_slave_0 removed
[  334.503243] bond0 (unregistering): Releasing backup interface bond_slave_1
[  334.542598] bond0 (unregistering): Releasing backup interface bond_slave_0
[  334.622560] bond0 (unregistering): Released all slaves
[  334.669866] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  334.677368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  334.685419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  334.695533] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  334.704804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  334.712956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  334.720715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  334.728673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  334.736722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  334.751892] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  334.758561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  334.777188] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  334.789516] 8021q: adding VLAN 0 to HW filter on device batadv0
15:53:57 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x9c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xf6b0515d29dacb1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r6=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000480)={r6, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x98)
pipe(&(0x7f0000000380)={<r7=>0xffffffffffffffff})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x0)
r10 = accept4$alg(r9, 0x0, 0x0, 0x0)
splice(r7, 0x0, r10, 0x0, 0x1ffffd, 0x0)
r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r12, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r13=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000480)={r13, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x98)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f00000002c0)={<r14=>r13, 0x3, 0x1, [0x6e2]}, &(0x7f0000000300)=0xa)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000003c0)={r6, 0x8, 0x0, 0x100, 0x9, 0x8, 0x3, 0x6, {r14, @in={{0x2, 0x4e20, @remote}}, 0x1e2, 0x3ff, 0xffff, 0x1, 0x101}}, &(0x7f0000000340)=0xb0)
r15 = socket(0x0, 0xa1128d12265c68a4, 0x1f)
prctl$PR_SET_UNALIGN(0x6, 0x3)
setsockopt$IP_VS_SO_SET_ZERO(r15, 0x0, 0x48f, &(0x7f0000000280)={0x0, @broadcast, 0x4e21, 0x2, 'lblc\x00', 0xa, 0xff, 0x46}, 0x2c)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r16 = accept4(r3, 0x0, 0x0, 0x0)
r17 = accept4$alg(r16, 0x0, 0x0, 0x0)
splice(r1, 0x0, r17, 0x0, 0x1ffffd, 0x0)
fsetxattr$security_evm(r1, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000180)=@v2={0x5, 0x1, 0x14, 0xfffffffb, 0xf6, "b0a10470be25cc7ac85c9bbb8f60e621f9826ccc2230beaef8b7ee90d73a477a70b4c1b53f0483c2db41bae129cbb27cb5b7f4c4c8e9bd50c2c1996281a1b573acce6a7d440026951da77ab6960480897e0319d94e78f1d8758d844233bd4b1f4090cf375d07a51166c2eaa1edf9b3025c43c57f0f62817b7ae53a89c71cb5c4ddc76936e7c22d5249314a9821fd402dd16f37b733a8bdf56273ec8996e7cb128d3324c3e0adb2aeff2c5f8c05d720c4a89214f5b49ae4ac8fa45e5a681b5e58a66527fd3a9bc5d1198f3a1b06251ad12878fb672be0d7962e22cb1107e9bea33458b341687798b1f24a776e1b97407e38b43e47aa5a"}, 0x100, 0x6)

15:53:57 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0xa0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x7)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/304]}, 0x1a8)

15:53:57 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x8dffffff)

15:53:57 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc2e51898b6c0efca}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000012c0)='/selinux/enforce\x00', 0x18502, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00'}})
keyctl$dh_compute(0x17, 0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x82040, 0x0)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r3, &(0x7f0000001340)=ANY=[@ANYBLOB="2321202e2f66696c65300a9e9d6eb3925efe238c94e7e9ed4bdba739af61de5a818b7af7a4e51033a02f8474cdd101283fe7f7be5996c8325ed770697a24d03b3d53d4fdf698ff3c152f"], 0xb)
close(r3)
ioctl$SNDRV_TIMER_IOCTL_STATUS(r3, 0x80605414, &(0x7f0000001300)=""/59)
fcntl$setlease(r2, 0x400, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000100), &(0x7f00000002c0)="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", 0x2}, 0x20)
ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000180)={{0x7, @name="c85879dfad5f1c53bf8d2fb3122c93212689dfe35b85f0a60fc2e3ce9abbeede"}, "0c9412ed1bdc8c3f4ffe8ade39d018171bb76ab11958ffaad19810a0febcb77b", 0x2})
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
dup3(r2, r4, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x1)

15:53:57 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
userfaultfd(0x80000)
exit(0x0)
timer_delete(0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x1ffffd, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x86a010}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r4, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x7, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40010)

[  334.995731] audit: type=1804 audit(1571586837.140:148): pid=14645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir559392256/syzkaller.Mc7kcV/24/file0" dev="sda1" ino=17234 res=1
15:53:57 executing program 4:
clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00')
exit(0x2)
preadv(r0, &(0x7f0000001300)=[{&(0x7f00000002c0)=""/65, 0x41}], 0x1, 0x0)

15:53:57 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xa0018000)

15:53:57 executing program 2:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={0x86e}, 0x8, 0x400)
fcntl$getownex(r0, 0x10, &(0x7f00000002c0))
r1 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000100))
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000140))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x0, 0x0)
ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000380))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:57 executing program 3:
syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\b'])

[  335.219718] audit: type=1400 audit(1571586837.370:149): avc:  denied  { dac_override } for  pid=14662 comm="syz-executor.4" capability=1  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
15:53:57 executing program 4:
r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x14)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
close(r0)

[  335.313457] hfs: unable to parse mount options
[  335.340337] audit: type=1400 audit(1571586837.400:150): avc:  denied  { sys_ptrace } for  pid=14660 comm="syz-executor.4" capability=19  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
15:53:57 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xe8030000)

[  335.504153] hfs: unable to parse mount options
15:53:57 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x2, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000380), r2, 0x1}}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:58 executing program 2:
getpgid(0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r0=>0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x339, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5012, 0x0, 0x4, 0x9}, r0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)

15:53:58 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x8, 0x0, "909cafa60fd10ab547327b06091159e9c0600ebf0202bea4340d7c27cc18f6968f76f26ac6f6e83ffdd95db9abcb6acddfc66504d914934ef0ade099a0437c4e373b5865bfe34344dd1f5b7a38bbe21e"}, 0xd8)
listen(r2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0xa7, 0x0, 0x0, 0x0)

15:53:58 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xeffdffff)

15:53:58 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xf4010000)

15:53:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2$9p(0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)}], 0x2)
eventfd2(0x0, 0x0)
open$dir(0x0, 0x0, 0x40)
open(0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x404000, 0x0)
ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x0, @broadcast, 'irlan0\x00'}})

15:53:58 executing program 1:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r0, r1, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_script(r4, &(0x7f0000000380)=ANY=[], 0xfffffed5)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_script(r5, &(0x7f0000000380)=ANY=[], 0xfffffed5)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r6, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$BLKALIGNOFF(r6, 0x127a, &(0x7f00000008c0))
r7 = accept4(r3, 0x0, 0x0, 0x0)
r8 = accept4$alg(r7, 0x0, 0x0, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000840)='SEG6\x00')
r10 = accept4(r9, 0x0, 0x0, 0x0)
r11 = syz_open_dev$radio(&(0x7f0000000880)='/dev/radio#\x00', 0x2, 0x2)
getsockopt$bt_BT_FLUSHABLE(r11, 0x112, 0x8, &(0x7f0000000900)=0x401, &(0x7f0000000940)=0x4)
accept4$alg(r10, 0x0, 0x0, 0x0)
recvmsg(r10, &(0x7f0000000800)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f00000003c0)=""/206, 0xce}, {&(0x7f0000000240)=""/151, 0x97}, {&(0x7f00000004c0)=""/232, 0xe8}, {&(0x7f00000005c0)=""/171, 0xab}, {&(0x7f0000000340)=""/55, 0x37}], 0x6, &(0x7f0000000700)=""/209, 0xd1}, 0x20)
splice(r2, 0x0, r8, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={<r12=>0xffffffffffffffff})
r13 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r13, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r14 = accept4(r13, 0x0, 0x0, 0x0)
r15 = accept4$alg(r14, 0x0, 0x0, 0x0)
splice(r12, 0x0, r15, 0x0, 0x1ffffd, 0x0)
ioctl$PPPIOCGCHAN(r12, 0x80047437, &(0x7f0000000980))
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x94, &(0x7f0000000180)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x4b, @empty, 0x4}, @in6={0xa, 0x4e24, 0x7ff, @mcast2, 0x3}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0xfff, @local, 0x1000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}]}, &(0x7f0000000300)=0x10)

15:53:58 executing program 2:
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r3)
syz_open_dev$char_usb(0xc, 0xb4, 0xf6f)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r5)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r6=>0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000140)='syzkaller\x00', 0xffffffffffffffff}, 0x30)
sendmsg$nl_generic(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)={0x778, 0x2b, 0x2, 0x70bd2b, 0x25dfdbff, {0x1d}, [@nested={0x1f0, 0x84, [@typed={0x10, 0x43, @str='em0trusted\x00'}, @generic="ecf7f6bf35b13d1bb705eb58a3d44f477a171ffc09120091d137a99f225b5dd1928e6fc09ceebe6429cd23172ac705c8c5348dd188af344b6371acae1a80dfa3d8c1771446089d7f0856bd287f9cd25ab99e1ecd19d61188158a8097c515fb78b1b63ad15872582ad5738ca8a7956a5cce3006df433ba65c4164d83e685ceefe00ebfbd68cfbe98e54cacef39c3b7baf03d68b7be5d83fa59d87e988a4f085daba3fa5d7548470dc11ca905e54ff38e02bd4019b56d7946454d2dea72275db5f8629900401537bc685d0a67f52103dd7019450aeb7922f311a1113e2689cf0232279a9a2a1cf1fdc4629535405", @generic="4346b03a485a01bd88f026232b307759bc701c5ce8ca81cb3d45d4f57fce7682bf233ba64a4a4211005bdafe5135b6c6ebc319ba77b8789f00eff71e79dc764dbbc88db935f3dd3f089a8b9b16b3729b05eb6ca14ea89854c2941afa8521d895da235e291f797458b496a50dbb343437434d1a05a501ef13e2f11af9b3be50f5ee9003ab83d97cdf2d8f322661b0f1507f50abdbd259db21e9cccc2dd1e30163735dfdae2ad6efd82de3948eb8edf8fd9aacd44667adf17026ddd2724f6f29089c74cb675184bfa44c7fcc4f8543a6517a8140158653afef66", @typed={0xc, 0x7f, @u64=0x3}, @typed={0x8, 0x11, @ipv4=@remote}]}, @typed={0x8, 0x76, @uid=r3}, @nested={0x24, 0x72, [@generic="777f9bcf177771c5f5d7a1ec551f0465", @typed={0x10, 0x38, @str='syzkaller\x00'}]}, @generic="e9c64022601df572ef03937e6bac9349bf722edd76090944a3bcf2321576070946c0bc926dc146f51c878cf2ab78be5840e38fc849d24f328e9edc3512530631b3b7e21aa7d9400c9dceaca24afb5c51199b60d180d221f3778415b2efcd600bbab5191ddac4026f6dd88e0a4de51809cf1c1e9fb436a78f039b25b7b5496ae7cc3fe4ca1ed360bb672f71a0b0efda2b524ea3efa1357d104d9430e13e8ea64888bc30c02afb670a2730a33eba8805d404c201339d15271d0a70221769aef4c8eeeb77fa3245b69d175aaadf3e5ac47aac0760", @generic="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", @generic="6c9ce74370d7d06a422b9dd6db82c03a03d33f4cec0b56c4b38828638b5b564f7ff45a237d0d41a88ff663b6def71442b340ff59c83a1e20122f617fe48c766517c63f308c391cc107419c78d98a9f68cd8f67c9c11266db1eaab2c81b8aca405f9e00d6887305b1710a83f34618eb631e9f323b65cd427767b0be4521c0c0b64b6fdbb03b3103c8a3c7be4d3c140fe501776ecd128c02eec7a85dbb197a3b4b07ac1256119d67133ab8adb8e86320ccc8ff80", @nested={0x2c0, 0x57, [@typed={0x3c, 0x76, @binary="a47d7fcaa0847800f4817314af73377a4efa642d2cebff95a58675b64c3ca98eb8b21a1486bb46091444a1b8cb3afae4ca9d2c8395570d"}, @typed={0x8, 0x8, @uid=r5}, @generic="1e9a00d25b163a3429b28e54440b64c043d60ef503f71c95e8d558be2e9aa518731e4d6a2d475f54da630764b278113f51df50ac84cbbf5187ecc33d03d062d99f3c8b1a3e2f74d2bdedfd3e260addb0cac986dc91eb775748b62eaa0e421de9ecfec1bcde0ca2b8d081bd16228e4fde523aad75e16c76125d336cd4061993734b9c1780445f169ed5b66b32f4327f", @typed={0x8, 0x15, @u32=0x8001}, @generic="d48e8a362fc3b5213390095f277b52dd9c548347bf424c6d0700c06a25d2691d355fa62aaa5d9aefd7b274a92dd637fa45aed4487b8546868d3d87b84b98cc2ab744599f6c1952031119dac7d5b4666e4be71793a00b40451c9b1b39f7dd9830fc5d437cc96bbe3cb0342528c8029d920e183bcedce0f929c256db117417c705ad22ad43ffc9e9aea0640ef2856e623e2733e60b0f636c87d80920ffbed0746f275a537d8a1e460247c5fb6aa50503a71ed2f749d3bfe2769719039e12a8ead88e40e6ff6342f82df82d3b876216f54b0bab3313cc4fde771b333e224d2a17dbf17a5feb0961f3bce1e0ed143ef74ded7bf501be", @generic="c19890c95901f81ec4e8c96915a64753c22e3956c7e21e978993b8723a808681c1ac1ec218e92de8bc89095a560eb4c1cd58ca079ea27f71cd12bcd289a180f2fa83fdf28bf5", @generic="2df1ed24a3d9409ca7de4abbd0e01babecf23c", @typed={0x8, 0xa, @pid=r6}, @generic="177440e357d16b0bf399b080bfae18e3516ed10a1bfb7ce570d30a351c3ccfb77a976f174b5beb74ae2827af8faa289e4a1db6f7ef1f5ab9001a178e5f0ae30832f5a6ecb88c65b85555f9c39f03797ae8327dfd7271cadc25675f557ff8ce923703954c1850eb26c8e09fd63443b638f39368a6b2e5dcceac4f619f0968877546", @typed={0x8, 0x38, @ipv4=@rand_addr=0x2}]}]}, 0x778}, 0x1, 0x0, 0x0, 0x816}, 0x40)
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$TIOCCBRK(r0, 0x5428)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:58 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xf5ffffff)

15:53:58 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xffffffffffffff8e, &(0x7f0000000600)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x1d8, 0xffffff11, 0x0, @remote, @local, {[@dstopts={0x33, 0x0, [], [@pad1, @calipso={0x7, 0x0, {0x9, 0x0, 0xfa, 0x3f, [0x2, 0xc75, 0x4, 0x5f2, 0x10000, 0x2]}}, @enc_lim={0x4, 0x1, 0xff}, @pad1, @generic={0x7f, 0x0, "ed787fde88be04be11668f77f848b31cc2ea0221d2726ecdc784e468fef94da8b2e9a523b44aef7de2ff7d66bbbaf2eb8d8d17d9040363e8e5e757bdcd53953851b1fd6bb41e7df6bf259e1a23d4caa932d56d015f619c24e72c6afb7e5a11a202c97c56a05a8cb56b99d64698e92c846824b9ef514e4af238f30a489d26949ea8faa475f869c40517bffda97d2ec21c19639c080ecf71b7af866e1a7ffdb3"}, @calipso={0x7, 0x0, {0x5, 0x0, 0x6, 0x200, [0xffffffffffffffff, 0x8000]}}, @hao={0xc9, 0x0, @empty}]}, @srh={0x0, 0x10, 0x4, 0x7, 0x5, 0x20, 0x2, [@empty, @remote, @rand_addr="0ea31b2dd3862fd8bc2d642842223eb2", @local, @mcast1, @mcast2, @remote, @remote]}, @dstopts={0x0, 0x0, [], [@pad1, @ra={0x5, 0x2, 0xa1}]}], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r4, 0x0, 0x1ffffd, 0x0)
io_setup(0x5, &(0x7f0000000040)=<r5=>0x0)
pipe(&(0x7f0000000380)={<r6=>0xffffffffffffffff})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
r9 = accept4$alg(r8, 0x0, 0x0, 0x0)
splice(r6, 0x0, r9, 0x0, 0x1ffffd, 0x0)
io_cancel(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x14, 0x90, r0, &(0x7f0000000080)="a93c46e050f42a10205c35d473f9e99e38279e5c16d3a030dc381ddf331f4789ba8487960d9ba4a932d326e168f07b383a346e2c8df39b6422e81f776b92df", 0x3f, 0xfffffffffffffa77, 0x0, 0x0, r6}, &(0x7f0000000180))
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000000)={0x0, 0x2})
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r0, 0x0)

15:53:58 executing program 3:
r0 = socket(0x10, 0xa, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e6700000000000000000000000000000000000000000000000000000018040000000000000c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009100000000000000000000000000000000000000000000000000e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027327243436c7d2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700000000"]}, 0xa08)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/seiinux/mls\x00', 0x0, 0x0)
ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000040))

15:53:58 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xffffa200)

15:53:58 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xfa53538b62c8d10f, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x226)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {0x2}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @random="d90078f2fc85"}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:53:58 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xfffffdef)

15:53:58 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x3, 0x0)
r2 = dup2(r1, r0)
ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xf4, 0x19, 0x119, 0x0, 0x0, {0x3}, [@nested={0xd4, 0x96, [@typed={0x8, 0x48, @ipv4=@local}, @generic="f15087fd1921f07fe9fb7dbe290fb22a01a6da4bd3ab8bd13b2df670d8a5", @typed={0x14, 0x37, @ipv6=@ipv4={[], [], @broadcast}}, @generic="e02c0bcad9367eece0329137146bdb3129a1ad86add93b0643edc489d1c1e297090143bf51a3cfc52efb780366121b84e187d90d09d876ad343e592e3ffc9eae667e0691af765f245b4729f1799c8ebab3662a754c1a1026dca2a4e3afbd5f11414e1f7078c83c1853827e411088e0ae3623783325fa8d0cb2f63a4119a3825ef058e55c1004ac3c24fa12d8861751e4e6cc7340c5"]}, @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000b00}]}]}, 0x414}}, 0x80)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_script(r4, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00')
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_script(r7, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$KVM_SMI(r7, 0xaeb7)
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x14, r6, 0xe87a52239f974ee5, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x128, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xd4, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa67b1ca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5cb4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x80c}, 0x8040000)

15:53:58 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xffffff7f)

15:53:59 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xffffff8d)

15:53:59 executing program 1:
socket$alg(0x26, 0x5, 0x0)
r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r3 = gettid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0)
setpgid(0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r5 = fanotify_init(0x0, 0x0)
fanotify_mark(r5, 0x2000000000000011, 0x2, r4, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r6, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000003c0)={[{0x7f, 0x7fff, 0x5, 0x3, 0xfc, 0x1, 0x6, 0x7, 0x7f, 0x2, 0x0, 0x7f}, {0x0, 0x8, 0x81, 0xa9, 0x8, 0x1, 0x0, 0x9, 0x40, 0x8, 0x40, 0x0, 0x1}, {0x7ff, 0xcb, 0xec, 0x8, 0x5, 0xbf, 0x7f, 0x3, 0x9, 0xe0, 0x5, 0x20, 0x9}], 0x6})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r6, &(0x7f00000001c0)="0caa065adb78c722a4e63cef509a6aedb1e6d3cfbeec04295f11ecf14048fc31316bf853242dda172660d16d4c656ea09bbeb18200367778a678de5a0e195cd86ad6c291e939aaeb59f1419964722aab68b0758c0250f65aa886a2be7d0b7360d110704f98adab8d26caf67c8a79895dcb2637792ffbb6d940dc03da9d6129951a8b6a2d64092981a27c36ea64a5b2ad703e6149622e3f555ab983c4937074a0d0456295b5421f9c731a7a8d53620e5c1aefa41f86d542143923914ca42b0b60f1c4ee4939ded2036b7e7a", &(0x7f00000002c0)="b8e49f2b86edd7cc17ac5bf5f7e29fa98065254a5226a28f5d1c9d78032437b33ea35db6ff8489d4d24edffe6e2e9609e47a3108a109a6105efb63849a6decfe9270cafe69a0dc03cfacf1cfa7a9fc943bf6cf715ce1ab13358fc16146ebc89240681f41138017868e96b87af188345f1c2eee9e13bfe7cd80e22da9", 0x4}, 0x20)
write(r1, &(0x7f0000000600)="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", 0x200)
sendfile(r1, r2, 0x0, 0x7fffffa7)

15:53:59 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xfffffff5)

15:53:59 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x100, 0x0)
ioctl$TIOCGICOUNT(r5, 0x545d, 0x0)
splice(r1, 0x0, r4, 0x0, 0x1ffffd, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000100))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:53:59 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x4000000000000)

[  337.106722] audit: type=1800 audit(1571586839.260:151): pid=14781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16738 res=0
[  337.211233] audit: type=1804 audit(1571586839.280:152): pid=14781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir254642148/syzkaller.QVKmhj/203/file0" dev="sda1" ino=16738 res=1
15:53:59 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000040))
exit(0x0)
timer_create(0x3, 0x0, &(0x7f0000000140)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000140)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory\x00\x00\x00\x00\x00\x00\x00\x00', 0x7a05, 0x1700)
write$cgroup_pid(r3, &(0x7f0000000000), 0x10000000d)
ioctl$TUNSETFILTEREBPF(r3, 0x6609, 0x0)
timer_delete(r1)

15:53:59 executing program 4:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x9)
connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
splice(r4, 0x0, r7, 0x0, 0x1ffffd, 0x0)
write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r4, @ANYRESDEC=r7, @ANYRESHEX], 0x2e)
socket$alg(0x26, 0x5, 0x0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000))
pipe(&(0x7f0000000380)={<r8=>0xffffffffffffffff})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r10 = accept4(r9, 0x0, 0x0, 0x0)
r11 = accept4$alg(r10, 0x0, 0x0, 0x0)
splice(r8, 0x0, r11, 0x0, 0x1ffffd, 0x0)
ioctl$IMGETVERSION(r8, 0x80044942, &(0x7f00000000c0))
splice(r0, 0x0, r3, 0x0, 0x10001, 0x0)

[  337.276114] audit: type=1804 audit(1571586839.300:153): pid=14781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir254642148/syzkaller.QVKmhj/203/file0" dev="sda1" ino=16738 res=1
15:53:59 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x8)
timer_delete(0x0)

15:53:59 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x8001a0ffffffff)

15:53:59 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r4, 0x0, 0x1ffffd, 0x0)
recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/93, 0x5d}, {&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000280)=""/215, 0xd7}], 0x3, &(0x7f0000000380)=""/38, 0x26}, 0x40000040)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r5, 0x8991, &(0x7f0000000040)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'})
ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03`L!!\x00\x01\x00\x05', @ifru_names='bond_slave_1\x00\x00\x00\b'})

15:53:59 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xa2ffff00000000)

[  337.642854] bond0: Releasing backup interface bond_slave_1
[  337.722684] bond0: Enslaving bond_slave_1 as an active interface with an up link
15:54:00 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x100000000000000)

15:54:00 executing program 2:
lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x23, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fe530cb7d7f933eda02ba18ad181867514fe60077d4dd90123d3ee7cf43548ee858e07dfbdfd4e7540ebec677d6ac14c2c794f72cbf5fe31789e70233bfd8115efd90b0c48258f8dbe82e16cf8db95f5b068a9e0000000000000000000000000000000000000000000000000000000000000018287ba7d8807cf077cc420efca6785deb269d0a91985602763e0d70d404da006a3d6eef8fb7fcdd82eb1e4841"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x400000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20)

15:54:00 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x2, 0xc0000)
fcntl$setpipe(r0, 0x407, 0xffffffff)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x4, 0x7, "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", 0x3f, 0x4, 0x4, 0x1, 0x4, 0x80, 0xff}, r1}}, 0x120)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
connect$rxrpc(r2, &(0x7f0000000240)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @mcast2, 0x27}}, 0x24)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000280)={'veth0_to_bond\x00', 0x8})
r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000300)=0xba8b)
ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f0000000340)={0x332, 0x7fff, 0x7, 0xffff, 0x10, 0x5})
prctl$PR_CAP_AMBIENT(0x2f, 0x7, 0x0)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000380)=0x40, 0x4)
r5 = inotify_init1(0x100800)
fsetxattr$security_ima(r5, &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000400)=@v2={0x5, 0x0, 0x13, 0xfffffff7, 0x1, "ac"}, 0xb, 0xeb7b994827137144)
recvfrom$inet6(r2, &(0x7f0000000440)=""/171, 0xab, 0x40, &(0x7f0000000500)={0xa, 0x4e23, 0x8, @loopback, 0x3}, 0x1c)
r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/mls\x00', 0x0, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f0000000580)={0x7f, 0x2})
prctl$PR_GET_UNALIGN(0x5, &(0x7f00000005c0))
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/access\x00', 0x2, 0x0)
r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x78136ffa8b80422e, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r7, 0xc0a85320, &(0x7f0000000680)={{0x0, 0xf7}, 'port1\x00', 0x2, 0x40000, 0x7, 0x6, 0x7, 0x1f, 0x7, 0x0, 0x1, 0x80})
r8 = syz_open_dev$vbi(&(0x7f0000000740)='/dev/vbi#\x00', 0x2, 0x2)
setsockopt$inet_mreqsrc(r8, 0x0, 0x25, &(0x7f0000000780)={@broadcast, @multicast1, @loopback}, 0xc)
r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000800))
r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840)='/dev/vcs\x00', 0x30000, 0x0)
bind$netrom(r10, &(0x7f0000000880)={{0x3, @null}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r11 = syz_open_dev$sndpcmp(&(0x7f0000000900)='/dev/snd/pcmC#D#p\x00', 0x0, 0x4b8180)
setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000940)={{{@in=@loopback, @in6=@remote, 0x4e24, 0x6, 0x4e23, 0x9, 0xa, 0x50, 0x90, 0x11, 0x0, 0xee01}, {0x7fffffff, 0xfff, 0xfdfb, 0x5d5, 0x7ff, 0x1, 0x8, 0x3}, {0x2, 0x52c1, 0x401, 0x100000001}, 0x0, 0x6e6bb2, 0x3, 0x1, 0x2, 0x1}, {{@in6=@ipv4={[], [], @remote}, 0x4d2}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x34ff, 0x0, 0x45d7ac4f40b378, 0x8, 0x50, 0x3, 0x5}}, 0xe8)

15:54:00 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x123000, 0x0)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000300)=0x8000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bind$alg(r1, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
r2 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x9, 0x12800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='syzkaller\x00', r2}, 0x10)

15:54:00 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x200000000000000)

15:54:00 executing program 1:
mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x0, 0x2000000008972, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a})
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4000, 0x0)
ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0x1f, {0x8, 0x7, 0x5, 0x5}})
read(r1, &(0x7f0000000100)=""/147, 0x135)

15:54:00 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r4, 0x0, 0x1ffffd, 0x0)
ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000100))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:54:00 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r0, 0x8, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x4000)
syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="73857373696f6e3d3078303030303030303038636666666666662c00d6348e12817bd9cc25ef33496e6dd85271f91d2b0635670797291cd271e49fabbf5a2158b734c3c48193bc23ea31179e9725b0a6aaf31c0e589d5f939c8afff85efc154e7abda225347d37eb0e866dd6440ee77bd146157abebfaca532ac707f91785ef06bde1d99c756049250a64f8776030648e07969d0cd50bbf35ca29d05fa89020fdc1576b7889bade7befbdd1ea0ae45d2b74da2c014ad43ff6e4819e42aa6ff683d53e607eea5d41e9598d04a738c6e0661699e8fbd3b986e51217b1b7b8c0d17342ecacc86"])
openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x40200, 0x0)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400000, 0x60)
getdents(r1, &(0x7f0000000080)=""/103, 0x67)

[  338.349131] hfsplus: unable to parse mount options
15:54:00 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x400000000000000)

15:54:00 executing program 1:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = open(0x0, 0x1fe, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x400, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={<r2=>0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80000001, 0x4, 0x0, 0x7, 0x28}, &(0x7f0000000240)=0x98)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000300)={r2, 0x9b, "787735e7bc1b7dc32f68d1cd733c852331c419a7f2c94c2a5a2cbc81070419d71380c50608af9709e3f890ca21d30758d8fa38719d5e6f15a66274b5c86b6db840dfac2c49b4da5715260e62dcd1cc2b63bbad77712cc3f2a8fa9305b78c963e45ccd0784b7e11f41a46527b948216ed02a8447004df61109f9d943fe863a823f748dab10058563318b87b8bf233427b315988ac0efe6cfdfd4ce7"}, &(0x7f0000000400)=0xa3)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8000}], 0x30}, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0xf4240)
write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r4, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x2f5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680})
socket$alg(0x26, 0x5, 0x0)

[  338.430011] hfsplus: unable to parse mount options
15:54:00 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget(0x3, 0x0)
socket$inet(0x2, 0x200000002, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
add_key$user(0x0, &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000012c0), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c)
socket$unix(0x1, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r2 = accept(r0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5)
shutdown(r1, 0x2)
sendto$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)

15:54:00 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
accept4$alg(r3, 0x0, 0x0, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, <r4=>0x0}, &(0x7f0000000140)=0xc)
mount$9p_xen(&(0x7f0000000040)='{\xc7vboxnet0mime_type#trusted[)\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x508400, &(0x7f0000000180)={'trans=xen,', {[{@mmap='mmap'}, {@fscache='fscache'}, {@cache_mmap='cache=mmap'}, {@access_client='access=client'}, {@cache_fscache='cache=fscache'}, {@cache_mmap='cache=mmap'}, {@privport='privport'}, {@access_any='access=any'}, {@aname={'aname', 0x3d, '+'}}], [{@smackfshat={'smackfshat'}}, {@uid_lt={'uid<', r1}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r4}}]}})
exit(0x0)
timer_delete(0x0)

15:54:00 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x24a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x1ffffd, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x425df400a142b01a, 0x100010, r3, 0x45)
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000000c0)='./file0\x00')
mkdirat(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mmap$usbmon(&(0x7f0000237000/0x2000)=nil, 0x2000, 0x1, 0x8e034, 0xffffffffffffffff, 0x0)

15:54:00 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000002c0)=0x2)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
chroot(&(0x7f0000000080)='./file0\x00')
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000400)='ramfs\x00\x9b\x95\x84\x10D\xfb\x9b\x81R#\x10O\xd3\xb4\xe8\xa3\x1f\x00\r\xf6\xd9\xbbt\x95f\x9e\x02\x06\xf946\\{(\xc8\xa7s\xd2>\x81\x88l\x0e\xc5%\x99\x00\x02\x9d\x85\xfc\xa9\\\x99<zMw\a\x02:\x8d\x03\x15S\xf8\xdd\xa1\xa5\x02\xb2DTBG0mk\xe5gE\x9bIL\xdc}\x13\xf8\x8f\x15S\x92\x9b\xda\\J\xf2\xc1-\xe9\x92\x12\xa8\x81\x06\xa9\x9b2-\xc5)\xe9v\x92\xd54\x9fg\xff\xc2\xb5VL\x85\xd5j\xaf^)]\xe0m\x95\xf8\xea\x9a:\xaf\xae\x0f\x84Zo\xc0\x11!\x9f\xe0[\x8d\xb9\x1f\x95t\xe9F>:\xe4\x9c\xf9z>w\xe7\xa9\xa8=\xe9o\x9f\xfbKE\xd7\x9a\x1b\xf8\x86@\x8e\xe6\x9em\x89\xab\x19\xea1\x8e\xa1\xb5\xd7\xc6\xc62\x05\xc7\xe5\xd2m\xeczV\x1d\x84\xcd\xc0\xdf', 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
link(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000280)='./bus\x00')

15:54:00 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x500000000000000)

15:54:00 executing program 3:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x278, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0)
r0 = getgid()
getresuid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=<r1=>0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x7, &(0x7f0000000600)=[{&(0x7f00000001c0)="b92df8c75fa8cfe1e889af7934e5969aef63d2ff56078c12729e9288cc03651a2c66da7a56cc915f152aea2e1bafca38aecf1ecbc734108d23f622064bc66ce3373de6004e90c417fc0d757ce2274a24c05e6c4ea0703e8b6a7b9afe0b1488bcc24397b19e55e276920bd2e8cb786196c66dabda77470039ed3cb51e89f6a1bf350a4d2d56e7781950ac3c4840d655149460980178d2c1497aac036b88b9f447e44c963718", 0xa5, 0xff}, {&(0x7f0000000280)="5f3c9d22d8c81e3b3446af7a685bae950428ca210c2e352baab4eb76aed19a9ff8748240b166784060988343f7c6685f719aed49a833f8fc8f9c74cb1d0541b25ae445dafa5d66234b7f708ed30d308a51144a66455d12269dc28ba9187d163841ad0cc57b72a1f824d684bb620b93a62468d2cc867e9fc7846bc7b73116882e450ecdb26eba1ce4069d9fc69465689b08f4fb0c4a72c08e33de58971a2d2c00b23f", 0xa2, 0x9}, {&(0x7f0000000140)="59da6d751c93ee889d3d1fb9f2cc53752892a9877ec531e70231957e8c", 0x1d, 0x81}, {&(0x7f0000000340)="026f6d990b5abc6e666bf0f7a7fae2ed14231298c9b564ab6f5279513c15098789677e5db284fdb8718427652a3aa5780ba34e06e8283c4afacdf20aaed06cc55d538559bc1c829e31845d50abaf76f1a093e0ee5dfeb442004d9bf6ac83427ecdf10c8d30018052ca0699a984dc", 0x6e, 0x2}, {&(0x7f00000003c0)="42a257f880c67689d57052abfc996345a2005e1f0c2b8156ce74a34ea720c3e024b378d8037d830a916201475dc22533fbf2e2ff0aa8bcdcd73a48571a4b7e3cd550214f9bc34bfe0b84be5462a4db6b4609ab0e081ada1c13475943b98cf37529a56b6e0444e7da45c64ef6a66c6c3c13f4619e3406e38ae6a9012a8877010f1e0ffa5866e8c6243153822b4c14690c0fd5593b26eb5e6dbbe5d8393b1d3db7d622f17ef48ee619ad46a95af7", 0xad, 0xffffffffffff0000}, {&(0x7f0000000480)="c7b8f831d1ad27dcca01256ef6fdefa2ff2945ba01c865929e99c6922c715ffedd969ce526f31af2059693c99f6b729a05c9386d935fc8eb3b8a549bba1a9d4832f4c319d4e2866d25327a5313148045acf0640425100bf0f7e45a214028bb8890a79a12b2e79abc3c0dc03b9266bba6e9b17d0aa8777142cf0f5adf238deef431db2c01fabbe0", 0x87, 0x7}, {&(0x7f0000000540)="8eecb4a23f99b9f10894276fce4db1ec0f8f69034d361839a87ed5c8ac2cf78d79a8ad2943d1ab5804f339d23ccb093090eeff585cfe90a4b232e7aeb5ec8674b9c24695794f26935b43888dbdd77fc42d9ff73aba81c73919c7d8c62bba60d8c5b1f2d22480e02d372a872a97b0245d4d260147da475c993ba7e437985713c961bdfde34be7b96fea4695bdcd79e31e8f982a7eee77a1", 0x97, 0x3ff}], 0x0, &(0x7f0000000780)={[{@nls={'nls', 0x3d, 'cp1250'}}, {@gid={'gid', 0x3d, r0}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose='nodecompose'}], [{@fowner_lt={'fowner<', r1}}, {@dont_appraise='dont_appraise'}, {@appraise='appraise'}, {@context={'context', 0x3d, 'root'}}, {@permit_directio='permit_directio'}]})

15:54:01 executing program 1:
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
r0 = msgget$private(0x0, 0x20)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/240)
futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0)
r1 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000200)=0x3d39c113)
r3 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x1001, r1)
keyctl$read(0xb, r3, &(0x7f0000005340)=""/4096, 0xd900)
keyctl$setperm(0x5, r3, 0x20000000)
r4 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\xf8\a\xf5A\a\xa6$\xcd[$\xcf', r1)
pipe(&(0x7f0000000380)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r6, &(0x7f0000000380)=ANY=[], 0xfffffed5)
getsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000180)={@dev, @initdev}, &(0x7f0000000240)=0x8)
keyctl$get_security(0x11, r4, &(0x7f00000003c0)=""/159, 0x9f)

15:54:01 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x700000000000000)

[  338.915959] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  338.925547] BFS-fs: bfs_iget(): Unable to read inode loop3:00000002
[  338.980412] hfsplus: unable to parse mount options
[  339.038592] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  339.045149] BFS-fs: bfs_iget(): Unable to read inode loop3:00000002
15:54:01 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xa00000000000000)

15:54:01 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x87, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000200))
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0)
ftruncate(r2, 0x200006)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r5, 0x0, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r5, 0xc0406619, &(0x7f00000002c0)={{0x0, 0x0, @reserved="221a0351c7f2b493b6e33fbafdfa89a2d63462d83c804518e4f23d54c9b3beec"}})
r6 = fcntl$dupfd(r3, 0x0, r4)
accept$ax25(r6, &(0x7f0000000180)={{0x3, @default}, [@bcast, @default, @netrom, @rose, @null, @bcast, @bcast, @default]}, &(0x7f0000000000)=0x48)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendfile(r0, r2, 0x0, 0x8000fffffffe)

15:54:01 executing program 2:
r0 = shmget(0x0, 0x3000, 0x318, &(0x7f0000ffd000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$IPC_RMID(r0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x23, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x3600000000000000, 0x1c, 0xfffffffffffffeef, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x269, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000001000)={0x80000001, 0x3, 0x0, 0xfff, 0x6, [{0xb1e, 0x1, 0x2, 0x0, 0x0, 0x2102}, {0x80000001, 0x59, 0x8}, {0x4, 0x3, 0x3, 0x0, 0x0, 0x201}, {0x3, 0xa5f4, 0x800, 0x0, 0x0, 0x2}, {0x2, 0x1, 0x7, 0x0, 0x0, 0x1000}, {0x5, 0x7, 0x2126, 0x0, 0x0, 0x2000}]})
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
splice(r2, 0x0, r6, 0x0, 0x1ffffd, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000380)={<r7=>0xffffffffffffffff})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000540)={@ipv4={[], [], @remote}, <r8=>0x0}, &(0x7f0000000580)=0x14)
syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x10040)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000006c0)=0xfffffd8d)
setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000f00)={{{@in6=@mcast2, @in=@multicast1, 0x4e23, 0x81, 0x4e22, 0x9, 0x8, 0x80, 0x80, 0x3a, r8, r9}, {0x3, 0x7, 0x80000000, 0x4, 0xfff, 0xbba, 0x8, 0x9}, {0x2, 0x8, 0xbf2, 0xc833}, 0x18, 0x6e6bbc, 0x2, 0x1, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4d6, 0xff}, 0x2, @in6=@empty, 0x0, 0x2, 0x1, 0x26, 0xff, 0x3, 0x3f}}, 0xe8)
r10 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
recvfrom$ax25(r5, &(0x7f0000000400)=""/150, 0x96, 0x20, &(0x7f00000004c0)={{0x3, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48)
add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x1001, r10)
r11 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$instantiate(0xc, r10, &(0x7f0000000280)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'cgroupvboxnet0em1(-@', 0x20, 0x9}, 0x3f, r11)
r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r12, 0x800454e0, &(0x7f0000000140)=r1)

15:54:01 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xe00000000000000)

15:54:01 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xa00000000000000)

[  339.357534] audit: type=1800 audit(1571586841.510:154): pid=14915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16673 res=0
15:54:01 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
timer_delete(0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000040))

15:54:01 executing program 4:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x20000, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0x4}]}, 0x1c}}, 0x0)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000180))
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10000000, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000680))
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x200020)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x7, 0x0, 0x20}, 0x1db)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)

15:54:01 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x2000000000000000)

15:54:01 executing program 3:
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x1005, 0x400)
r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0)
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0)
ioctl$int_in(r1, 0x800060c0045006, &(0x7f0000000180))
read(r1, &(0x7f0000000100)=""/71, 0x47)
r2 = accept4$rose(r1, &(0x7f0000000380)=@full={0xb, @dev, @null, 0x0, [@bcast, @rose, @rose, @rose, @null, @bcast]}, &(0x7f00000003c0)=0xddfce4391f8c914e, 0x80800)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0)
poll(&(0x7f0000000040)=[{r3}], 0x1, 0x0)
ioctl$int_in(r3, 0x800060c0045006, &(0x7f0000000180))
read(r3, &(0x7f0000000100)=""/71, 0x47)
r4 = syz_open_dev$dspn(&(0x7f0000000000)='\xec\x00\x00\x00\x00\x00\x00\x00\x00\b', 0x1004, 0x200)
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x0)
ioctl$int_in(r4, 0x800060c0045006, &(0x7f0000000180))
r5 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x0)
ioctl$int_in(r5, 0x800060c0045006, &(0x7f0000000180))
read(r5, &(0x7f0000000100)=""/71, 0x47)
r6 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0)
poll(&(0x7f0000000040)=[{r6}], 0x1, 0x0)
ioctl$int_in(r6, 0x800060c0045006, &(0x7f0000000180))
read(0xffffffffffffffff, &(0x7f0000000100)=""/71, 0x47)
poll(&(0x7f0000000400)=[{r2, 0x36}, {r3}, {r4, 0x1008}, {r5, 0x1}, {0xffffffffffffffff, 0x11000}, {r6, 0x40}], 0x200000000000034d, 0x2)
ioctl$int_in(r0, 0x800060c0045006, &(0x7f0000000180))
read(r0, &(0x7f0000000100)=""/71, 0x47)
r7 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0)
poll(&(0x7f0000000040)=[{r7}], 0x1, 0x0)
ioctl$int_in(r7, 0x800060c0045006, &(0x7f0000000180))
read(r7, &(0x7f0000000240)=""/71, 0xfffffffffffffe23)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]})
ioctl$KDENABIO(r0, 0x4b36)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)

15:54:01 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x3a00000000000000)

15:54:02 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
accept4$alg(r2, 0x0, 0x0, 0x0)
connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @loopback}, 0x0, 0x3, 0x3, 0x2}}, 0x2e)
r3 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x1000)
shmdt(r3)
r4 = fanotify_init(0x0, 0x0)
fanotify_mark(r4, 0x5, 0x1b, r0, 0x0)
readv(r4, &(0x7f0000002880)=[{&(0x7f0000002700)=""/190, 0xbe}], 0x1)
r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$eventfd(r5, &(0x7f00000002c0), 0x8)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r6, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0)
fanotify_mark(r6, 0x44, 0x8000008, r7, &(0x7f0000000040)='./file0\x00')

[  339.821069] audit: type=1400 audit(1571586841.960:155): avc:  denied  { map_create } for  pid=14937 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
15:54:02 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x3f00000000000000)

15:54:02 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x44}, 0x48)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000280)={0xbd, 0x4, 0x7, 0x2})
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000100)={0x1})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:54:02 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101040, 0x0)
getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x44)
exit(0x0)
timer_delete(0x0)

15:54:02 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x5800000000000000)

15:54:02 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fe530cb7d7f933eda02ba18ad181867514fe60077d4dd90123d3ee7cf43548ee858e07dfbdfd4e7540ebec677d6ac14c2c794f72cbf5fe31789e70233bfd8115efd90b0c48258f8dbe82e16cf8db95f5b068a9e0000000000000000000000000000000000000000000000000000000000000018287ba7d8807cf077cc420efca6785deb269d0a91985602763e0d70d404da006a3d6eef8fb7fcdd82eb1e4841"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x80, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x7fffffff, 0x9a0, &(0x7f0000000380)="4dd97dcdb12522e5bc3b4350d21d30edbb1ebb823bba256509b856614414668e6e083c87d29a6f8cc1e74d4a9762a7cf5f4b6faddd7b0b23ac4383721d367aac469cf5d5d9e9cefa8aed1b93fac787fadc036b9c7392d2a18b979b4ed29ee8367698fa4d66a10f45b73cd55f4951e6e043b14c4565758b53156bb49d7ea7bead1b48256d291288cd461de90a1c9e46a1dfef1018ee3cbd016e353a61101c078155cd3a046a79902945eb15040847636cb58ff889faf6df0966b5bcce6932f2082e0587974a2c81e61bdf", &(0x7f0000000280)="039ba3f09af020cd0f9f909b5090336c746ab5a9edf08616ab884619933152f272cebfb4467632a1c9d41b2274051b35bc8dbc2acee83d0dcd5ad050ab5b3827bf6309839e3c467ac0b769", 0xca, 0x4b})

15:54:02 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x7, 0x4200)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000002c0)={0x5, 0x34, &(0x7f0000000280)="fd91c8aea5b583ad981f4fdae94abca25238702a7ba5bf88e0af010543d8b71b1dbef76b61f572dc681db879e682eb94a5b57ba2"})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x23, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fe530cb7d7f933eda02ba18ad181867514fe60077d4dd90123d3ee7cf43548ee858e07dfbdfd4e7540ebec677d6ac14c2c794f72cbf5fe31789e70233bfd8115efd90b0c48258f8dbe82e16cf8db95f5b068a9e0000000000000000000000000000000000000000000000000000000000000018287ba7d8807cf077cc420efca6785deb269d0a91985602763e0d70d404da006a3d6eef8fb7fcdd82eb1e4841"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffffdb, 0x10, &(0x7f0000000100), 0x10}, 0x70)
socket$inet6_dccp(0xa, 0x6, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:54:02 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x5c01000000000000)

15:54:02 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=<r1=>0x0)
ptrace$getenv(0x4201, r1, 0xf9db, &(0x7f0000000140))

15:54:03 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)
rt_sigsuspend(&(0x7f0000000100)={0x7fff}, 0x8)
connect$rose(0xffffffffffffffff, &(0x7f0000000280)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0xd1c1d097ae34754d, 0x0)
getsockopt$inet6_buf(r1, 0x29, 0xb6f770c73740ad04, &(0x7f0000000380)=""/91, &(0x7f0000000300)=0x5b)
syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3f, 0x40)

15:54:03 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
timer_delete(0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc0800, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7)

15:54:03 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
accept4$alg(r2, 0x0, 0x0, 0x0)
connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @loopback}, 0x0, 0x3, 0x3, 0x2}}, 0x2e)
r3 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x1000)
shmdt(r3)
r4 = fanotify_init(0x0, 0x0)
fanotify_mark(r4, 0x5, 0x1b, r0, 0x0)
readv(r4, &(0x7f0000002880)=[{&(0x7f0000002700)=""/190, 0xbe}], 0x1)
r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$eventfd(r5, &(0x7f00000002c0), 0x8)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r6, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0)
fanotify_mark(r6, 0x44, 0x8000008, r7, &(0x7f0000000040)='./file0\x00')

15:54:03 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e0000002c008151e00f80ecdb4cb904014865160b00004e06000000000009000e0006001500cd5edc2976d153b4bbf05b3939634feae86f6c6e8f", 0x3b}], 0x1}, 0x0)
syz_genetlink_get_family_id$team(0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet(0x2, 0x0, 0x0)
r1 = socket(0x1, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x4, &(0x7f0000000080)=0x2)
socket$packet(0x11, 0x3, 0x300)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
splice(r3, 0x0, r6, 0x0, 0x1ffffd, 0x0)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000140)=@req3={0xfdf, 0xfffffffc, 0x40, 0xfffffffa, 0x7ff, 0x7fff, 0x8}, 0x1c)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)

15:54:03 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x6000000000000000)

15:54:04 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x23, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401}, 0x10}, 0x70)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r4, 0x0, 0x1ffffd, 0x0)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x3, 0x4, 0x1, 0x6, 0x17, 0xc1, 0x3f, 0x4, 0x8, 0x5})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3600000000000000, 0x1c, 0x0, &(0x7f0000000080)="4d50b441e692763113ef874588a8a30538bd7ee5e39d9d59026786dd223ec75b4e1a9ae934c8f49b21f35c012238103650e1c4f9ed85e2cc4f890f3ee6312a7400021522", 0x0, 0x35, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)}, 0x28)

15:54:04 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x8dffffff00000000)

15:54:04 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0)
ioctl$EVIOCGUNIQ(r5, 0x80404508, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r6=>0x0, <r7=>0x0})
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f00000000c0)={0x1, {r6, r7+30000000}, 0x0, 0x5})
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x14d114775de95e04, 0xfa00, {0x1, &(0x7f0000000140)={<r8=>0xffffffffffffffff}, 0x200, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x4, 0x0, 0x8, 0x100000000, 0x5, 0x3}, r8}}, 0xffffffffffffffad)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000b80)={0x3, &(0x7f0000000b40)=[{}, {<r9=>0x0}, {}]})
ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000c00)={r9})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000100)={r9, &(0x7f0000000000)=""/250})
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000000)={r9, 0x1})
r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfd77e4ef05f7e1, 0x0, 0x0, 0x35a)
ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f00000001c0)={0x4, 0x9000})
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x14, 0xc8, &(0x7f0000000200)="089e8532c75b12c08861a98fa92cb47aa2b5118a1664789edd3ad2756b98e0cca8352f1f4899d889966df6ef83dd7b26b4d1048a5077598db4c46f35d83b15550fc450318b505fee04d3efd9cfa79519ae2820f0134ea61bc0820f7211be06489ce25bea5274608775b8065006430d20130d73fd1523e8de0b71cd84138a5fbbbe18c3570333183f72b0510cbc494bd5cc5c26f513f61c358ec6fe0b9e0d81c7d45026206d3d707f2dcce2954ce48531a9aa06a7d6a84cc26cffded405fbef025fb938755dd6c034"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffff6)
ioctl$KVM_NMI(r11, 0xae9a)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

15:54:04 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xe803000000000000)

15:54:04 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xeffdffff00000000)

[  342.365714] protocol 88fb is buggy, dev hsr_slave_1
15:54:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000340)=0xc)
stat(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
lchown(0x0, 0x0, r2)
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {}, [{}], {}, [{0x8, 0x6, r1}, {0x8, 0x6, r2}], {0x10, 0x2}, {0x20, 0x4}}, 0x3c, 0x6)
mkdir(0x0, 0x0)
mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0)
mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0)
mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0)
umount2(&(0x7f0000000200)='./file0\x00', 0x0)

15:54:04 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x1)
timer_delete(0x0)

15:54:04 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
splice(r2, 0x0, r5, 0x0, 0x1ffffd, 0x0)
ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x40, 0x6, 0x6, "8df08d64054b4f8bcedcc825d1c8b1ea6a9497327a741c104dd5d2e41dd8a912", 0xa0363159})
ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000002c0))
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x9, 0xffffff39, 0x8, 0xfffff000, 0x7f, "41abda529aaab12780a1e084390d8b5678f52e", 0x20000000, 0x3f})
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800)

15:54:04 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xf401000000000000)

15:54:04 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x200004)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, 0x8)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x800, 0x0)
ioctl$SIOCAX25ADDFWD(r4, 0x89ea, &(0x7f0000000300)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}})
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_script(r5, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0)
unlinkat(r6, &(0x7f0000000280)='./bus\x00', 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x7, r5})
r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x306000, 0x0)
getsockname$unix(r7, &(0x7f0000000200)=@abs, &(0x7f00000000c0)=0x6e)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f66696c65300a39980cfd42119cc4e1040300037f0000000000"], 0x24)
sendfile(r0, r3, 0x0, 0x80001d000010)

15:54:04 executing program 2:
socket$inet(0x2, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
splice(r2, 0x0, r5, 0x0, 0x1ffffd, 0x0)
preadv(r1, &(0x7f0000000040), 0x1000000000000039, 0xffffffffffffffff)

[  342.703655] audit: type=1804 audit(1571586844.850:156): pid=15077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir254642148/syzkaller.QVKmhj/212/bus" dev="sda1" ino=16641 res=1
15:54:04 executing program 4:
clone(0x6101000, 0x0, 0x0, 0x0, 0x0)

15:54:05 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xf5ffffff00000000)

15:54:05 executing program 4:
r0 = socket$inet(0x2, 0x200000001, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000580)=ANY=[@ANYBLOB="e0000001ac1414aa00000000000000004b9f5d856d10e86908a4130e574c74fdae520241e14e96a58c82be135fd2645005444947a656f65fceb9c5596b5ebcbceefd37a0184f4264851e"], 0x10)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={<r2=>r0})
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040), 0x4)

15:54:05 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xffffff7f00000000)

15:54:05 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xffffffff00000000)

15:54:05 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xffffffffa0018000)

15:54:05 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
accept4$alg(r3, 0x0, 0x0, 0x0)
connect$l2tp(r3, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x2, 0x0, {0xa, 0x4e21, 0x2, @loopback, 0x4030}}}, 0xffffffffffffffa8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:54:05 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x1ffffd, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18)
timer_delete(0x0)

15:54:05 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x247)
r1 = socket$l2tp(0x18, 0x1, 0x1)
r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000040))
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:54:05 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xffffff7f00000000)

15:54:05 executing program 1:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0xb4, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xa0, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x24}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xb4}}, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4100040}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x130, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x48}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8713af9ae5ece4c1, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x400000}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x7}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x71a6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x734539d04549bbd2)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup2(r4, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0xfffffffffffffed4, 0x10, 0x705, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_TTL={0x8, 0x8, 0x3f}], @gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}]]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048050}, 0x0)

[  343.631512] IPVS: Error joining to the multicast group
15:54:05 executing program 3:
r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x9, 0x414000)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
r2 = socket$netlink(0x10, 0x3, 0x3)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x1, 0xfb)
r4 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x2, 0x10000)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r4, 0x40045731, &(0x7f0000000140)=0x4613)
connect$inet(r3, 0x0, 0x0)
shutdown(r3, 0x0)
socket$inet6(0xa, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)

15:54:05 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0xfffffed5)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x20, @mcast2}, 0xfffffffffffffedb)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_script(r3, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r6=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000480)={r6, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x98)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r6, 0x800000}, 0x8)

15:54:05 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffe000/0x2000)=nil)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video35\x00', 0x2, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x14)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
splice(r2, 0x0, r5, 0x0, 0x1ffffd, 0x0)
fstat(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379737667726f7570732c7374726970653d3078303030303030303030303030303038652c6e6f6a6f75726e616c5fb86865636b73756d2c6d626c6b5f696f5f7375626d69742c61707072616973655f747970653d696d617369672c636f6e746578743d7573657266636f6e746578743d73746166665f752c666f770000000000", @ANYRESDEC=r6, @ANYBLOB="2c006767c87ba6a48ad810e55e709e51921a5eba86d3a654260a19934d8201b70957060a16449c3360621f9f589591381af34605585544b53fd0e15c2b3becf2f9a2d340bcc44477aa6a0f"])
getresgid(0x0, &(0x7f00000000c0), &(0x7f0000000100)=<r7=>0x0)
pipe(&(0x7f0000000300)={<r8=>0xffffffffffffffff})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
close(r9)
splice(r8, 0x0, r9, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r10=>0xffffffffffffffff})
close(0xffffffffffffffff)
splice(r10, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0)
pipe(&(0x7f0000000300)={<r11=>0xffffffffffffffff})
r12 = socket$inet_udp(0x2, 0x2, 0x0)
close(r12)
splice(r11, 0x0, r12, 0x0, 0x4ffe2, 0x0)
fstat(r12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r13=>0x0})
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0, 0x0, 0x4000, &(0x7f00000001c0)=ANY=[@ANYBLOB='sysvgroups,stripe=0x000000000000008e,nojournal_checksum,mblk_io_submit,appraise_type=imasig,context=user_u,defcontext=staff_u,fowne', @ANYRESDEC=r13, @ANYBLOB="2c006767c87ba6a48ad810e55e709e51921a5eba86d3a654260a19934d8201b70957060a16449c3360621f9f589591381af34605585544b53fd0e15c2b3becf2f9a2d340bcc44477aa6a0f"])
perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgid(0x0)
r14 = gettid()
perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x400, 0x5, 0x22d, 0x3, 0x0, 0x10000, 0x0, 0x0, 0x8001, 0x1f, 0x80, 0x80, 0x3721, 0x6, 0x0, 0x0, 0x47, 0x3, 0x85, 0x607, 0x3f, 0x80, 0x0, 0x7, 0x0, 0x0, 0x1, 0x487, 0x7674e033, 0x0, 0x7, 0x0, 0x2, 0x3, 0x0, 0x10001, 0x0, 0x1, 0x0, @perf_config_ext={0x5, 0x8}, 0x2200, 0x0, 0x400, 0x0, 0x1fe, 0x0, 0x7fff80000}, r14, 0x4, 0xffffffffffffffff, 0x8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={<r15=>0x0}, &(0x7f0000000180)=0xc)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0xff, r6, r7, r13, 0x0, 0x40, 0x7}, 0x10001, 0x0, 0x84c, 0x6, r14, r15})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r16=>0xffffffffffffffff})
dup2(r16, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0})

15:54:05 executing program 4:
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x80000, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0xffffffffffffffc2)
r3 = accept4(r1, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r0, 0x0, r4, 0x0, 0x1ffffd, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x4000000)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@broadcast, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "001b00", 0x14, 0x2b, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

15:54:05 executing program 2:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40000, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r1, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=""/53, 0x35, <r2=>0xffffffffffffffff}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x10, &(0x7f00000002c0)={&(0x7f0000000180)=""/217, 0xd9, r2}}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000140081ae00002c000500018701546fabca1b4e165a307db89c40ebb3f7ffffffffffffffb4e921556b3d5df5000000000000000000", 0x39}], 0x1000029e}, 0x0)
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x111440, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x7)
pipe(&(0x7f0000000380)={<r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
r8 = accept4$alg(r7, 0x0, 0x0, 0x0)
splice(r5, 0x0, r8, 0x0, 0x1ffffd, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x820001)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000340)={0x0, @aes128})

[  343.835661] audit: type=1400 audit(1571586845.980:157): avc:  denied  { set_context_mgr } for  pid=15150 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
15:54:06 executing program 4:
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x8000, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000003c0)={0x0, 0x0, [], @raw_data=[0x5, 0x2, 0x0, 0x7f, 0x0, 0x5, 0x7, 0x0, 0xc64e, 0x1, 0x6b, 0x3b, 0x10000, 0x6, 0x8, 0x8, 0x9, 0xf74, 0x5, 0xffffffe0, 0xfffffff8, 0x7, 0x1, 0x5, 0x401, 0x4, 0x4, 0x34a, 0x2, 0x8, 0x1, 0x2]})
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vbi(0x0, 0x0, 0x2)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000200)={{0xd, 0x1}, 0x90, 0x9, 0x89, 0x3286, &(0x7f0000000280)="5bd88816e822b7489e675570d7a490fd7c95a6e93f410d74e2fb460c84624d3bda5b3b8ac2a2d7972e95e0d99e7656283d36f1d5aff699fdbbf0667e43cc2c23aba0ce3e4c9aae5fd881be826281db182bc4eab933fc2ed3aefb8c127c0388cd2a3879179ab787eea99852999ec30d6b0f6aad4a7963b57cca8f092e223387cf211327f91bb5ff0141"})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
dup(r1)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_data=&(0x7f00000001c0)="f9debfd9ff048ad493c733b55d759bd9a0df52c462cb53f54267378fecee8fe8"})
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x7ff, &(0x7f0000000080)=0x4)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
splice(r4, 0x0, r7, 0x0, 0x1ffffd, 0x0)
ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev={[], 0x1b}, 'dummy0\x00'}})

15:54:06 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0xfdfc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x109000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffdb6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0x701, 0x0, 0x0, {0x0, r6, {0x2}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x4}}, 0x20}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltfilter={0x74, 0x28, 0x421, 0x0, 0x0, {0x0, 0x0, {0x4}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x74}}, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  344.103571] bond0: Releasing backup interface bond_slave_1
15:54:06 executing program 3:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x1ffffd, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18)
timer_delete(0x0)

15:54:06 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000)=<r0=>0x0)
exit(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x3, 0x0, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000000180)={0x0, 0xa, 0x2, @thr={&(0x7f0000000040)="8666666bc7e30bc035c7fc43bf0ede29fdb5f258fd7dcbbbb00b3ed1e31451b7240a5730fd1176477f5f4f44cad73fdc197a78b16a2aa619c52b454b78557130ff084a0f8906499cefea6cbd583bb06570fe2d73395d4e38aef349f48bd612d68d423ee679b2cc3a7e6ab57f753fa5b92d076c754ccdc871a63f5a2a238499b059fea21b662df96a9aca2a15e871a9537a6cb6a3ed0f00ae2435d17a6c1a6082ddab119c8242aa7563d970ec7331b768ce", &(0x7f0000000100)="e444c9a908a1db83e0ab3370fd3399a331b9bb9f311e245763"}}, &(0x7f00000001c0)=<r1=>0x0)
clock_gettime(0x0, &(0x7f0000000200)={<r2=>0x0, <r3=>0x0})
timer_settime(r1, 0x0, &(0x7f000002e000)={{}, {r2, r3+30000000}}, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000140)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0)
timer_delete(r0)

15:54:06 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:54:06 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x9, 0x200001)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0)

15:54:06 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x800040000000002, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x1f, 0xfffffffffffffdd0, 0x0, 0x42c03, &(0x7f0000000000)=ANY=[])

15:54:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/a[\t\x00\x00\x10\x00', 0x400000, 0x0)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10980240}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040180}, 0x84094)
r2 = semget(0x3, 0x5, 0x2e3)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64=r2], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1)
semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000180)=""/140)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x1a2)
r3 = socket(0x1e, 0x1, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$tipc(0x1e, 0x2, 0x0)
getsockopt$inet6_udp_int(r4, 0x11, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000500)={@ipv4={[], [], @multicast1}, @loopback, @mcast2, 0xfffffff9, 0x5, 0x4b, 0x100, 0xfffffffffffff001, 0x10})
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000580)={<r8=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000600)={0x4, 0x8, 0xfa00, {r8, 0x80000000}}, 0x10)
fcntl$getownex(r5, 0x10, &(0x7f00000003c0)={0x0, <r9=>0x0})
rt_sigqueueinfo(r9, 0x1e, &(0x7f0000000400)={0x13, 0x9, 0x8})
sendmsg(r3, &(0x7f0000000000)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x22, 0x0}, 0x0)
socket(0x10, 0x803, 0x0)

15:54:07 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
set_robust_list(&(0x7f00000000c0)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x9}, 0x18)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
accept4$alg(r3, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
splice(r4, 0x0, r7, 0x0, 0x1ffffd, 0x0)
connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @rand_addr=0x3ff}, 0x3, 0x2, 0x2, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:54:07 executing program 4:
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x604100, 0x0)
syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="660fc7b022ec0000470f0158be400fc7be0000008066ba200066ed410f0966653e0f18147d02000000c74424008000c0fec7442402f07b0000c7442406000000000f0114240f06450f3accec03b9e20800000f32", 0x54}], 0x1, 0x40, &(0x7f0000000200)=[@dstype3={0x7, 0x6}, @dstype0={0x6, 0x9}], 0x2)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00')
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000040)={0x1, 0x1000, 0x4, 0x40, 0x3085})
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
splice(r4, 0x0, r7, 0x0, 0x1ffffd, 0x0)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000002c0)={0x2, 0x0, [{0x80000007, 0x2, 0x4, 0x4, 0x8}, {0x2, 0x8, 0x3f, 0xdf18, 0x9d}]})
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r8, r2, 0x0, 0x6)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$binfmt_script(r9, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$EVIOCGUNIQ(r9, 0x80404508, &(0x7f00000003c0)=""/152)

15:54:07 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, <r3=>0x0})
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000180)={0x8}, 0x4)
r7 = accept4(r5, 0x0, 0x0, 0x0)
r8 = accept4$alg(r7, 0x0, 0x0, 0x0)
splice(r4, 0x0, r8, 0x0, 0x1ffffd, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x8, 0x5, 0x20, 0x0, 0x0, 0xffffffffffffffff, 0x20000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x100, 0x7, 0x8001, 0x2, 0x9}, r3, 0xf, r4, 0x3)
syz_mount_image$hfs(&(0x7f0000000780)='hfs\x00', &(0x7f00000007c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={[{@type={'type', 0x3d, "b8622a0b"}}]})

15:54:07 executing program 1:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x401000000001, 0x0)
close(r1)
r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2)
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000040)={0xe61, 0x8, 0x4, 0x3})
r3 = socket$pptp(0x18, 0x1, 0x2)
getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x4a, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
r4 = open(&(0x7f0000000400)='./bus\x00', 0x1141002, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ioperm(0x40, 0x6, 0x3)
ftruncate(r5, 0x208200)
sendfile(r1, r4, 0x0, 0x8000fffffffe)

[  345.071248] hfs: can't find a HFS filesystem on dev loop2
15:54:07 executing program 5:
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x800)
timer_create(0x200000003, 0x0, &(0x7f0000000000))
getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))
exit(0x0)
timer_delete(0x0)

15:54:07 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x3c0, 0x2, 0x40000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2], 0x0, 0x10})
r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:54:07 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x0, 0x0, 0x5707ce0b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="240000005a0007031dfffd956f61050007dfc211fe000002ffffa888421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x28e}], 0x1}, 0x0)
ustat(0x80000001, &(0x7f0000000040))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="e9324653", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000480)={r8, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x98)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}}, 0x7, 0x5, 0x7f, 0x10001, 0x9}, &(0x7f0000000000)=0x98)
ftruncate(0xffffffffffffffff, 0x200004)
r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$binfmt_script(r10, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$SNDRV_TIMER_IOCTL_STATUS(r10, 0x80605414, &(0x7f0000000200)=""/22)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="e54e000000008ef25eb6040000007aae8d8ed0ca072ebb7b38da5cf47a1558000800000000000023b69f8e04ad2421738658c29f49a859e61ad10ee4e274b88df9775d236efa065ca2c9417ce3118ad42394c79eb04a97d8f2ef541381e23b22077d4a9437f98760145f2a1fcad9809c566592e52143bd608a9991c64942481894b9ac116cd8c5dcecc0e459e88fcf1a93b42767256b79eab5505c4ebad94d17ebc7ab0d680e51352620f71c84af4295df08012500ea0eddee"], 0x14}}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000400)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8100040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)={0x5c, r12, 0x204, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x0, 0x4, [@TIPC_NLA_LINK_NAME={0x0, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x0, 0x7, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x7fff}]}, @TIPC_NLA_LINK_PROP, @TIPC_NLA_LINK_NAME={0x0, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x0, 0x4, [@TIPC_NLA_LINK_PROP={0x0, 0x7, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x0, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x0, 0x7, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x0, 0x7, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x0, 0x7, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0x0, 0x2, [@TIPC_NLA_PROP_MTU, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x87e1a4cb966c7829}, 0x2408d401)
sendfile(0xffffffffffffffff, r9, 0x0, 0x0)
pipe(&(0x7f0000000380))

15:54:07 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x3c0, 0x2, 0x40000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2], 0x0, 0x10})
r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  345.434861] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
15:54:07 executing program 3:
syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@codepage={'codepage', 0x3d, 'iso8859-4'}}]})
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x54e55639c09ccfa7, 0x3ff, 0x1, 0xb6f1}})
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000140))
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000100)=0x7)

[  345.551691] audit: type=1804 audit(1571586847.700:158): pid=15259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir254642148/syzkaller.QVKmhj/218/bus" dev="sda1" ino=17185 res=1
[  345.692075] hfs: can't find a HFS filesystem on dev loop3
15:54:07 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00')
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x1c, 0x5, 0xfffffffffffffff9, 0x0, 0x8}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x15, &(0x7f0000000080)=0x4, 0xfffffffffffffefb)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}}, 0x1c)
r6 = dup2(r5, r5)
getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYBLOB="5b23610176eae3ff8491fd78ad16281f4afe08070e1b9ae6cb0811a9963726fbd7a42e901abd5d2210d74786850d788007a0d8fea854e8df0352f1466f7b84607305cad303db80d15b5c88d9c6bdc47b64eb5e2d6d433d3f737da47b9b48455f507d6abfd105690a7ae7fadfab1d539dfe5e4a780f575cf7a134581c3a2659c939f327b95800fc07a3794210085d26919a443d5c4134b31a84ee9d11533cf5adee94be40476de80bda639db42b7bc813ca596e4b33dd55b3b7e2dc585abdf67e75ed07025fcfbe719e44feb721eb58016c5167eec2519095cc5b1836a417b91073df5b6b4342168a43f9a6"], &(0x7f0000000040)=0x2)
pipe(&(0x7f0000000380)={<r7=>0xffffffffffffffff})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0xe9)
r9 = accept4(r8, 0x0, 0x0, 0x0)
r10 = accept4$alg(r9, 0x0, 0x0, 0x0)
splice(r7, 0x0, r10, 0x0, 0x1ffffd, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000100), 0x264)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r11 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0)
ftruncate(r11, 0x28007d)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x1a, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="e8081afe60146bc526ce9ebae49b0a24edf6594eb6730ff1753e3379ed85831ea27f4908f94a082178130c7ac556017d70550654316dd8c63915cbe8756a4af972cdf80adf03a0e3de6e77c79e3ab84c0aafc869cc6a3f7a4c507aedfbe126e6b8bb709fe402cf9e91580a3625e08ea3d315ec8ae48224cd40894b8805009128035de17f5f24bd49b2b0527d8891b3977d1464347cd3fb532030168e8f060b3408cab076af46cb44d5e83c3c8ac8b70a809d2614ab63b5ff7a1cb5741bbd947c25ede4c8b54f651c7abd863d0834ee54cdb60091e7012828641b8400e22e18dc7b8a3b9feb7df6d49d694afa7d060febe4d268748020d7f326c2dce0dd539338"], 0x0, 0x800, 0xff46, &(0x7f0000000280)=""/176, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x800, &(0x7f0000000680)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYBLOB="c1d26360", @ANYRESDEC=0x0])
sendfile(r11, r11, 0x0, 0x3)

15:54:07 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x200, 0x0)
setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000180)='bridge0\x00', 0x8)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x0, 0x20}}, 0x214)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x280, 0x0)
ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000080)=""/80)
sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  345.877291] devpts: called with bogus options
15:54:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfffffe8b)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
splice(r2, 0x0, r5, 0x0, 0x1ffffd, 0x0)
fcntl$dupfd(r0, 0x59a32fd8922f9119, r1)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r6, &(0x7f0000000380)=ANY=[], 0xfffffed5)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_script(r7, &(0x7f0000000380)=ANY=[], 0xfffffed5)
pipe(&(0x7f0000000200)={<r8=>0xffffffffffffffff})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r10 = accept4(r9, 0x0, 0x0, 0x80000)
accept4$alg(r10, 0x0, 0x0, 0x0)
splice(r8, 0x0, r5, 0x0, 0x1ffffc, 0x0)
write$UHID_INPUT(r8, &(0x7f0000002600)={0x8, "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", 0xfffffffffffffec3}, 0x1006)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x20, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
write$binfmt_script(r11, &(0x7f0000000380)=ANY=[], 0xfffffed5)
ioctl$BLKFLSBUF(r11, 0x1261, &(0x7f0000000040)=0x7)
fadvise64(r0, 0xc, 0xfffffffffffffffe, 0x1)

[  345.898557] QAT: Invalid ioctl
15:54:08 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r4, 0x0, 0x1ffffd, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000040)={'bond0\x00', 0x1})
r5 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  345.942368] FAT-fs (loop2): bogus number of reserved sectors
[  345.959128] FAT-fs (loop2): Can't find a valid FAT filesystem
[  346.063167] audit: type=1800 audit(1571586848.210:159): pid=15288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17249 res=0
15:54:08 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000140))
exit(0x0)
timer_delete(0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r3 = accept4$inet6(r1, 0x0, &(0x7f0000000080)=0xfffffffffffffc37, 0x80c00)
setxattr$security_smack_entry(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.SMACK64IPOUT\x00', &(0x7f00000001c0)='\x00', 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0xc50e, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0xfdffffff00000000}, 0x0)
getpeername$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c)
ustat(0xc3ba, &(0x7f0000000040))

15:54:08 executing program 1:
r0 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000020f00000000000000"], 0x14}}, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80a40, 0x0)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
connect(r0, &(0x7f0000000180)=@in={0x2, 0x0, @remote}, 0x80)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2000, 0x0)
ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000080)={0xfffffbff, "61c2862ccdb2a76a78b828276052274081561913fec20b7278f3376381a0dc9c", 0x1, 0x2})
sendmmsg(r0, &(0x7f0000001540), 0x24c, 0x0)

15:54:08 executing program 1:
r0 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5f07ec46a3e54fef, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3c)
r1 = dup(r0)
ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000040)={0x20, 0x3, 0xfe, 0xfffffffffffffff7, 0x8})
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb}, 0xb)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
splice(r3, 0x0, r6, 0x0, 0x1ffffd, 0x0)
fchmod(r3, 0x52)
fcntl$setpipe(r2, 0x407, 0x0)
utimensat(r2, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x100)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB], 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0)
r7 = socket(0xa, 0x1, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl(r7, 0x8916, &(0x7f0000000000))
ioctl(r7, 0x80000000008936, &(0x7f0000000000))

15:54:08 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009})
syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
accept4$alg(r3, 0x0, 0x0, 0x0)
r4 = fcntl$dupfd(r0, 0x0, r3)
r5 = fcntl$dupfd(r4, 0x5eb71e8a87a63669, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0)
r6 = socket$inet6(0xa, 0x1200000002, 0x0)
dup3(r6, r1, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
accept4$alg(r8, 0x0, 0x0, 0x0)
accept4$x25(r8, &(0x7f00000001c0), &(0x7f0000000200)=0x12, 0x40000)

[  346.693350] devpts: called with bogus options
15:54:08 executing program 2:
perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300)={<r5=>0x0, 0xa1a}, &(0x7f0000000340)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000003c0)={r5, 0xe82}, &(0x7f0000000400)=0x8)
bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58)
r6 = accept4(r4, 0x0, 0x0, 0x0)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
splice(r2, 0x0, r7, 0x0, 0x1ffffd, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000180)={{0x0, 0x0, @reserved="45d9dfc8de5b97d7f2e120c20003632de8db088ac167a0d244a8befb97d0e4d2"}})
read(r2, &(0x7f0000367fe4)=""/77, 0x4d)
pipe(&(0x7f0000000380)={<r8=>0xffffffffffffffff})
setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r10 = accept4(r9, 0x0, 0x0, 0x0)
r11 = accept4$alg(r10, 0x0, 0x0, 0x0)
splice(r8, 0x0, r11, 0x0, 0x1ffffd, 0x0)
ioctl$KVM_GET_CPUID2(r8, 0xc008ae91, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000000500000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd28f236cd000000000000deff0000000000000000000000000000000000000000000000000000000000000000000000000000000003f63c2f7e48a0e7276be9a35c5ab4b628d3ac96ef0fa8440630ed4ac804ec23e83857d06d9d2b0d6f9731235afdfe3a1a925391cee21ab9d240d8e0e281c271e14d72b25035745496d9be18a8402624dd2fd3fe8201000000000000003bc1219ea7863e39ead304cb91581e0bd1ea6c950186d0faaedf3bab7637ce70982afd1e8e808972eb740299b7a403610904e62236045047a19cbf2d0db111d65e59f6586cd49150f13b"])

15:54:09 executing program 4:
syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x6, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000036002908c890000000000000000001000000180000003b000100ffffffff00"/44], 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0)
r1 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0)
dup2(0xffffffffffffffff, r1)
socket$inet6(0xa, 0x1, 0x0)
r2 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl(r2, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x0, 0x84)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(r4, 0xffffffffffffffbc, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r6, &(0x7f0000000380)=ANY=[], 0xfffffed5)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl(r5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="f56c35915ce38f726b1cba9f183a24030000000000000093029f0bd774b3c9a719940a6addd84a944dc0d28b37f1c66d15da3023248cc5d45c6263f93e31656d92e3603665cbc39adcec0e203b96f65033325f33261e27ded755"], 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x2400, 0x0)
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300))

[  346.814037] audit: type=1800 audit(1571586848.960:160): pid=15313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17249 res=0
15:54:09 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_script(r3, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r4 = perf_event_open$cgroup(&(0x7f00000001c0)={0x18a46efbe8109246, 0x70, 0x2, 0x81, 0x2, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x80, 0x7a, 0x0, 0xf8e8dd847509614b, 0x1, 0x5, 0x200}, 0xffffffffffffffff, 0xb, r3, 0x2)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f0000000380))
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r6, &(0x7f0000000380)=ANY=[], 0xfffffed5)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r5, r6, 0x0, 0x1, &(0x7f00000002c0)='\x00', <r7=>0x0}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r4, 0x0, 0x5, &(0x7f0000000240)='hash\x00', r7}, 0x30)
pipe(&(0x7f0000000180)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
write(r9, &(0x7f0000000340), 0x41395527)
vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r10 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0)
ftruncate(r10, 0x28007d)
sendfile(r10, r10, 0x0, 0x2008000fffffffe)
pipe(&(0x7f0000000380)={<r11=>0xffffffffffffffff})
r12 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r12, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r13 = accept4(r12, 0x0, 0x0, 0x0)
r14 = accept4$alg(r13, 0x0, 0x0, 0x0)
splice(r11, 0x0, r14, 0x0, 0x1ffffd, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r14)

[  346.942785] binder: 15328:15329 ioctl 0 0 returned -22
15:54:09 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x80000001, @mcast2, 0x8e38}, 0xfec0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000001c0))
accept4$alg(r3, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000040)=""/29, 0x1d, 0x2000, 0x0, 0x0)
pipe(&(0x7f00000013c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r7 = accept4(r1, 0x0, 0x0, 0x0)
r8 = accept4$alg(r7, 0x0, 0x0, 0x0)
splice(r4, 0x0, r8, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={<r9=>0xffffffffffffffff})
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r11 = accept4(r10, 0x0, 0x0, 0x0)
r12 = accept4$alg(r11, 0x0, 0x0, 0x0)
splice(r9, 0x0, r12, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={<r13=>0xffffffffffffffff})
r14 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r14, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r15 = accept4(r14, 0x0, 0x0, 0x0)
r16 = accept4$alg(r15, 0x0, 0x0, 0x0)
splice(r13, 0x0, r16, 0x0, 0x1ffffd, 0x0)
syz_open_dev$rtc(&(0x7f00000012c0)='/dev/rtc#\x00', 0x83, 0x4000)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
pipe(&(0x7f0000000380)={<r17=>0xffffffffffffffff})
r18 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r18, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r19 = accept4(r18, 0x0, 0x0, 0x0)
r20 = accept4$alg(r19, 0x0, 0x0, 0x0)
splice(r17, 0x0, r20, 0x0, 0x1ffffd, 0x0)
r21 = syz_open_pts(r17, 0x2)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r21, 0xc0096616, &(0x7f0000000240)=ANY=[@ANYBLOB="05000d125ac6f0000000000000"])
ioctl$TIOCGRS485(r5, 0x542e, &(0x7f0000000200))
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @broadcast}, 0x4}}, 0xc8)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r22=>0xffffffffffffffff})
write$binfmt_script(r22, &(0x7f0000000380)=ANY=[], 0xfffffed5)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r22, &(0x7f0000000080)="f5f4868b071c5845195dbfcbf09e29c7b91f5f87a3cc5d8533085c21ceca2f1b7aa7e9cfc5d9048b75adb46982200803f157ffec516da09db21dab177d9ecc128c1a5a4ccc2516df8f4966c4704061ed01bf04d250f31c", &(0x7f00000002c0)="3a04f01a39966b1dbcd80209a9ee3b4815117febf0d6f8cd454ac16f536b33b1e3f74a9c405e98a71e61af3001a20dda5abc5eb73b8a8728b95079f4f889e0f98cf5597722f6ac41d217a19a6f4ced3871c516c75753f5857e60c035e65fce609868135aaca11eca82c4b7b58a2462add36ecf8371ba091fc8887518767a3f2ca2b74a62fb1ef70f3ac449aa45a6fe0d261c9e5ade37c7285a078035840dfd3744a0e234571bc54e9808fd6a6d3dd684c24018c6a6c5932eb7a7962ffb944e82ece615fb37b587ca36635d8e8439760495e94149cb8606419b665edccdf3d82352fb5b74ef06792b89134a08123a5f81eb5504fba572e4685cc0768e3e626dc0701c98770d2195d6c356b2e58a2b094d78510373567f0e7d915b74f068eab0e341b5641febebf5ac03ce65e2e855e6a9d280ca5c905443707dddb1c18b522586756161c4da2937952e25d6ccb4a3474a004341953d29c0ba1f2ed52ec49744c0e24841676b079127c6a45faf7d49aaa202b63fab72e565731876df769dcef3230c95d0a86d9e507d8a5c081addc7b20a6b78d5e5f5ffe5f5b1420aa5ae3493da8b280169f21e14c58484a24130c22b7ce0bb4eeeadfddd2144db9cdca0d751ee3caa5f082bf015faab690f6556e6c80b13befed74ce9974ef011eb7bdf38bf5382a367ca0e1ea1fc4e8eed55662a9e6ede89c774563a6b8e2ec9146542b58ca10a89a825529a666bf363ddced458bf2d8b60bac13ec741f45e6622106bbd34666e471c328ed027f74c5735797bde97654cc4d66d23dd43f598543c05809a7291c0501e966e1d6f9ebd4a02c7a11a9c8c4ae6a2c3b1dce83b687f18f200f19b814ef05d7b2ba8477d9221387e1d00e059d16233323e63d5d7718813b21ab1fb8d994c537f090b8c83d4c8a6e018aba84ddf6a4c0c32f4c70acd035000a3bdc13effc4eff8dca140b70c52dc7af29c6c05a0a1ef58bce7a3922544ba89a0ff23c4e4f316fa90cbc760e5fb9127000285245d0b2ed0c2340fde82208185e095136bc35d20f9f643f8d1133abb3022dd46e67021fd4602d546fc04cec371626461e30ec1bd1e8f1c8803972c3482a219394fe122504eebe5c91e128a92d86323daac14a15bf277c6917758bcf5a649e1c2ca4faf91e7b89412c25eaa33026d5401ea61a739c5749d09cc09e35d4e40e01c5ee7c54bc4085385cb5e33d8412a0fdb0da8e25dafe447b3ac911b64a31e0a3e13d35163b4fa3a25d8d80712a169cee3210f36821f1e3310d8a5d76bfc08005acd0e63a9e4d44d7b0a61868932333e311eaf402f27356a8af62fa3d004a4ea08c182415a2d229c5c5fe6e181a112365c4f4de1095b5f4e0e6a3784f337d24ba1257b239e88e0f63fdfd6c5722ff5f42691b92eb49b6f13b2993a8b3a5f4c92a07fe3984315f8db38a9141edf6a65b6b8d10e718bf064179aca80a70ff4348ee0419e5cb06b1b6d3dcddf3409d45af30875fa402b7b3e00df748722efe8bf2b2eee6a1278a8db0e1581884338d4df0935456db6799f06599160504b009a2c0bc2e073281c8fffdf2b37961e489f03cd8127e88feb9d5e6fbe792e3c02ac99e93d676d63a49c77253b1112b42bcf605370ac5bef83f284223172300d808e7f01332fe6e5a3a6fd6129a92de1dceb967b921b1d2dfa170243eb3854634e2b4ccfca7c045204e1031da5f2754896d0f63f6c57b2dfbd86d5691aee811e609ea2f2902eb1811347bf342680f34a370ee8cdd83a72cea3a8936c7a13a77da68ada9e4105fc063ae790361e809d8b8cde1d0dd1a044d3901fb7389345fbf198d206d2bb5873fec948d707aac00f3a30b0f45753c535b4574037e3cd23c9705b09d7df1865812811edb04ede629509a7cf7ed296f14b8b0b6eecd4e028bc44745ab225f0a5666bfc7c744d56962f14bd63fe8deed1a13146abab88e3c364caa0ebb93c1c624a38ded683288ed103c11465cf73965108c9561b62089d94cd085b74b1231dc05cecd63c8797e48f1d640fede280eb95d71fab1743062e328c8a301dccb3d97ae068f1026a880f4a6b2da4783a28dc735f6201e828b6c9370edaebb5db35533fa91693b7c0fb42f2f593bfc96d8514a06434a0327bcf0dcb575e463f0f429be79e1bb378f50f76db9931afd9c90cbcf1462b2d6f511a2c4d236d8f31c925cf53e19e00b2bc149879277c92aa086321093a7c5a2996e672e145037103fb967dcee9d43d373676c3a3e83b9f51fdfd71d29336c4800063e719edcf68f3621e517a8a8fa1044a257df5479caeda106af6fe17f25b61930f18d63d3f09f1f1dfcf8d2d519d6219e955c2f76d9ffbdfc1b216a275b31dd7639d15f3f3a9d390fe6100638172322a778a26d805dd3a7ee7688a77d68bdc9618f735db1dfe3bf9a5605fbdf3afaaf66f3ec550d52a34ea4ddac109cb06507229013d866ed93e62778f4ad704fe790e64c8dceb39aa4c084ce2af2f2d0818d9f26d72ff76223ecaa0b5fa8507da9d93a4783aad344addbaa25db8159833b5bbe147cb3ee75cfca89389c1434a0d318df60da296ba3e8671357c81339e25d61bd6021a97871b349d9891d38a4ec4195dbd67652b7c1259d1d4d1ef9d8d7dd1a4b0896b218ec67aef3f036dd8cd1d54b71fe385a47aae850133bf954d1aae593ddd6a79e6df6eb5accbc369fde13a32683dd027106ef0fe4944a505428592d445e60c1e32537777dbf727343fb363646bb6c5321e9ac327a627f0ad8c6fef5e060ba0466a4d5f8f606e8dcff574520029ecaf264a9880fdc9e8760191049f5b32d932a290f0c0e37107af24f9e8a18a7900fa04fe9bd3a9b1f8c998142d206081abf995e547ae5b6f250c3e9b05698fafbe828bd60f6404bfb6358c1a301f1da4c2d604c4dd511690941c3d21069a9e3dca2cb3f8e35f97248406e923453336e7572e1c7c826f19bbc4752598c656e5d25dc8f8ae575188bab138f6072a803fe96a88bfc371bc229c6cbc6f0b500573e01a8b239cd0678f86ac304999063d6f6fe36c07f234ab77aad187a0344ecd6a6dd55692f6798a7619ced5fee6570ad119da1f152b8272ec94c7138fd97fbdc94b088af459d1a475744ccaba6b033464c753cfb302868e2546f8a17a3c2d7339848400e7e2192770fa566da4c151d5e60f42c3ec65538a72dd9875a4532e66b844879b2a102fec9fa5231e529aad0579ed1615eef7a86f64a813f92d19865f4ad80bd1d19bc2812d43d8b0841427e2ffa8a7f35da9d54b5da91f15f380c9db158ce28726d9ef123c636b55260927570dc73e08b322d221c20fb4cfdeed21be429ab034195526cf78669d73a452a1df30d740d0c86ed0961b296fabbefde1c814e461a536f30e4f76c4fa24d1073e05c05428e6ca0bf9cc1022106e7394a637ca667d8603c131ba1cac2752ba3f5924e9416ff0ee1911ae270faba15f4cab71678e813f4a913edc44c065b6b01c57516179d573ab83204b94b478baa3888858eb83abd8742db00c9059058eee95eb86b117eefde7c751ced33cbec06a85fb843e24df69d45b5552d3b7839eb82ae603ab9f50a6ce7e87a7c797cc585d06fd12712fb3483488bad0158b99c0859c09e5665678523c1efb52e19bd0a7a6f867270cec57cd3df52ad314452021a6f720240eefbf8518179ad2834413904f0eabb1d00dc243074ef57cd3bad84ce30b0d823fed9345196004823f9e72dc0fa9bc308eee59cba6d7d3d455d15ffcc5ef1cff6dd6ba6669144525df0ae03846d8a2dd428b81dcdfad6b90f19529f991b9c7dd1f2194990285314b76e1224deb80963ff64709679e456a9a68d948a1a98accea5ad2174003bc4e6078b07dd5c10121ca317b05f8107bebafd240e5c154a9c5f8c7cff0b2cba8d928b761e0a6c23d6356f4866d81f46051c8e8a211bca7c28fcd9d1843f59556ce41e69acb127738e7af4eb42945009f22fd1b136287c3603a62dac5fe664bbb17e0160e2c14fdb2104369ea575f3455456b4d38087468f7cd4e374eaf443391809cb0adbbc575d55dd969968be99648033a78a762662afd14249fe623b03aafbd5925e6b305666a6b585a4bbf65e0dce231c5174ef6f1368cbcd936e2b7747c23307e75e7527d8fcb328b505ee140582682894b6007416d2fafa4819434feb2cf2d9fa56407e6b3770978cf55aeef2855a9b11454c6a08c60c7173717d2d66edc86c3d884079e8a53e0cfbc774d34120bc42473d54edc0006e21e5962cf040948fbd2e2af5955fbe1905e4555f374fd63f5d5deb49ae61c614c9764765c9a060e79d7934370085234f75b1f588e87d33212024c517b2ece8948292327d5c920ebb7b193ce050f4cb825e5859e7394fcc7a7391c9c1ba9e939c15a58e83f26862419a70bf973fa647c0b7317b883a089e35454334b73ef5bd80978b93c59681eefcbd244ffbf6c280f8653522f5739f57fd3e4bea738a2704fd1afd29dfc83db2ec4cd95bef5ef595d98a8310320ad9e4f37769f978e499db4d9224ad677f9db2ba9c69cdbb015ed1f00bd67c49b82f32ea2e778f24813f436b7f70b156f0ff4ab944724f064705cbdefb57002bea9a942315822d44af6bb89c0b78a23e1617a37ebcf05ab1b277fdd496e9f36417d6f9a3991fbdc41121dd801b2f2df5779a548d9d6f72c9f1b7d5b5893a1cb14a105a077522034ecfbd53d8fca725f5c4ad534abc28021137d4f98bac42e1c3750b4d0bdf8975522aed54480f4d538691b6d247e0919c35e580d3f2e48c8d9dc9f784e0cbbb9c8a0368a311924b60c4dda6ecacaef1f45c3abd60b27bda2ff3df98a1b0bde34ccc31fa68aea4b52b97b1351d596e111d2a5ebb2b3b9bb0632d251c9477cfcd60a27edbca795e6587537b12d3b00e532640c63a7771d6fad346cbffd15a350280205ad2a11bee7e018ff4b404d53899a7d59b27e4c9002b771f64bf12670ab961be19afc1896259828763accdac1a73f7551d9c1ee1511166b643a88fcc036300ced89562f82ca02d434f34c9c3adef503c2f48a2750d008a1ce80ce4ffaee2bbecc2b7b44728faa73a2837e8b644fd727d3774eb60c4b42c0946e569a581e98cefe148332b71426fe204198b0a2a0a7f1ab1d9065a3c54ac9ac677f62f95dbdb4aa7aba59d692bf2474e3aef1259fff29d1f26b818d397d4593210d81cd16409b7492351e344be577c85ee441cd9fac39db10d8cc6f6fe9c54d77daf90eb37e2d7c8e25740e12a445595875e2ef87f649058b69c81aac9edc16c095818f3330a653683cb1f0d7ac079c8aaec8e8e850e86f2dbdb06510163852f4cb14311230d31fc90250fc639fb3f4d27ab6f306698c0a3af895c1c728b8d5158a0451603ecdbfef8e9b105fe78d653f6631c35d11e022daa856ecea8f9e572822ef83b2d13d16b72a411e5ce677b0c32b62961fde8f2e28e86af9e392691d4cc6b0e38724211e8e010f6e966f23220ea6416a5ecab4f57df1cda0574a687b8fdbd1419e7ce804c9f5911796a4a24251af5839f0895dd027d613ec775ed4c67a83264445d4ec24a62ffa4cff98d98f6855b9434d385418c32bf0e262681cc87d2ea23a65f4cfe8b15458c145a753e1bb9b59022876dc8689ce53bcd7ec80e5d1a6819ea85096808fbc83edd1b9ecb6858b6071ae79f4522974636e92d6ea0127a6baa61cb4140815b8a7fcb7c9924ca3ca62f643e5d6bed27dbc0c02967104bd19f6b3c9119079c7e28e7b1a3d5f6a03508aea83c44b316766ab0bbe94534d62550a82ec60178e4c", 0x2}, 0x20)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:54:09 executing program 5:
timer_create(0x1, 0x0, &(0x7f0000000000))
exit(0x0)
timer_delete(0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x1, 0x0)
sendto$netrom(r0, &(0x7f0000000080)="7e1c803889b01f4d763744e99eba2b6badd8dc11b84bdb3dfd845667f92a3c0d22334f2bb0dee46f1851b3dbf0293699ad2d151ef846bf1f02df02266b38fdfc6f141737a7ed8e73accbfa06ab341f28865c02acf14a420d6d71eda9cf832832584826d607aa4e3184ec54b9f57657eb93e1b24619cd85b1820cc806abb9b72f497a76c97ac615ffcaf285be93b054d20e4f1ab5339885c90ede73f42b88aeebe871e3c4d3e7bb869b3fa2d94e420588a8af632dced157074650ebe2dff9a2f6ecd6add60edd588bd7efa5a7709f217099a858488b033378d737ad50ddd28d6727ecb7be8c764aa029fa6623af2112b2621ede50af984999ce16e6ab98d54b4ca15740ee5d3b65e109a3a3f7b60256f5203cdd311a650bb237d8735db78d9f6eb6cbc6f80c93b84f4c877002931682b1b518f57cce9247b829c74c3f53a8095eb1720fd56681d9fb947f8b7e4f6fa136eed8115a59478b07d28f83f90b334eecf0939d214fe124cd038c6c08bb9b5514146f301fad828c9a6cb44388054cc46dbb64cf9641e3bd85ee4600631ca0f883030e64549bdbff2c2939657b80a051cbe9d65f6165b5b5884934fbe88eb58f1d7f980dcee2d46d071ae27c8824a781c547cdfcc4ce0a652b03a8a2ed3875b324c664371e401d945ccd30ffbce4019db27fbe70d835893128dd6c9901403b77c9bd0fe5bb1ed8b42e1ce957654bc0396038d1aa174ccaadd131b9c746289949b42b1844c197941c60856de57b5d11a28ead950a887765430923df24dee92100f1e07864004b3b7a2c279eba7f85f096da2a69c21339ab783627d019f6952b0e5261cca6e1ea251beb475c03782d167b1f526e109b0a7895023f177922b4379efcc5cca4556c2a1e22515af46633f8a87847639be1fd91f1a4eb208f34b13ce5729ad082c8dd0003c064f16d6b9b199c67971b450c41294eacf7244011af9fc8d728eb8251aca8c223f936ddca6bb6e7e766a56f15793006f1f46e9b72fe7b9314a7fa13169154bce737ccae4ea6f0a4fc9e3d2db1e5551d5f4e52ef936c38d4ac019973a471bb533f065061c48aef265f3aa0d3b9a2da5e4f6ebfc2a5a85148e20f9bff78e8a4d1f4211d9ba73fca8f358ad8ee539eef1ff34f2a15551a7e813b3605dd968baade1b40d03002b1768927dd9837f07696dba4268ec26aa098a2f9f908ba72ac8345464c0d7cb1cbe077afaaa2ba041d5006258eea53b97a830b9c5c2fa02b00162bccdab27430af53a555c88bc5b1e8257a6aa9c25c877cb5aa5e903ddf6a73454a1a6c3760e3dcba9b96e4aaa5e949b6fb973fef6fbcdb3d4f8b3fa9759f54cc31213b7a1e4b44fd8cb86ac50dd232d075c6af663f9866c1cbfc5796c51c9705ca73a537f7a0bec3e94e79769155f94fd9ab2d382fcaee9f73a80b0391c98de5814698b4cd6f33bd04bd8361fad95926439c730138ef79190da5f8476fb58d0fe17832eb48e64d291690af0c60ce834dd0d59cc30ad41cf3ef559ac1f72e70334cec244fe6f957b83000faa7de1220bcd3bc87d9d2713d283f4636c35356c92ac5f88d7ef40d2adaf8dacaa420073c5a5476ff1454a54a1594a3c7ee63529839b08b937366b1cb1d12b93167b8189144204eacff905d51b04586ce2c8b10ed6352a2096441e1771290d4c853511916eb7c71eb852df60eea0dfc638b8c900e65a143f343689dd3575da1f950448018e9cf7038b49dd283e3f952850f1b7afc50f3c620a3cc72910f39135ff277c3ae88aab693356ca8dda435831ffc3f6e55fc0f3e9c9ba3cbe48a060ac35010d2f2db92796ad9c67d0ffc952ca906b2a7811c493dd350cca4a66100734b675ce8e59401d5e7cd5d4661e03ebd8ac322f1223f3408a24b11b1c4c0f08d93c873dd848d929a3e13e253312c64329a6d4b4fce73fcd90de99e5c6063887ae7097cf630287a33b84f249c5e73bc0776ca1c08ab0d4e76949bbb946fda4b1f7bb6410141b72d00b5a8c981304c5949be0ffd43c26f5f611fdd0141d4dbd7231e051d02a6c9087931cccee17a190b8add82c5fd9d5c32c97f6837f9d6869ab79e1e8faae0148b2f2e47fde320def3b9d19a7b459643b6a922ade54c262838c1de4ac1049f77bb9c897d2a48283b6eca503f5deb08f9a317edf4184863783b1a2ec5e5882451944f2e0c577f08331546b339f0649e24fdcef488250b7b9cb500f1b7d8e477f6e2f9a312e93366725d580a1084f4eeb007a70dde6e1c0a4a2fb7341b181b40fcea6240d11600503769fb91249101c306d42b4f0c83161135eae8939546a476110f70db46d917766e0980c256bf0a0512a0ad1e003671c675036c14d7989f567ce3eb399e6fd7875f30e5e173e4b2348da3514f9ba12139614d53f09d221d00952ce63af14e3e6914210de6715be62d6cc195f725daf8bc72f4d62efd8a0158f1d231ded30d820e6b2961a6017028e3919f1ea394f9c8003297252089b20c89b79262a9b30b36fd6baf06ee6a5bae67f219c500ca5fa15bb910361da15873d7856b8e9d1bea273371759ea5bb55f4eec595889296a92ad665d50f96f8b9084d6e943583915ba8ee74ee3a100c31d5356abd039d70857a42a085bd4a82d3337c98669adc7a874bc13fce4eb473896e184f3a86fde49dfa8b57422c4ca1f683dc557f3e0416899212a66293ee453cc7c0bf4ee2c0a8eb7f7976e255e71f3fa59e06e8887a7c47985204338d2f36c8bbdf8b8485364b50339877ecc3ad55516940c728e16531efd34d9e93e7c03bedf090fd6f39d0d94dafa2f18e091763678c0ea79f7ae51bc2396b787a6ba14b06350fa76867cd99677d5d598ba518e703b2df109154c66d152a15597b56341ecd757ce818b13faaf4df11d48ecd0c0c6c02776f6b4a92cfacd9bb6744edb8e39ff5cf094eeaf6d414c1adcd2913bc3565360879f5c3d08f79c909c91fa6aa123d504b0417b7e368de81d12736cd85d110d14cf1074680c8b9aeb6b06ad6fca86edc2c1fb0548ff4c3ebc4fd59fd1399fcaec0ac9e68935563a62ea19ef5663c0594a7d92374c72921042ec7a7534ac62ab3bea3b9f2f5aadc51f1d7cfec666c132d55a6adf567e99951e382bc68a9475209b7c9eec5574d4ba06a01727de73e56146f14f378eee84700093786277c06df6302a06d4b80a9f1c31dac71505fd76e6d9eaf54be7a1b8d89ae6ee58e4239eb5db2f292a1053c71efdc8e3f6c19fc9a383f8262e0f0688e4f8b62ac6bf3573bcd0ba8cf53a28ee95ef333e2753f68f3996e390562706cc7684bb03e73eb42e4f8e7a23b2cbe0357232dd72fcf152d5d49c7a8989857c9587afca1ee3f305c1ec707dd66c16bee9fdbed802e2537e08078c365b70811df6a1467c6e78878541c456197ae4d70791cf65d399bffb9698eeb73553431ff3c80390c04b034ee1f4453023c0fa60523d210791d01b7607c9b5f1e7ba656627b251ff17794196e3a9f8fc6bc408a70ee345b91b2d070db33b56a58f150eca9f448d6f8ad2ebe1fddc23369ee53f88e777a59a76bca756cb8cea02351832ef46b286a3a000259709e7c0d748638cf3bc1b4e08ee2fc14c50bf4cae83678c9ed566f0a66c951ecc16a66da006864c711e03bdbed1f4a6da7e148cccb7ae29f2cf03d8c4f823cf9d8a7f402410eb3ea7e33a532e1c61bdfbef278f39f4f0908c62581b47cb87d47b718df3d5a58fd5e056df36dd378f7235dfdd19aaf208fa66c5fcdb1af7b4d3b31a3e3f7e82faf49d7beb9257cacb4a06c174aec4fb082a422853ac9c4864d58351fa09665691805c1780689032bab5a472c708f571af4f20ee4a5a337b0ea8789714de85126c2271f1b29dcd05c4d90c2dc17cbaf7611d07f33daf958eab0e40ad8e17517f75ae3410d9b777796a394fa24726a0c8d631b22af7ca9214ebf153c976c8c43dc4378d8d0bc1a4109ec68c583ccd2b3227c9fb8d51397624a4aa65b1714ab94d7fbcf1639f6da0cd947392b177fd5eef3e052af59e045127446c77487444a6c38c662481db45b39c1d39cd1471492b196cd2e060bbc54a1c6545e18aa4f2ae632f10f4537145d42bb24964452501fc0bc39eec694bd7fd080e4eb7a99cbdc437f73313456bec1e491f18da3243c5131ee9120b59f2704d5ba1fa0e35010328f8bdc40a879a868a1f35662869368683ffd0170ce19f2022af16bdbb765f3786dbedc5fe1aec0922466d5216709ea114d082fd307893091a3b7e5c5e4de2278635dc381499b293732f4ea694e98c355cb4c295a1fc246a77b28cb91b43f7875a71c34693ef4bff5c623062091d8f68b08ea33a5f4feefae91d5235ba26413928ff4acec8eed30a44933bb25d911826d9de4c3a5c45f10ef883b976617ee4ae8c441ec6eca2ab387b1ddeab3804227679bf066bbce7187ee5b3b1a433b4d548918ea6508efbbeb4a369edb19690d7438615efbdf65b5427b2694a8e601aa2c508724834bce026fab9f1bed8bccc3669657261e9f2172e20d43218bc93498267e5fe4d910535ad208cbf199de925c44af819994a266292e24201e3b0e7b65d0c3c13c5b07dec287c67b2214c9d88800a398fc6548bfaf5f6f0e71a107c44a01d340fd510792c0afac3d575751dd2fca7228e602e5068465edbe7f4d1f88ef2f28bee351ead2254b4ad3278312be25cfcf909b0f434de398f7a5b0aa8f92dfc048b2ca1152c11edabf0bde65e637b930c208a0c42b1f68e7888ff918c6feba879964f8c804b25fd687852bd0928b8a585776275c0f1e46d3d4d671f3264aedcf6a44df693f8b8b8cc9f848a3e0c6071f07ab948a1edd03534e95804437317db9080f5d2d12185c904e546dced3fd807f1a44687733a4ae48821fe6e26212110ed3ce1e8867bdd6ce1ccf16be5c10492ad8142d12e01b0faf74cf1f4fb288e1872ae173a8d9da7b8670e045b57f60cc84907ffa2a229c9b4257475f0d8f63a46544230b2e9a9f7d704301ffff442c019c32c1d21d07a6b9c584675df73aa2ed6159fd0527aa5faeec07e114e2d3b2f1576e25c0542004c528763b3f023a78b29d3c8d6dfaf0f10d76bc5d7bd212997cf00d50e19e18dcf1af7d77f1a44ac45a329420cc210dc749a0197c7963665fc20f52e58e52e7c6f90752b050bc84d10300ff74aa909b04de3c9af7dc9184fe4178d75578855d3e7b3a1e9f1ca34645da9aaefb5881180b0ea79c8151a61e48b3ea56edd202f272284b188aecd4e5c14869445c31d7425d5736f9600a9962a43978aac335d957d945c42957ea5af9aa65d243c27935029b075ae512ab39b8c0fc19e888dd520e8f1cf6ad05882bb62a8c1d0cb50345f8250b46e27235ebda53c93abc6a42ab500c818bb4658dc933dc527ffc179ae2706278c29076003b8a96e69de3f292a78dd38dd30c251c225d3983b418ab81c832e28c8ca4995008dbc378553639f2b5b99f507d852efe83975c9a4f300aa2e930d98b9dedd5ce42817a8fcc5b7b22b128912c375e99ca99eb558eeacd363679250d1243db7933627aa9a0d2919a83edde7f9cd5e14aa26b2363be892ba167cb467b183b45fc0502db00759da24fbf84a081f29636969917a4d8d04c4f4fb5d6b55248b0d0435a7e5f6f1aa0df6bb940f588312b0c6a5330e34f73a4bd892c7564e2660ebd71faca2101ca6c7ed84d971305ee55f06557e26b3679052846b6f06b6b1f6b4b1bd35c2937aaa761742c37e9a76d8e66c85597fdeb619c09daf2aa6826da9d5acb23eada7c072b9429297afe8011ec91b0c5b3c3", 0x1000, 0x4000000, 0x0, 0x0)

15:54:09 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x10080, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000080)={0x4, &(0x7f0000000040)="730c7e0f543564f72a4e8d92b80cdb877ec47fd3c97996ecbe67913df54a3fc8b304ede1eee330405b2c8d0ff15a7207edc7455dc4f3047f3441574607e9a5a0"})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x2}}, 0x2e)
sendmmsg(r2, &(0x7f0000005fc0), 0xa9, 0x0)

[  347.236348] audit: type=1800 audit(1571586849.390:161): pid=15351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17254 res=0
15:54:09 executing program 1:
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
add_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000005c0)="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", 0x4f0, r0)

15:54:09 executing program 1:
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x40, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000080))
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200400, 0x0)
ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000000200)={"1d4fcfe28b9e3880c40e925d556cc4741f5088154dff298a8db63fc51870bdf92166c6cd68d97e18541a85396e8628928c03325df64273f72820f6ef652307b32d5dcdea32de650d53537a5260e8b97cc92cec938e4e5977e73fa56b527192295bd6a99c99706e671e596727ca8511cf8b0f341163967af527c2350c244e11d520027bee64ca8b9a117dad6e95ff2448a4f8e6873d2eafcfe26df7bb34501b27b9689aeedd4ec7c8b3ec95501ee51022351bc1cb5ce60c5f583d879f6f39fe350f2ffcbc77737e3daf08048c347ceb86a4090c231fd899fe6cffa3f3c3098237f95596f10cc56f163ccc9929151d08bee44fdd488aea69ac4fdab2c238236311a871643ca96cf3470f180c43ff78c18f2b3416aaeca4724cce7467a2f99595f250dabb3741ef6bc3c12243a1830345bd630486ba1ed40880dee0fa07ae37bee95e63d7b7afd2191f24898b5cd510ffb6b46ba06cd2bfaf11b76bcccfda1aa4bc342a01d0376a6620fb9fb4573b4d0083f31cfc75e8f0d470da0f982725ec4f58f9783b0f69cead8edf56a1e57d3f73e9188366ffc23e07897b936b4fed9e142edf18074647caa5a1940ac3ab6be698b6729dd059a7d28cabc0fcd2aa20d79eb81869881585d1f5618579626fd63b2738e287b681e50fca798b84126d00f0f82f466895030db0c1208cdbdee4b4c275cb4a95ea9b985ec5da9756b29492daccb4cf8b46f031e8acd85dd00f6b63b31b4e975f85f35a70cd35d444367ed11ec22bcda73d962d2c74177722e7dd4723895c84f9bac0b0fb0236b55233f1d3c585aa23b2374d830b6de0367912685376d7130067acff2acb831a81e1e4a5a221641d06844e2c0b0a40742049c9213c9e8ec40cbc404fd061f5f4d73a64cdc7f94621eabae9654f6608288b604907ae4d7fdc5b2cd63251dcc5d6afd645070985f3a047e56e99dd274b5bddf6e5cc38a61add5accab9695a1428de03a76151dfd0ff38c1c3969ca1639aa0428239d2f32a629c74d7aecac00c61d23ba8587bee810473b5d751b4b71a9dcf638f2a76d25399c272defd231bd80a48d84971235cfea2f34e483c8ea602779c62da6d17aa3fc02cf9156a2d63e480415e5707fa461e82b7e941bfc66d8ae7c3ed9d06afbbda56734d9cb5d6fc62ae0171b15aae7ca5b82b11bebc7851f113e024e7b480fdc8369f901fac238edb8bdbbe93c4a8bb6887f8565a4556c1d1293338e24e41e64b18f511c2e3ad07d570ee887ecc2b7d190df9ec7f4813e3c24b6161adce8d00db6a9257074083a58e7e7098568f83e6d37de3f33e386046bfbea5f3a321b18093ba80ce85241598d3803c7a9c5c0e7dc634f085c9ce300fbc23d2c9491b1631d81030f899221599f8614ba9d50488a7f8aa0a1035ce3bb5a8ea574c5a003c731d129cba25c375a53fa256f6288e046815318"})
getpeername$netrom(r1, &(0x7f0000000140)={{0x3, @bcast}, [@netrom, @rose, @bcast, @rose, @remote, @netrom, @default, @bcast]}, &(0x7f00000001c0)=0x48)
write(r0, &(0x7f0000000000)="3a030006190025ef5a00000000000002802000030011000500e100ee9f00f56e00000000", 0x24)

[  347.470083] audit: type=1400 audit(1571586849.620:162): avc:  denied  { write } for  pid=15364 comm="syz-executor.1" name="net" dev="proc" ino=57418 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1
15:54:09 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r4, 0x0, 0x1ffffd, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000040)={0x3, 0x47})
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)

[  347.502846] audit: type=1400 audit(1571586849.620:163): avc:  denied  { add_name } for  pid=15364 comm="syz-executor.1" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1
[  347.532473] audit: type=1400 audit(1571586849.620:164): avc:  denied  { create } for  pid=15364 comm="syz-executor.1" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1
15:54:09 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0)
r3 = socket(0x2, 0x803, 0xff)
truncate(&(0x7f0000000000)='./file0\x00', 0x0)
connect$inet(r3, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10)
sendfile(r3, r2, 0x0, 0x72439a6b)

[  347.615181] audit: type=1400 audit(1571586849.760:165): avc:  denied  { map } for  pid=15367 comm="syz-executor.1" path="/dev/binder1" dev="devtmpfs" ino=1922 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1
15:54:09 executing program 4:
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
splice(r2, 0x0, r5, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={<r6=>0xffffffffffffffff})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
r9 = accept4$alg(r8, 0x0, 0x0, 0x0)
splice(r6, 0x0, r9, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$binfmt_script(r10, &(0x7f0000000380)=ANY=[], 0xfffffed5)
pipe(&(0x7f0000000380)={<r11=>0xffffffffffffffff})
r12 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r12, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r13 = accept4(r12, 0x0, 0x0, 0x0)
r14 = accept4$alg(r13, 0x0, 0x0, 0x0)
splice(r11, 0x0, r14, 0x0, 0x1ffffd, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRESOCT=r0], @ANYRES32=r1, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT=r6, @ANYRESDEC=r9, @ANYRES64=r10, @ANYPTR, @ANYBLOB="653ddb67b7e23ad4fad9aea88feda2f4cdd80b73d0c6844a4c9e30d73fb9191d36eaf45384749d3047420e2d0e2a3a2611768596d21f0d2be90f44253d038f6c2607dca79a5da14051f863575c12dc9a8a12173bcaec8e346a217751d6379651f3a1357c0c00b3ea4f22ac51202764e6", @ANYRES64], @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYPTR64]], @ANYRES32=r4, @ANYRESOCT=r10], 0x37)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xb, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x65}, [@generic={0x2, 0xd, 0x5, 0x8000, 0x7fffffff}, @ldst={0x0, 0x3, 0x0, 0x9, 0x6, 0x40}, @call={0x85, 0x0, 0x0, 0x6f}, @ldst={0x2, 0x82c08680279db2e0, 0x1, 0xe7c3ad3233a4482a, 0x11, 0xffffffffffffffe0, 0xfffffffffffffffc}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1f}, @alu={0x4, 0x1, 0x5, 0xa, 0x0, 0x10, 0x8}, @ldst={0x397665282452a89d, 0x1, 0x0, 0x8acc74f98fa7fa27, 0x16, 0xfffffffffffffff8, 0x8}]}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8}, 0x10}, 0x70)

15:54:09 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x8)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0xde000, 0x0)
ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000040)=0x2)
r7 = accept4$alg(r5, 0x0, 0x0, 0x0)
splice(r3, 0x0, r7, 0x0, 0x1ffffd, 0x0)
ioctl$VIDIOC_DQEVENT(r3, 0x80885659, &(0x7f0000000100)={0x0, @src_change})
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x1)

15:54:09 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='illinois\x00', 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x2b3)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0)
accept$packet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x0, 0x0)
getpeername(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
pipe(0x0)
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0x1f, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @rand_addr='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x80041)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4)

15:54:10 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
exit(0x0)
timer_delete(0x0)

[  347.882717] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
15:54:10 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0)
ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000080)={0x3f, 0x3, 0x8})
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
splice(r3, 0x0, r6, 0x0, 0x1ffffd, 0x0)
r7 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r9, 0x301}, 0x14}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r9, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x15}}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr="8582d05e94e8646ac9e0c5c9160d3767"}]}, 0x54}}, 0x800)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

[  348.217156] Bluetooth: Error in BCSP hdr checksum
15:54:10 executing program 1:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sysinfo(&(0x7f0000000140)=""/17)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB="02"])

[  348.487440] Bluetooth: Error in BCSP hdr checksum
15:54:10 executing program 1:
r0 = socket$kcm(0x2b, 0x4000000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xa8800, 0x0)
close(r1)
socket$kcm(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000080)={'bridge_slave_1\x00', @random="01003a1e2410"})

15:54:10 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000040)=0xc)
keyctl$restrict_keyring(0x1d, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='\'&\x00')
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
socket(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @broadcast}, {0x285}, 0x8, {0x2, 0x4e23, @loopback}, 'nlmon0\x00'})
splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0)
getsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000240), &(0x7f0000000280)=0x4)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$isdn_base(0x22, 0x3, 0x0)
ppoll(&(0x7f00000002c0)=[{r5, 0x4004}, {r6, 0x80}], 0x2, &(0x7f00000003c0), &(0x7f0000000400)={0x800}, 0x8)
write$binfmt_script(r4, &(0x7f0000000380)=ANY=[], 0xfffffed5)
r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0)
getsockname$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000001c0)=0x1f9)
r8 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000000100))

15:54:10 executing program 3:
migrate_pages(0x0, 0x8, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
migrate_pages(0x0, 0x3, &(0x7f00000000c0)=0xa42, &(0x7f0000000100)=0x5)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000480)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x98)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r4, 0x0, 0x9, 0x7e}, &(0x7f0000000180)=0x10)

15:54:10 executing program 1:
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x7aa)
memfd_create(&(0x7f0000000200)='\x00', 0x0)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20881)
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x1ffffd, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
accept4$alg(r5, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r6=>0xffffffffffffffff})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
r9 = accept4$alg(r8, 0x0, 0x0, 0x0)
splice(r6, 0x0, r9, 0x0, 0x1ffffd, 0x0)
pipe(&(0x7f0000000380)={<r10=>0xffffffffffffffff})
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r11 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r12 = accept4$alg(r11, 0x0, 0x0, 0x0)
splice(r10, 0x0, r12, 0x0, 0x1ffffd, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40, 0x0)
pipe(&(0x7f0000000380)={<r13=>0xffffffffffffffff})
r14 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r14, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ni\x00'}, 0x119)
r15 = accept4(r14, 0x0, 0x0, 0x0)
r16 = accept4$alg(r15, 0x0, 0x0, 0x0)
splice(r13, 0x0, r16, 0x0, 0x1ffffd, 0x0)
r17 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r17, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
accept4(r17, 0x0, 0x0, 0x0)
r18 = dup2(0xffffffffffffffff, r17)
membarrier(0x4, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r18, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$P9_RLINK(r18, &(0x7f0000000280)={0x7}, 0x269)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r18, 0x4040534e, &(0x7f00000002c0)={0xe17a0ebf766f8fe, @time})

[  348.735055] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.4'.
[  348.752963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15416 comm=syz-executor.4
15:54:10 executing program 5:
timer_create(0x200000003, 0x0, &(0x7f0000000000))
socket$caif_seqpacket(0x25, 0x5, 0x4)
socketpair(0x9, 0xc, 0x91, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pwritev(r1, &(0x7f0000000740)=[{&(0x7f0000000240)="d9e8ba11a82f", 0x6}, {&(0x7f0000000280)="122b58ee5d98a04ebdac20125eb6152422ee557914b2b0447df18868ce6af2eaf2523e5679d0efbb13cf816c4b6470a1d42c1e5e47af8c3313aa4fddde1dcb82daa3b43078626db312fce94b2e9f15b09488c57b17c4c4b41f89e976bee46ce7c3f810696bf7c9fbc6f199c2fdf4908ac8e060fe95fed644563921bd26d73cf9f8bf42401845fab8215753e297e3181e629d2904a8ea6073fba6b3cba92f81ca0d1dfef05bdab17a0eec84c85e9efaf4b66a684c7737edaa59f79f5df42802d812a83dd59ce538", 0xc7}, {&(0x7f0000000380)="594afd5408", 0x5}, {&(0x7f00000003c0)="237c8dde90a3b0c00921d904cd1846d18385ab56003fa2da845a9ea19d78f5f0d928987597066d73ec4452757d56df1b0f7326d15144234c606a580f34e9f0ca9c18e4501af3112d2f2abd087aad19429e0dd283b57ad92f79014c9acbf432fc689bfb9f85e1034dd6e0d051215b35325b2f2f1f23388785ef54c8d175343ca3fe64d6ebfc", 0x85}, {&(0x7f0000000480)="36c7a45eaa192987aa8b78cffab957fbb0adb44887816c3d864e569132c1f637135f832ee4e5e760bdcab122d7060094880abf28c32aa2f7315714365833441cda7431812b2c5441a3a60d90369bb9cbd751e0101454e6b7c3e9ca6deb8229003f4506acc4a9603d1c6f0ca45b7072df0e5b255c18e4d0b132675aa61d8a868103cf43b6f7457ef434c0af1ac093cb9a70fc6c724ff3af98958cccbf93b15b335376170b350f95f102ecd7b06494db69", 0xb0}, {&(0x7f0000000540)="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", 0xfb}, {&(0x7f0000000640)="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", 0xfb}], 0x7, 0x0)
ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f00000001c0)={0x3})
exit(0x0)
timer_delete(0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000080)="9e0f044bcd09e46edbe9ca60a2cd11d77e3318727c9d4cddacfd108e8a567eeb36897f1a7c6eda2c47dd60fe9574dfecf659335d1cb405a054cbda0d407fa7372b96b236a14fc635320abd6e71cc4bea210c13b0faff7667e82232dea29d9dae599b602100df50627019148afc5444d4c4cc23e8fcd72e25c84bfa350e89b4e01c84add9154110fb9b7967d65965a322ac8bd6410c752b1e20d0f2fa49a96294b637f537efb81e71a0ee04934b6f9540dd67ee7061b83b37640b5f3fb34a83adeb04f545251d943f4f4bee0d5f2c1505dbf6ff3ce97e73c08506995caaaafb9e0008033c7d92c60f46")
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
accept4$alg(r4, 0x0, 0x0, 0x0)
accept(r4, 0x0, &(0x7f0000000200))

[  348.774343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15416 comm=syz-executor.4
[  348.788499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15416 comm=syz-executor.4
[  348.802433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15416 comm=syz-executor.4
[  348.818627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15416 comm=syz-executor.4
[  348.839476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15416 comm=syz-executor.4
[  348.854858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15416 comm=syz-executor.4
[  348.877476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15416 comm=syz-executor.4
[  348.901480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15416 comm=syz-executor.4
[  348.941321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15416 comm=syz-executor.4
15:54:11 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0xfffffed5)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f66696cf73020627269646765300020202062726964676530002020207d0a3668a6ecbdbe3ddf7c12a53c7338cc87b2ff32a3ca66fd6e59d0a5ca2476bd73e0fa701206fb2471a47212b7a10cee1a421be04f0a5dc4afbf2d5efa15180bf8241e09b7b57a05eb9b7fc90576770d96220d0dec5063b3fdc366f1495ac61195981caf2cfa8c4cb849"], 0x8c)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

15:54:11 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x81800100, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0)
syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x93b1, 0x200000)
socket$netlink(0x10, 0x3, 0x0)

[  349.966959] Bluetooth: hci0: command 0x1003 tx timeout
[  349.972861] Bluetooth: hci0: sending frame failed (-49)
[  352.046209] Bluetooth: hci0: command 0x1001 tx timeout
[  352.051619] Bluetooth: hci0: sending frame failed (-49)
[  354.125807] Bluetooth: hci0: command 0x1009 tx timeout
[  358.370400] ==================================================================
[  358.377911] BUG: KASAN: use-after-free in kfree_skb+0x38/0x390
[  358.383878] Read of size 4 at addr ffff8880998379e4 by task syz-executor.2/15382
[  358.391388] 
[  358.393014] CPU: 0 PID: 15382 Comm: syz-executor.2 Not tainted 4.19.80 #0
[  358.399925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  358.409319] Call Trace:
[  358.411900]  dump_stack+0x172/0x1f0
[  358.415511]  ? kfree_skb+0x38/0x390
[  358.419150]  print_address_description.cold+0x7c/0x20d
[  358.424453]  ? kfree_skb+0x38/0x390
[  358.428071]  kasan_report.cold+0x8c/0x2ba
[  358.432214]  check_memory_region+0x123/0x190
[  358.436631]  kasan_check_read+0x11/0x20
[  358.440603]  kfree_skb+0x38/0x390
[  358.444045]  bcsp_close+0xc7/0x130
[  358.447591]  hci_uart_tty_close+0x1ea/0x250
[  358.451907]  ? hci_uart_close+0x50/0x50
[  358.455886]  tty_ldisc_close.isra.0+0xaf/0xe0
[  358.460403]  tty_ldisc_kill+0x4b/0xc0
[  358.464204]  tty_ldisc_release+0xc6/0x280
[  358.468354]  tty_release_struct+0x1b/0x50
[  358.472488]  tty_release+0xbcb/0xe90
[  358.476204]  ? put_tty_driver+0x20/0x20
[  358.480180]  __fput+0x2dd/0x8b0
[  358.483461]  ____fput+0x16/0x20
[  358.486729]  task_work_run+0x145/0x1c0
[  358.490645]  exit_to_usermode_loop+0x273/0x2c0
[  358.495254]  do_syscall_64+0x53d/0x620
[  358.499146]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  358.504329] RIP: 0033:0x413741
[  358.507507] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  358.526398] RSP: 002b:00007fff650a8c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  358.534101] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000413741
[  358.541363] RDX: 0000000000000000 RSI: 0000000000000b6c RDI: 0000000000000006
[  358.548621] RBP: 0000000000000001 R08: 000000009bea8b70 R09: ffffffffffffffff
[  358.555880] R10: 00007fff650a8d40 R11: 0000000000000293 R12: 000000000075c9a0
[  358.563156] R13: 000000000075c9a0 R14: 0000000000760968 R15: 000000000075bfd4
[  358.570432] 
[  358.572044] Allocated by task 14265:
[  358.575754]  save_stack+0x45/0xd0
[  358.579206]  kasan_kmalloc+0xce/0xf0
[  358.582926]  kasan_slab_alloc+0xf/0x20
[  358.587413]  kmem_cache_alloc_node+0x144/0x710
[  358.591987]  __alloc_skb+0xd5/0x5f0
[  358.595606]  bcsp_recv+0x8c7/0x13a0
[  358.599249]  hci_uart_tty_receive+0x225/0x530
[  358.603742]  tty_ldisc_receive_buf+0x15f/0x1c0
[  358.608307]  tty_port_default_receive_buf+0x7d/0xb0
[  358.613310]  flush_to_ldisc+0x222/0x390
[  358.617278]  process_one_work+0x989/0x1750
[  358.621509]  worker_thread+0x98/0xe40
[  358.625295]  kthread+0x354/0x420
[  358.628644]  ret_from_fork+0x24/0x30
[  358.632332] 
[  358.633950] Freed by task 14265:
[  358.637312]  save_stack+0x45/0xd0
[  358.640758]  __kasan_slab_free+0x102/0x150
[  358.644974]  kasan_slab_free+0xe/0x10
[  358.648779]  kmem_cache_free+0x86/0x260
[  358.652745]  kfree_skbmem+0xcb/0x150
[  358.656449]  kfree_skb+0xf0/0x390
[  358.659897]  bcsp_recv+0x2d8/0x13a0
[  358.663516]  hci_uart_tty_receive+0x225/0x530
[  358.667995]  tty_ldisc_receive_buf+0x15f/0x1c0
[  358.672561]  tty_port_default_receive_buf+0x7d/0xb0
[  358.677574]  flush_to_ldisc+0x222/0x390
[  358.681548]  process_one_work+0x989/0x1750
[  358.685769]  worker_thread+0x98/0xe40
[  358.689559]  kthread+0x354/0x420
[  358.692907]  ret_from_fork+0x24/0x30
[  358.696604] 
[  358.698229] The buggy address belongs to the object at ffff888099837900
[  358.698229]  which belongs to the cache skbuff_head_cache of size 232
[  358.711406] The buggy address is located 228 bytes inside of
[  358.711406]  232-byte region [ffff888099837900, ffff8880998379e8)
[  358.723266] The buggy address belongs to the page:
[  358.728203] page:ffffea0002660dc0 count:1 mapcount:0 mapping:ffff8880aa347ac0 index:0xffff888099837180
[  358.737726] flags: 0x1fffc0000000100(slab)
[  358.742044] raw: 01fffc0000000100 ffffea0002a618c8 ffffea000221ca48 ffff8880aa347ac0
[  358.749923] raw: ffff888099837180 ffff888099837040 000000010000000a 0000000000000000
[  358.757796] page dumped because: kasan: bad access detected
[  358.763516] 
[  358.765125] Memory state around the buggy address:
[  358.770039]  ffff888099837880: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc
[  358.777401]  ffff888099837900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  358.784765] >ffff888099837980: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc
[  358.793110]                                                        ^
[  358.799591]  ffff888099837a00: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00
[  358.807068]  ffff888099837a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  358.814411] ==================================================================
[  358.821755] Disabling lock debugging due to kernel taint
[  358.828472] Kernel panic - not syncing: panic_on_warn set ...
[  358.828472] 
[  358.835910] CPU: 1 PID: 15382 Comm: syz-executor.2 Tainted: G    B             4.19.80 #0
[  358.844226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  358.853837] Call Trace:
[  358.856434]  dump_stack+0x172/0x1f0
[  358.860062]  ? kfree_skb+0x38/0x390
[  358.863680]  panic+0x26a/0x50e
[  358.866870]  ? __warn_printk+0xf3/0xf3
[  358.870810]  ? kfree_skb+0x38/0x390
[  358.874439]  ? preempt_schedule+0x4b/0x60
[  358.878577]  ? ___preempt_schedule+0x16/0x18
[  358.882976]  ? trace_hardirqs_on+0x5e/0x220
[  358.887280]  ? kfree_skb+0x38/0x390
[  358.890891]  kasan_end_report+0x47/0x4f
[  358.894852]  kasan_report.cold+0xa9/0x2ba
[  358.898983]  check_memory_region+0x123/0x190
[  358.903374]  kasan_check_read+0x11/0x20
[  358.907327]  kfree_skb+0x38/0x390
[  358.910763]  bcsp_close+0xc7/0x130
[  358.914284]  hci_uart_tty_close+0x1ea/0x250
[  358.918587]  ? hci_uart_close+0x50/0x50
[  358.922583]  tty_ldisc_close.isra.0+0xaf/0xe0
[  358.927060]  tty_ldisc_kill+0x4b/0xc0
[  358.931034]  tty_ldisc_release+0xc6/0x280
[  358.935161]  tty_release_struct+0x1b/0x50
[  358.939293]  tty_release+0xbcb/0xe90
[  358.942991]  ? put_tty_driver+0x20/0x20
[  358.946948]  __fput+0x2dd/0x8b0
[  358.950208]  ____fput+0x16/0x20
[  358.953471]  task_work_run+0x145/0x1c0
[  358.957348]  exit_to_usermode_loop+0x273/0x2c0
[  358.961935]  do_syscall_64+0x53d/0x620
[  358.965819]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  358.970995] RIP: 0033:0x413741
[  358.974177] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  358.994014] RSP: 002b:00007fff650a8c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  359.001745] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000413741
[  359.009133] RDX: 0000000000000000 RSI: 0000000000000b6c RDI: 0000000000000006
[  359.016386] RBP: 0000000000000001 R08: 000000009bea8b70 R09: ffffffffffffffff
[  359.023642] R10: 00007fff650a8d40 R11: 0000000000000293 R12: 000000000075c9a0
[  359.030890] R13: 000000000075c9a0 R14: 0000000000760968 R15: 000000000075bfd4
[  359.039489] Kernel Offset: disabled
[  359.043116] Rebooting in 86400 seconds..