fffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x58}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r4, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}) clock_gettime(0x20000000, &(0x7f0000000700)) dup(r3) sendfile(r8, r8, &(0x7f00000000c0), 0x8080fffffffe) accept$nfc_llcp(r2, 0x0, &(0x7f0000000540)=0xfffffffffffffd68) openat$mixer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mixer\x00', 0x8000000, 0x0) close(0xffffffffffffffff) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) 15:07:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x13) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001500)=0x40, 0x4) recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/152, 0x98}], 0x1, &(0x7f00000015c0)=""/131, 0x83}, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) ioctl(r0, 0x4000008906, &(0x7f0000000100)) 15:07:40 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0c00001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:40 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0614001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) [ 415.159698] FAT-fs (loop2): bogus number of reserved sectors [ 415.197550] FAT-fs (loop2): Can't find a valid FAT filesystem 15:07:40 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:40 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1fc00e001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:41 executing program 4: epoll_create1(0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x300, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x4f41) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) ioctl$EVIOCSFF(r1, 0x402c4580, &(0x7f0000000100)={0x0, 0x0, 0x0, {}, {}, @rumble}) 15:07:41 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0600001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:41 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0009001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:41 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:41 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0005001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) [ 415.492434] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000078f) [ 415.512841] FAT-fs (loop0): Filesystem has been set read-only [ 415.523990] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000078f) [ 415.544852] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000078f) [ 415.566598] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000078f) [ 415.605380] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000078f) [ 415.614024] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000078f) [ 415.929984] FAT-fs (loop2): bogus number of reserved sectors [ 415.938244] FAT-fs (loop2): Can't find a valid FAT filesystem 15:07:41 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000080)={0x4, 0x1, 'client0\x00', 0xffffffff80000000, "e5adf6c03db579bf", "5c883d633e952a518d05e69adf087b1ee3c39875059ed8545aefe303c0b48641", 0x9, 0x401}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = getpgrp(0xffffffffffffffff) setpriority(0x2, r2, 0x0) prctl$intptr(0x34, 0x0) 15:07:41 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f000b001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:41 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:41 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) clock_gettime(0x0, &(0x7f000000b400)={0x0, 0x0}) recvmmsg(r1, &(0x7f000000b300)=[{{&(0x7f0000006140), 0x80, &(0x7f0000007680)=[{&(0x7f00000061c0)=""/219, 0xdb}, {&(0x7f00000062c0)=""/140, 0x8c}, {&(0x7f0000006380)=""/209, 0xd1}, {&(0x7f0000006480)=""/4096, 0x1000}, {&(0x7f0000007480)=""/104, 0x68}, {&(0x7f0000007500)=""/191, 0xbf}, {&(0x7f0000005d40)=""/39, 0x27}, {&(0x7f00000075c0)=""/172, 0xac}], 0x8, &(0x7f0000007700)=""/164, 0xa4, 0x1}, 0x9}, {{&(0x7f00000077c0)=@xdp, 0x80, &(0x7f0000007980)=[{&(0x7f0000007840)=""/57, 0x39}, {&(0x7f0000007880)=""/243, 0xf3}], 0x2, &(0x7f00000079c0)=""/4096, 0x1000, 0x6}, 0x3ff}, {{&(0x7f00000089c0)=@xdp, 0x80, &(0x7f0000008b40)=[{&(0x7f0000008a40)=""/31, 0x1f}, {&(0x7f0000008a80)=""/146, 0x92}], 0x2, &(0x7f0000008b80)=""/4096, 0x1000, 0x9c1afe4}, 0x3ff}, {{&(0x7f0000009b80)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000b140)=[{&(0x7f0000009c00)=""/186, 0xba}, {&(0x7f0000009cc0)=""/125, 0x7d}, {&(0x7f0000009d40)=""/77, 0x4d}, {&(0x7f0000009dc0)=""/189, 0xbd}, {&(0x7f0000009e80)=""/4096, 0x1000}, {&(0x7f000000ae80)=""/116, 0x74}, {&(0x7f000000af00)=""/219, 0xdb}, {&(0x7f000000b000)=""/87, 0x57}, {&(0x7f000000b080)=""/126, 0x7e}, {&(0x7f000000b100)=""/39, 0x27}], 0xa, &(0x7f000000b200)=""/233, 0xe9, 0x7}, 0x8}], 0x4, 0x0, &(0x7f000000b440)={r2, r3+10000000}) recvmmsg(r1, &(0x7f0000005f40)=[{{&(0x7f0000000100)=@sco, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/5, 0x5}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000180)=""/117, 0x75}, {&(0x7f0000000200)=""/93, 0x5d}, {&(0x7f00000002c0)=""/141, 0x8d}], 0x6, &(0x7f0000000400)=""/202, 0xca, 0xffffffff}, 0x6}, {{&(0x7f0000002680)=@sco, 0x80, &(0x7f0000003800)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/95, 0x5f}, {&(0x7f0000003780)=""/75, 0x4b}, {&(0x7f0000000500)=""/27, 0x1b}], 0x4, &(0x7f0000003840)=""/4096, 0x1000, 0x7}, 0x8}, {{0x0, 0x0, &(0x7f0000004c00)=[{&(0x7f0000004840)=""/124, 0x7c}, {&(0x7f00000048c0)=""/106, 0x6a}, {&(0x7f0000004940)=""/108, 0x6c}, {&(0x7f00000049c0)=""/174, 0xae}, {&(0x7f0000004a80)=""/52, 0x34}, {&(0x7f0000004ac0)=""/65, 0x41}, {&(0x7f0000004b40)=""/133, 0x85}], 0x7, &(0x7f0000004c80)=""/132, 0x84, 0x80}, 0x8001}, {{&(0x7f0000004d40)=@can, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004dc0)=""/98, 0x62}, {&(0x7f0000004e40)=""/214, 0xd6}], 0x2, &(0x7f0000004f80)=""/246, 0xf6}, 0x180000000000}, {{&(0x7f0000005080)=@rc, 0x80, &(0x7f0000005700)=[{&(0x7f0000005100)=""/1, 0x1}, {&(0x7f0000005140)=""/51, 0x33}, {&(0x7f0000005180)=""/194, 0xc2}, {&(0x7f0000005280)=""/251, 0xfb}, {&(0x7f0000005380)=""/166, 0xa6}, {&(0x7f0000005440)=""/221, 0xdd}, {&(0x7f0000005540)=""/237, 0xed}, {&(0x7f0000005640)=""/165, 0xa5}], 0x8, 0x0, 0x0, 0x4}, 0x1}, {{&(0x7f0000005780)=@rc, 0x80, &(0x7f00000058c0)=[{&(0x7f0000005800)=""/109, 0x6d}, {&(0x7f0000005880)=""/14, 0xe}], 0x2, &(0x7f0000005900)=""/36, 0x24, 0xffffffffffffff01}, 0x1}, {{&(0x7f0000005940)=@generic, 0x80, &(0x7f0000005cc0)=[{&(0x7f00000059c0)=""/81, 0x51}, {&(0x7f0000005a40)=""/172, 0xac}, {&(0x7f0000005b00)=""/101, 0x65}, {&(0x7f0000005b80)=""/16, 0x10}, {&(0x7f0000005bc0)=""/250, 0xfa}], 0x5, &(0x7f0000005d40), 0x0, 0x10001}, 0x1ff}, {{&(0x7f0000005d80)=@un=@abs, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005e00)=""/82, 0x52}], 0x1, &(0x7f0000005ec0)=""/83, 0x53, 0xfa}, 0x10000}], 0x8, 0x2001, 0x0) 15:07:41 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000001580)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000015c0)={0x0, 0x0, 0x0, &(0x7f0000001640)}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x80000) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000140)=r2) 15:07:41 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000280), 0x0, 0x0) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000080)=0x10) get_thread_area(&(0x7f00000001c0)={0x8, 0x20001000, 0x400, 0x1, 0x4, 0x5, 0xffff, 0x8bb6, 0x101, 0x9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="c744240020000000c74424024f000000c7442406000000000f011c24c4427d180508000000c4c245ae08c4e2850108b9800000c00f3235004000000f30d3559e67470f224205c814000066b89d000f00d0c423a95f2518410000e1", 0x5b}], 0x1, 0x4, &(0x7f0000000040), 0x0) open(&(0x7f0000000040)='./file0\x00', 0x20002, 0x40000000000000) 15:07:41 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f000a001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) [ 416.103173] audit: type=1326 audit(1538320061.723:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20541 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x50000 15:07:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x7, &(0x7f0000000100)={0x0, &(0x7f0000000140)}, 0x10) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x7) modify_ldt$write2(0x11, &(0x7f0000000000)={0x1, 0x20000800, 0x4000, 0x0, 0xffffffffffffff9a, 0x6, 0x3f, 0x8, 0x8, 0x7d}, 0x10) 15:07:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x401) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000000)={0xa}) [ 416.192607] audit: type=1326 audit(1538320061.723:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20541 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457579 code=0x50000 [ 416.246379] audit: type=1326 audit(1538320061.733:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20541 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x50000 [ 416.269020] audit: type=1326 audit(1538320061.733:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20541 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=55 compat=0 ip=0x457579 code=0x50000 15:07:41 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00c00e1e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:41 executing program 2: r0 = dup(0xffffffffffffffff) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x7, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) r3 = epoll_create(0x46c) dup3(r3, r2, 0x0) 15:07:41 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) [ 416.306860] audit: type=1326 audit(1538320061.733:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20541 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x50000 15:07:42 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@empty, 0x2a298942, 0x2, 0xff, 0x2, 0x7, 0x1ff, 0x400}, &(0x7f0000000240)=0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x1, &(0x7f0000000500)=[0x0]) socketpair$inet(0x2, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100), 0xc) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000280)=0x1f) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)=0x1) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000005c0)=""/228) sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000940)={0x14, 0x15, 0x0, 0x70bd2a, 0x25dfdbfb, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x10) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000780)=""/220) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000580)={0x20, 0x5, 0xec, 0x3, 0x82d}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000480)={0x0, 0xfffffffffffffff7}, &(0x7f00000004c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000006c0)={r3, 0x42, "d7e8e04414340381630dfaba584bb5414791d6e4f49fb51cdf888fcb3e7c4832f6e917551b31e225e473f0f1ec647365568cb20840419c9e4e19f676f87b653da9e6"}, &(0x7f0000000740)=0x4a) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000a40), 0x4) bpf$MAP_CREATE(0x13, &(0x7f0000000000)={0x1000, 0x0, 0x7a}, 0x2c) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x5, 0x6}}, 0x28) 15:07:42 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000061e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) [ 416.437331] audit: type=1326 audit(1538320061.733:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20541 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457579 code=0x50000 15:07:42 executing program 2: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000d80)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') r4 = getpgid(0xffffffffffffffff) recvmmsg(r2, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/64, 0x40}, {&(0x7f0000000600)=""/34, 0x22}], 0x2, 0x0, 0x0, 0x8000}, 0x8}, {{&(0x7f0000000680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/175, 0xaf}, {&(0x7f00000007c0)=""/33, 0x21}], 0x2, &(0x7f0000000840)=""/104, 0x68}, 0x10001}, {{&(0x7f00000008c0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000940)=""/122, 0x7a}], 0x1, &(0x7f0000000a00)=""/83, 0x53, 0x81}, 0x2}, {{&(0x7f0000000a80)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000b00)=""/131, 0x83}, {&(0x7f0000000bc0)=""/112, 0x70}, {&(0x7f0000000c40)=""/121, 0x79}, {&(0x7f0000000cc0)=""/198, 0xc6}, {&(0x7f0000000dc0)=""/107, 0x6b}], 0x5, &(0x7f0000000ec0)=""/150, 0x96, 0x1000}, 0x5}], 0x4, 0x12000, &(0x7f0000001080)={0x77359400}) rt_sigqueueinfo(r4, 0x1, &(0x7f0000000380)={0x39, 0x2, 0x1, 0x32f}) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x330, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) socket(0x40000000002, 0x3, 0x2) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x12400) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r7, 0x15) [ 416.537973] audit: type=1326 audit(1538320061.733:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20541 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457579 code=0x50000 [ 416.574563] audit: type=1326 audit(1538320061.733:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20541 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457579 code=0x50000 [ 416.602976] audit: type=1326 audit(1538320061.733:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20541 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457579 code=0x50000 [ 416.624507] audit: type=1326 audit(1538320061.733:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20541 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457579 code=0x50000 [ 416.646305] audit: type=1326 audit(1538320061.743:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20541 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457579 code=0x50000 [ 416.667702] audit: type=1326 audit(1538320061.743:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20541 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457579 code=0x50000 [ 416.667726] audit: type=1326 audit(1538320061.743:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20541 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457579 code=0x50000 [ 416.667772] audit: type=1326 audit(1538320061.743:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20541 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457579 code=0x50000 [ 416.667799] audit: type=1326 audit(1538320061.743:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20541 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457579 code=0x50000 [ 416.753650] audit: type=1326 audit(1538320061.743:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20541 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457579 code=0x50000 15:07:42 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000051e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:42 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x84000, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x8000, 0x1, 0x2, 0x3}) getuid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) getpeername$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f00000004c0)=0x6e) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000100), 0x1) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r0) 15:07:42 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)=',') syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x2, &(0x7f0000000180)=[{&(0x7f00000000c0)="7b189fb0020420866c04b5", 0xb, 0x401}, {&(0x7f0000000100)="d40f4f5a1edc56009771e7293497df199ea067813b85ba90b68083223de141f7b2ea31f239058c4ca3de09d4a675f3fc", 0x30}], 0x80006, &(0x7f00000001c0)='vboxnet0\x00') 15:07:42 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:42 executing program 0: r0 = socket(0x13, 0x80006, 0xffff) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x20) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000200)=0x68) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/ipc\x00') 15:07:42 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00000e1e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:42 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/net\x00') r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x400900, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) recvfrom$packet(r0, &(0x7f0000000280)=""/209, 0xd1, 0x20, &(0x7f0000000380)={0x11, 0xf, r1, 0x1, 0x200}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0x26a) 15:07:42 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0008001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:42 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x90000000000b, 0x0, &(0x7f000000b000), &(0x7f0000001040), 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="e8df6cf1d3e666aa812446d0b59839daa4a279decc9b3fe7ffc1e585deec8eca669cc6d32d6cdad83b9d62d83627dd733b32a38edaef3efe9d4ebccdb7b1ab8cae7b31ae056fd282b0de5f9ce08a0e20ba165345c184619a6c086a8f55a0c67f338cec7cfe02a7e1d768fe10913cc4ccee44c5e1203d5f544c3b04466324a884fe1e58a48021672609d01e7e694412324ba971c0078e7ea36ea4c0dd2b313510bc18754ce2bc85315730b12354ed8c5541737f6da35da062923f3ae352b14ba03a31f5b32b5e0257cc5dac5176c3d64788b3562060", 0xd5}], 0x1, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x620000, 0x10) futex(&(0x7f000000cffc)=0x4, 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x4) 15:07:42 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f000c001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:42 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00f0001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:42 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r0, &(0x7f00000002c0)="adae6bc89d5472cff7a834aa2371ec5e145b60488630469df09c092f2708eccb379803037b0387780e8f2e9a766191c8847d897bc046ccb9d51b10b43623cde390e88cbedd1936e8e64814cf06b6028544e884c4dbdbdeef112cefda2dad325173a45725b556964940ddbf9d83aba2cf40afb1da51796f9e14a3f21b7f42", 0x7e, 0x93d5fff61bb33621, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8921, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49794de18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3ec4d2e8d443c82fc3435bed4de5d69409a781c863e0fd8a6f868925be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a441a2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0cf816930de3675d34117a44eb0e4f832936da44e63e1160af1acf45db1cdf4bcbbede795db798c61db61e23f") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"6e72300100", 0x2101}) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000000040)="37e963e8190c91fe14aa0821f015271e43172bca495a7a90b0d690d6c37b4b9ce1a2afc525efda01a9d5b0a1b055028cadb2293998752702bbb3bae5bf1b6e70040297b63727c5de18755114a3c762cc880e9935698e54f48b", 0x59}, {&(0x7f0000000180)="e465348a0f17eaff25608923a69ef7bc05ffba0f7ab3b83150451e95fa77f7cda2fec081a39b813ba78a5e05b33073faa8d1bb7b7d5e20b6cb14229724f45eab3add1f4b034628b571fd858965cef4950a8fd88dd044d52db70b043ebbb4f607e8518ba876125f91ba0601820d94fe880e23973c34c8aa61f479ceafb0cad88491b83b14a50881d5a9418a01b2a2fbeac69b82d40504eddf7a11d5787569b4ac4cd0d90ad1146f5a909ec77d70eb61f4fbb0f6c7a1c45f56ea322c11c238", 0xbe}, {&(0x7f00000000c0)="38238b6e2905d75aa5d3ea7f40ddf931ed47736ec23546fa4bad590b1b93d3988915335faad891ea7e0517110fd3eb14bb86", 0x32}, {&(0x7f0000000100)="adb17d996a07ea95aae324bffe07be95dfac7e6db8cdac519b", 0x19}], 0x5) 15:07:42 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:42 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x5f, 0x28c0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000200)={0x5, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @broadcast}]}) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f00000000c0)={0x7, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x2ff, 0x0, 0x400c0010007]}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x20, 0x80800) 15:07:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0x0) splice(r0, 0x0, r1, 0x0, 0x10001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) 15:07:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000001a40)={'filter\x00', 0xb9, "85707070ebf3767cc06c7b4885662ad752f84a3a8aa9c8dfb5957a81aa221489036bf4af06dc35164aac2a699e0fcc601ce3801515b152b456e1589a0e6163b598fdcab98d5a1948f4bed7b53c39e04899fa62905b9a388cfdf8e69a5fa239f14eb241846d2c637164d273e6c5ec902882bc0e950d0c933f29eaa3a5cc65912500eb16ece044465ada84ac02267610389fe5c98d261e09970264ed7d437b29a425b410e3821ca0d22da0b6b3cbc62ed6be824634c333ceffc6"}, &(0x7f0000001b40)=0xdd) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000004a80)) getresuid(&(0x7f0000004ac0), &(0x7f0000004b00), &(0x7f0000004b40)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000006540), &(0x7f0000006580)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000067c0), &(0x7f0000006800)=0xc) getpgrp(0xffffffffffffffff) getresgid(&(0x7f0000007900), &(0x7f0000007940), &(0x7f0000007980)) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000540)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000007ac0)={{{@in=@dev, @in6=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000007bc0)=0xe8) lstat(&(0x7f0000007c00)='./file0\x00', &(0x7f0000007c40)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) accept$inet6(r1, 0x0, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000080)) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000100)=""/202}, {&(0x7f0000000200)=""/121}, {&(0x7f0000000280)=""/221}, {&(0x7f0000000580)=""/4096}, {&(0x7f0000000380)=""/169}, {&(0x7f0000000440)=""/59, 0x400080050020}], 0x1000000000000061, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:07:42 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00000c1e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) [ 417.343136] kvm [20645]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010007 data 0x0 15:07:43 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000811e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:43 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x90020) r4 = shmat(0x0, &(0x7f0000492000/0x4000)=nil, 0x2000) shmdt(r4) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0x9}) ioctl$void(0xffffffffffffffff, 0xc0045878) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) 15:07:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000540)={0xf63, {{0x2, 0x4e22}}}, 0x88) alarm(0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r2, 0x200000) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0xb9b2, 0x7, 0xe47, 0x9483, 0x7, 0x1, 0x0, 0x4, 0x6, 0x8, 0x2}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000100)=""/221) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000698000)=0xe) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000200)={0x9}) close(r2) 15:07:43 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd(0xffffffffbffffffa) dup2(r0, 0xffffffffffffffff) 15:07:43 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488d") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:43 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f000ec01e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:43 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0005001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020000000000000000000000000001"], 0x1) r1 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x8001, 0x6, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x101, 0x8, 0x100000001, 0x0, 0x7, 0x7fff, 0x8, 0x7, 0x1, 0x7, 0x7fff, 0x0, 0x400, 0x71, 0x0, 0x55d, 0x5, 0x1, 0x0, 0x1a, 0x1, 0x8, 0x7ff, 0x80000000, 0x6, 0x80000000, 0x8, 0x0, 0x2, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x100000001, 0x4}, 0x100c, 0x0, 0x607, 0x0, 0x0, 0x8, 0xde}, r1, 0xe, r0, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$dupfd(r4, 0x406, r3) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000300)={0x4, 0x8, 0x4, 0x9, 0x0}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000380)={0x3, 0x7, 0x3, 0xffffffff, 0x5, 0x101, 0x1f, 0x2, r6}, &(0x7f00000003c0)=0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) r7 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x7a85dc0e, 0x400400) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f00000001c0)={{0x87, @multicast1, 0x4e22, 0x0, 'sed\x00', 0x10, 0x8, 0x56}, {@loopback, 0x4e20, 0x0, 0x3, 0x2, 0xfd3}}, 0x44) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400000000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0xaaaaaaaaaaaabc7, 0x40, &(0x7f0000000200), 0x2de) accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) socket$inet(0x2b, 0x1, 0x0) 15:07:43 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0004001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:43 executing program 2: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[@ANYBLOB=':::'], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="2cf073656c696e75786367726f757000") r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, 0x2, 0x3, 0x8, &(0x7f0000ffb000/0x3000)=nil}) [ 417.732761] libceph: bad option at 'ðselinuxcgroup' [ 417.791553] libceph: bad option at 'ðselinuxcgroup' 15:07:43 executing program 4: syz_mount_image$msdos(&(0x7f0000000500)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000540)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x18, &(0x7f0000000580)=ANY=[]) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x5, 0x2}, &(0x7f0000000400)=0x90) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r1, 0x40, 0xd3, 0x90001}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000002c0)={r2, 0x6}, 0x8) fchdir(r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000440)={0x4, 0xffff, 0x800, "315af243"}) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980)={0x8, "7c70ee3800d5ab5f2036f872e0ac57cbd592bca0d671633f50a3102066d6e765f5a64731e3fb8d90d250eda2cc33b60a7ff98074cdc3f1dd1a2df26a381d95974e0925d521c6b48c3dee0d430d398884316091aff6adb6153dc3c92549957d3488efc02d6f6fb172524b095c30c1bd35aae04236bdd42694d613eb54c0b65a338c48dc4c8bad70754fc81d9928e4a1b81f9c77075258a0805b4494867247966b24a023311fd91ef3754b98d3acde6f2ef0617f123c22fccb81c11389fdfa2e21c2365aabfc8916e02151d8643ae21cab7fcbec6142186d3bb57546c106484bc4c28a48da2b75dd82aabe99464558e60cd101f6b65856fabee614d271741a68dd550c8772f06a93cf8e5c0de549c3b75a72f8a590bd50b2af5f64009c969ed7596f0192b0f98b1afac0e8c5f4c653f611b4a71776400a9ae3f18e75f856788c97195749042510735880b9bb0ccb23210832a4f1c6f134d68f8e299837c426e0c9a45d5d2c959446cc363f370c67cd01a063c91254d692fe35abee92fabda4f66d93228c979ebe036c5c2e0028ec76562d67d0919ca28258fec0ed60603142b5c57c4cfb1ea1e892d0fd2f33970142b179c415d6bea344fbcc82d133052e848a885160737c69eb02ca9f544831c8e3ffcf40cb7b415d24795fc8aaeb8e76bec262aea5e28fe5d6495c4b5895a612b1cc2122286add66356f3ecd309f970634f1b09da1507964d35575167317f13c7fd9f11af27ceea86e9a5b3494a27ba98ba38dd1fb72ef2c6163664fd8f7c946935cd4833121f505ff277c03d959d9a12f3389e9eb6701a8b29f72c20c6abb7bd8349dd2e120bdd59dca9f1a2a877f1677b59d7920ddf29b9d94f7c6879b78e31cf1b65b60fe349ef9d4976f46609ee34e33f647aafbf64f6323d18598905f2e73af75661397595b8f9c1e9a4e993946820da5378ca5b363560e95edce316e99bac6e6250efcf1cb58fdcf94c7557c2d7f763a688543462d54b64e178c2e64c6ebba356894973051907fd8de8ba908e822168b171c1707efcd9ac827e64313721876e2ff26ac34e88557a4a0dfde08eda81cf0c1465a89b68429e48966044c767563e1121db48c9b619fd7362afd15ec6aa19b28759d7977be4fbcad0cf8dd5dc5362259bd5cb5089a9d18db969afe1192571f5fcc0c4d6be281d23b9c1f9f32873c058adfa1bf57a3718686957edfd6e4b58aa959541127696d59fb2810d042ced227961eb19a424e4cf45bc6243217bb7561b7ee11f8c0b8f39480343a26f2da5fe79d5e213c01ea47155ffa91e7d7ba0bc8ccb018bd69cfe71dd8565a645d678b404a295397e83ae69dbf8505f6947a836b44823a92861124330fccd4bc4a2e20d9047bd919d82c89623caa87eb09bd584d58f42b35ef55fddc06dfb3957f3f507e5ca9b8b98947cc5bb68846755527ddf32ffa444e1c7a5654d4d377e04a9f22e1069804fdcdb251acb6bd6b32d100feb44286991d779d2b3e2b7f5cc5f8eb3ae166a3b6fb9df11e1867989a6f9b2028e4c73b4d418b51f6e870713cadafddb47a48c9a97283da214f02db3326d42438d9a7db580693ad1887f99d86bb5fafd6d07c2647fc80c2c5a1ed9ea3b95be65ca422080ddefca5b49ccd538f6bc67390f892d9e416f7e835f76dd90edc56256348d20560caeea05c0922cab60dbf0b57ddaaed6ded5a336e01485fd571dc12050461271cee347c31ac245bfee9128630dfcc43b6d88b5ba9937a6f6ab70b7d256784ff72297cfcfd0ffacd09b55fb832bf60f04d87c48c74972b9f18fa178ce4880b025d1c1097ddb929e8f7e02f1c0e03012bec0fa61a49eb1c2a50a45fc0d98b6649de325184006938e421321e8b366649d9b6ebadf77509c9d48844e80f7752fd7daaa5c938b946feaaac0d871203270a747035c7e2f697c84e792a55cbce76c0a25360f7acbeaab60627aa9c37064af75b67f46732844eb2f6b37226004afe451a9fbfbbcf7e72ade67b017e9209b5627fbe16789abd90326751a1fd1d93efc59f2650f979ba71938d784064922bee2874c4b76d5f26e39ea0a98cf175950137feff9456c88c6a295830183fae3a9c2312c25f3d81708d73488d15a587e7e7cdde3b77917eef29c8b5965c916a65c3c5a53b7313c3115d0a8bb4e16f6b80ff6f78adb756aba94ced86047562a2cd2fb25e9a4656f6359c3f2fde8b5ab38852853cbd7221cb4d59b7f0e79bd37f9ade073f62b75edbe63c13c0d02bf076d88f5b750ea640aad47ce97d6a0783398dd3fbb63734ed969470cf45200235650532224fc28caf1e36ca6b402ec4c978add40fc59f2113485875682139f8aa9aeb48d09178de919370b0cd0ebcab5e60e1b0a2fc153db0dae8e50b48561622a677d0f1afc149676f832e016e14007fb298dcb96f11a92a1ac8bd4cc7b34d659d6cd2c9817b586585e72080255b083bc84512277ffb7f561c6a7a08cd128bfe9b525da531f0bf04f11d3de102b3538835807ac0b2f4325fc6765d02d692ec82f5b338c8257029136fcd3427c09874ecc7492becdd6608eac4adf1abc3f7e08868a72e57ce4dcfc288a25af73d19f1118a9254963c1548cdca5fc7c921a7f218f8e71edd7969dfb35beae1091d7530e32236397fa9fcd232b441ff1b0177829468c198d659d247ccca4fbd58c625501e4368075d0e5e69a6f90952f5bbe48e85a303131dedf7f1a513b291598a545784e1013521877c25d6069d3a855652a4bad5b2df2e4da2de756a20e790b756dd2925ce824561e5892b5e064c7c7b996acc4e29597e0cd00956e9c57ec374714f846be7632d3075e38bead499163498810886c78a2cc73fb64fd48e186083ce911e0751b4dc63476859c2824fa532a4b1711c244619e702eeab19380aeb7b17f67fade3dcad8ddddd893a526cd5d04d8ae982c88029ec71bdd0772fd74adbdb378fc204ca411a2d8a50331516a28552be78f9725f32d1b3a6c7bdf3277c5f7e385c7ebbacc419ec7ca3c5b8f46dbefee59b6422a6b22d60527edc012f852077d925619874f7709f283e01678fed36528003a696ee431a817f34f453c143dc56b70e1f810a5380a555cc8c4fc6522ab544ce5d715caa302ebdd0aa8286b7ef5dd6dd48a8ad9566818f7509daf02db0b98b432f57f1d107ee95a86228728cab4062e27922381e1e2ee351af5e2ea0fd6d1cea70b3b8f4a50f0776fc9aa2a7d2dff6e1ea3769864104f09137b99960b69af13895d842649eacaed8ddf183beba3323640af8deb52b902c0974d685d19fc87c93eb80ad5d28e54363705ad39231d989522e94f000256bc8d93af138a45d67dad3e21fa9fb31d9327c6e71f61956d9daf4f97333112704136d3d1bf6fe0e4c002e10b684d2344300ec70fae0b50532ebace58f0e8318354a172cceacf27d01ff41cc8fef42443f62b0e15b5fcc0728630b96fb2c2b59634f4993bb1ce2eace6fb0f53e5f84bc5f58b1b66d59e3c75a98670496f105a703607211aa9e882e72f13e9fe07f0767ad4e5ac5c732b65301d8ceab36b5ff2f71958fb1b51d2e703ac506e68d4026160fd3f60440b8b8f554f1feeba5d53f71cbe60d143620f8fa779acb94c965b729207a5ab11f4a51b694c31606171da44a28d80cde296dff5724ff718d6377eb8534e616cff39af943ee4ce87b4fadded30c702d370a71072ab3e20f19b8c1b73fdbbb9c675352bb73ee85e22597fc0c439a33f5febe1629bd084af7193f8d1a1415b02ca54706711505cbae11ec6411b012cc3a3eddcfb002901b6e7565b9fbf4d605c147031888ceb590c14697d00970ce9095c6f7fee41ec6a15d7ef52dfedfff2a0d3dbb387b61232aee6ca202787038021e6aabda18e2adf6fd89aa491e65f9813d73412fbfff089752d713d7efa690ec4fc254b56908d3057f65997acf81aea589e272f8fa852849e488f1e0c0cb6cdb5f46ca92e36d39224e704850056d2e9b91909aed0f55d054e274415ecc39b8958335a14cfb0a42d7f26ef8e82592dfd03b3550b5193fba077994c682951968869574fd94976760d9bd9b334353eeda836cc8dab244e72095cc46833f02bb2f6df35601b3085664261abb67fc9ab9f27210e6827cd15ce16c55f0f7f5b8ab401f24032b19a53a9299b62ebf4a8cf7f4753d95126f008a8ce349036666de66bcaf40b27fa875efa98873e1ef9302e2a24bfe07bd1054bdf9ba9ad1b1075402f26d682833b947c762513ba5f07537bb712473184a60e04ace5adb8d982d6153b011ae0b2034adc0ff4a64e2c6561c2e0840cdab2120bc916cde9b7a92c4d332d0f83945fe55e3c8f4d93f22e7759c20241d92cca0ae5a3d06a127e5614df708cea1ad3b2f231c81460ff4c3f349c67a87135a4b67589ffce311832923f71796276e81f0537e265404c0ee06d5ed98a5ec5f8ad62db589eb585fc4627173b51fd4e897a3e8d2acbb82ec2996ac3a6823368a1e12a0536a9d1a7b2d31d80c46c292ff51395481d4f65c53fab867e27bec9156ee189d245d94877a1405dc9e1e996822ad47071a9ab36c9bfd02c41ea5ba21591793053b1b64758bae0addfcd69d169849bc1ee6ce5c08f0d3da5ecc1b6ab31e13af2fa5ce4d921163270901264a88ac6350e8fb6371663dd04146932238597258b123a8036250c190fbb3cfc6ebbf9e06c4a9053e8332c95c91a890a3d35ddd35f47e7ab606f3e345e12560e6d52243883da7b8910834042ad12e7fb3f08a0b14ef6aee22251999e6079be2ef5666d7d5ae00d161720262761da3f378c63cb151f4e94d034e9de949dfe796b905804ca555691023c30ea7cf0cb276e1e3ba65793291f8287d1064606bf5787421b9b9bfc05e9c5eac750de92519fe9e2592cd34a2ef6ec18efed5e7c13bfcfce47327cbecac358bbe6d44164849308cf91cd5ea87fa4b02ba4939e28141c7dad42714b019470d91808a8f46150677b6c90f267ecb39ef42afc95de0cbd016775c89d8213ec9d4e061e6493f237296f91abfc64176c0e885ef54af4136a724fadfe89a25d7599998acebc4a27f8fb5b26936bda5c3d5fec3373dcd9a0e99fc939641c50669adc54119582e8835575d1c57fa955cd29d870360620f91c3ff90d264013816352317ae226f7d7bad5db711f8973382f6cebd63cd519ddd08e1772649be75f64f4acc15f828dc0b305584b6dd2213194603c44e2964358d305aa97fb08568a0a955ad7a6f8d042754b4bbf2fb3414052719fd9841bef8360d1d3195c69414be882115c2c64fecdcbdaed3a2e943fdfef9a13520e41d32a787bcfe4f61e2b378d35aa70784a772cf8ebcaaeb105e4627516db2ababfcb8c11f224c3a48c86160d34d0ee59f02c31648ae4b0309b378f0bf63266967dcfb4f1cc1902f613c6d0d48915a9cf28a52b106544cde1b38ff2e2a1275fd0d3899ce7f7c6653c9017f7ac4aaa35bcb2811a8f9dbb56746b45475350e7c13d42abb5692377da7a4045ee644ce00f8699e3251d75621c82cd659ea3add277affe3ff792f7d24a3d0979ef82cfc0d409697ae2e8598854a8327f46974c901d309dc6dbe31913c59d821aa50c0fe95cc822e8f07bbb00e9a09bc9a570b9778d29308740bc336a41258d209c206f87a709aa43415da0096f7d177e509a7d625645fb098ccc45367d82235e952670ac5f82f8ced3f59fd9ee20ac75be609cc832417e807ddc40630cba4c91e0785edcb5f20b9e6dedb1ec172cd16fc034f410e9ce375ea855144aa3076317f649cf4efe4d7abf244984c4e", 0x1000}, 0x1006) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0x8080fffffffe) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000140)={r2, 0x9}, &(0x7f0000000180)=0x8) 15:07:43 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488d") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:43 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0009001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000020000100000000000000000008000000080003000000000004000100ac1414aa00000000"], 0x28}}, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000080), 0x6, 0x0, &(0x7f00000000c0)="ab0ab23ce4a1"}) 15:07:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000240)='./file0/file0\x00', 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0/file0\x00', r0}, 0x10) fallocate(r0, 0x0, 0x800000, 0x8) fallocate(r0, 0x0, 0x0, 0x6) write$FUSE_ENTRY(r0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x80000000}}}, 0x90) 15:07:43 executing program 2: ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000018000)={&(0x7f0000000000), 0xc, &(0x7f0000013ff1)={&(0x7f0000000040)={0x14, 0x29, 0xffffffffffffffff, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x404}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb4, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x6}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8419}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000041}, 0x20044050) mount$9p_fd(0x0, &(0x7f0000001100)='\x00', &(0x7f0000001140)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="1c2964043c00bad5b57957cd3d67426d1297fbd6b7821939243700f902e9d31cd64c6c24267a56c8ec0610d997adf1892fdf49c3ddd44506000000000000007fbbe05166da9c6093acad2b82b80b3704a31851ce871212756998cc00087dc86c546feafd38df6036a97396985dc6678d46961cd470188986ffed4e142ae28f608a3bcf6b2658b9bc7ea7a682373d2883992f7b0cc1431532a602078b5e26826358c19eb0659aebbf76ad19c4299b93942877d8af694b0fd3ab926c949fd7c8319222c4"]) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0x0) unshare(0x2000400) ioctl$sock_bt(r0, 0x8907, &(0x7f0000000400)="4f089ab2efc87bc15d330205e16184c2bda2f9993e452a2ed90c68323b0acd853104ae8eb1912d5c7682361ee006fff1f4e7026dfc114e02265312b8ef4dc18253fc5772df79cda04dd6d3e046624f3ae2b4fc50d7c540fcc0d34fc4e2e73e61c0ed8a02905e76cbe1931197fb2df5872fd8a00e9e78c2270f7091b50c6db9d51e8efc0e17053ec7ebb4fd6a24915528e6d8e7efe9bd66a44c983986a830f2c68945858cfcf724dddb6f27266fcc9f39") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000240)) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x3fffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', r0}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000340)=0xc) ioprio_set$pid(0x0, r5, 0xffffffffffff0000) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0}, 0xa0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000880)={0x7}, 0x7) umount2(&(0x7f0000000500)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f2) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000000140)={0x2, 0x10001, 0x504b}) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) bind$inet(0xffffffffffffffff, &(0x7f0000eed000), 0x10) syz_emit_ethernet(0x32, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000540)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1}) 15:07:43 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0006141e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) [ 418.247192] netlink: 'syz-executor0': attribute type 1 has an invalid length. 15:07:43 executing program 0: clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{r0, r1/1000+30000}}) lstat(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="73657373696f6e3d3078303030303030303030303030303030302c736d61636b6673666c6f6f723d2c005103f28c51d6ec01de44dbe695ceac9f4709bd2dc0ede726f9db25b6769e768cd050a23a348d24b2f04a3a52ff44a06d012fcc150713fc91d33eb662a9cfeaedfeddfa44f8502f28ffcb96199c6b5229c7cf9dc35e1f891bdd072f257c47020831d2d4c869cae07960e68dc7f93e7542430bfe1556fb63d1c96d7628af6ecd03c1781bf28b2d1d71bd0b694a154c38055b28"]) [ 418.292218] netlink: 'syz-executor0': attribute type 1 has an invalid length. 15:07:44 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="417c5f34acdb6d4fba500342f6a8c4e0ef723f1b9c5f79e7c0b47779be79e6961605d88474262aa24729eb9a30b01dafec60023272cc8171c22c40530162321819c09c8ecf0e60b18fd6552961189b75239bf3890f3be8", 0x57}, {&(0x7f0000000100)="3705c476b135236f9b71fb38f606877e2dcaa4c715e59620dd47493d967a33935a83eed2a1889742e36e28dd17f343c59cb73e32435bd12e45f5bba94d8f3bf9fcfb310bf61fdacea2799bbe22bd95663b7610d4e62b4130e44fd04ab45c83049b09671f73fe0c3ec3de28517f13dbd53c997c288efcb95b6dc1cd8b7c6901db5f99d14de86bec0cdd4d8a149056f65d3cf2205f54fa225b14a6f7774db024f91adefe772b0bff2040656927e806c76b1edf8d3b06f19772be8ff7d00b415e0aaa221f4d", 0xc4}, {&(0x7f0000000200)="d69b73b37c7918882835b3ff780a9d1699271665b51ddd8c781c24a0bcfdc18ef535a9a866c9aada0f375c550055aea8790884929c559f674107334df65bc49250c06f4918aa7fbc4518e3275f700a1d20cf", 0x52}, {&(0x7f0000000380)="99914cd24061aa014ec122edd593158bd814c0d08223db429cbe5a6cbb121297be9fb68b8bb44d792f450bba8e4b40a4d44f04bec5d2c09b46cd21835c25692fd6514c7d5a37f1ac30deb8c57d041b2bf696157a77551a60a23cf361f820cb", 0x5f}], 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 15:07:44 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x2800) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0xfff, 0xaa, 0x5, 0x4, 0x242, 0x7fffffff, 0x100, 0x9, 0x3, 0x5, 0x10001, 0xe2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) r4 = getgid() keyctl$chown(0x4, r2, r3, r4) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r5 = syz_open_pts(r1, 0x0) ioctl$TIOCEXCL(r5, 0x540c) syz_open_pts(r1, 0x0) 15:07:44 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488d") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) [ 418.394163] hfs: unable to parse mount options [ 418.406246] attempt to access beyond end of device [ 418.411665] loop5: rw=1, want=130, limit=112 15:07:44 executing program 0: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000240)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a05000000000000754c8107c3cd3923dd4a71c2ff06007b6b481612c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e19ca29e5c07f000000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018ea6fa63b94eb0e4283cea71fcfacf40d32811dc8132725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539db019eebd86f21b030d26430315535774a8815f0bcbc30", 0xd3, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) getpeername(r2, &(0x7f0000000340)=@sco, &(0x7f00000003c0)=0x80) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r3, r2}}, 0x18) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400202) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) [ 418.450158] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 418.470264] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 418.481227] attempt to access beyond end of device [ 418.486887] FAT-fs (loop4): Filesystem has been set read-only [ 418.498173] loop5: rw=1, want=131, limit=112 [ 418.506110] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 418.521781] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000020) [ 418.530501] attempt to access beyond end of device [ 418.535507] loop5: rw=1, want=132, limit=112 [ 418.540514] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 418.553600] attempt to access beyond end of device [ 418.558969] ucma_write: process 1793 (syz-executor0) changed security contexts after opening file descriptor, this is not allowed. [ 418.571399] loop5: rw=1, want=133, limit=112 [ 418.580030] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 418.596322] attempt to access beyond end of device 15:07:44 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f00000000c0)=0x20000000000080) read$FUSE(r0, &(0x7f0000001240), 0x1000) 15:07:44 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0002001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:44 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4001, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000080)=[@acquire_done={0x40106309, r1}, @register_looper], 0x27, 0x0, &(0x7f00000000c0)="bd9738a13daf390fb15a37d3b64592cd64ae9b7d0debafd4ebe080a9c92853b7a3c225a3bb7095"}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000140)={0x1}) write$P9_RLOCK(r0, &(0x7f0000000180)={0x8, 0x35, 0x2, 0x3}, 0x8) fanotify_init(0x42, 0x40000) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f00000001c0)={0x2, 0x7f6ff460, 0x4, 0x8}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) prctl$setptracer(0x59616d61, r2) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000240)=[0x3000000000, 0x5]) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f00000002c0)=0x10) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000300)={r1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x50, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000340)=[@fda={0x66646185, 0x2, 0x0, 0x3b}], &(0x7f0000000380)=[0x38]}, 0x359}}, @enter_looper], 0xab, 0x0, &(0x7f0000000440)="5636eb4afd596b2081a33367aa1ae2ec9386bce5dd185d98133a4de7fba0b4b98e5c7f181e61352127d70c9ce8895216a753a76e17ecb1eae2f119bf5d7c2c63c8ad600b6c5bbef5cf7ac7bfd26658e094675a50f321001f619c8a41300b313eba0e891728da46574261035a3a95e9a21a01f79fc6f70557e2c578e062d17829521c8b06c42a7d8181c4a0c1be7deceb05587081971ad7d0759f404717b384d02597e584ea892bb630a909"}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000540)={0x6, [0x8, 0x200, 0x800, 0x7fffffff, 0x2bac, 0xde27]}, &(0x7f0000000580)=0x10) r3 = request_key(&(0x7f00000005c0)='encrypted\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)='(&ppp1.\x00', 0xfffffffffffffffb) keyctl$invalidate(0x15, r3) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000006c0)={0x5, &(0x7f0000000680)=[{0x5, 0x3}, {0x5, 0x100}, {0x0, 0x6eaa}, {0x5, 0x9}, {0x9, 0x20}]}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000700)={@remote, @rand_addr, 0x0}, &(0x7f0000000740)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'syzkaller1\x00', r4}) keyctl$describe(0x6, r3, &(0x7f00000007c0)=""/82, 0x52) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000840)={'nat\x00'}, &(0x7f00000008c0)=0x78) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000900)='/proc/self/net/pfkey\x00', 0x200800, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000009c0)={0x0, 0x1ff}, &(0x7f0000000a00)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000a40)={r6, @in6={{0xa, 0x4e23, 0x200, @ipv4={[], [], @multicast2}, 0x2f9}}, [0x1, 0xffffffffffff0001, 0x1, 0x0, 0x1, 0x1, 0x10001, 0xffff, 0x6, 0x40000000000, 0x6, 0x80, 0x4, 0x100000001]}, &(0x7f0000000b40)=0x100) syz_open_dev$sndctrl(&(0x7f0000000b80)='/dev/snd/controlC#\x00', 0x7, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000bc0)={r7, 0x5, 0x2, 0x8, 0xfffffffffffffffa, 0x1}, &(0x7f0000000c00)=0x14) connect$pppoe(r5, &(0x7f0000000c40)={0x18, 0x0, {0x2, @local, 'irlan0\x00'}}, 0x1e) keyctl$get_security(0x11, r3, &(0x7f0000000c80)=""/4096, 0x1000) 15:07:44 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) [ 418.601316] loop5: rw=1, want=142, limit=112 [ 418.622851] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 418.647670] attempt to access beyond end of device 15:07:44 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000071e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:44 executing program 0: prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xffffffffffff7fff}]}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="298d77a48dda2614dee220cca57b5ba1efa0cb5c6ef9194faaaa45d0c41912192c2293b8c152c1a09cb33bf031982638d797f655b7e83054ed39f5de82a009181566b72d506e97ab9f22ed42231cef7b2bf15907a0", 0x55, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) clone(0x820002102, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) rmdir(&(0x7f0000000380)='.\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xba9}, 0x20) r1 = socket$inet6(0xa, 0x80001, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0x1b}, 0x1787, 0x0, 0x1, 0x7, 0x6, 0xb1, 0xa21}, 0x20) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/hwrng\x00', 0x400000, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000b40)={0xb8, 0x0, 0x3, [{0x3, 0x7, 0xe, 0xfffffffffffffff7, 'md5sumvboxnet1'}, {0x5, 0x0, 0x0, 0x538}, {0x1, 0x1, 0x4, 0x7ff, 'eth1'}, {0x1, 0x16a, 0x10, 0x8000, 'posix_acl_access'}, {0x4, 0xc8, 0x7, 0x4, "ed766d6e657430"}]}, 0xb8) process_vm_writev(r0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/130, 0x82}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000000740)=""/193, 0xc1}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000840)=""/248, 0xf8}, {&(0x7f0000000300)=""/59, 0x3b}], 0x7, &(0x7f0000000ac0)=[{&(0x7f00000009c0)=""/246, 0xf6}], 0x1, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000c00)=0x2) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000400)=ANY=[@ANYBLOB="060000000000000004000000040000000000000000000000050000000900000000000000000000000000000000001d000000000000000000070000000200000000000000000000e8c319559c6f418cbe5d0007db58b555cac3760007000000000000000008d44780e3e8b010ff0000f9ffffffc1ffffff070000000000000000000000065b0000220200000000000000000000000000000000000000000000000000000000000003190000000000000000000000010000000000000400000000000000040000000000000001000000000000003f000000020000000000000000007e2d72f309a7c00900000000000000000000001bc8aad480000000000000000000000000000000030000000200000000000000000000000200000000100000000000000000090001000000000000007293c8a4d90c4427ff15c7bece80953da7fcba6b3fc414bbaac507ff097a41086486309f8efd478697de9448c2129f1f98c91073b71bef481ba5bfb48dfdd8af9f46706fb86df93d458215474c1bea5f"]) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x9) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, @thr={&(0x7f0000000400), &(0x7f0000000500)}}, &(0x7f0000000580)) 15:07:44 executing program 2: r0 = socket$inet6(0xa, 0xa, 0xac9) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="eb2c90", 0x3}], 0x0, &(0x7f0000000140)={[], [{@dont_appraise='dont_appraise'}, {@seclabel='seclabel'}, {@fsmagic={'fsmagic', 0x3d, 0x2451}}]}) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = semget$private(0x0, 0x7, 0x100) semop(r1, &(0x7f0000000100)=[{0x1, 0x4, 0x1800}, {0x2, 0xa0, 0x1000}, {0x3, 0x80000001, 0x1000}], 0x3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000540)={@mcast2, 0x51, r2}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000180)={{0x20, 0x1, 0xffffffffffffffff, 0x3ff, 0x3f, 0x5}, 0x101, 0x4, 0x1000, 0x7fff, 0x5, "d2b8ad41e4031331313943fae42b287abb587e6273ef2b50b709b66ae74411ad592e97e2380de5ff64595dfbbf448424edd9d8821d731499e7e8573ac2a919b57ef8bd5d477fa7cfd57efec9b845ddaaac3e15e9ef8341ea2662c9dca5f5af0091d98f6c457723b6cde84ed8c57c12b3a643fbd7a9c4222bef42189838428360"}) [ 418.657593] loop5: rw=1, want=143, limit=112 [ 418.663339] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 418.676570] attempt to access beyond end of device [ 418.681688] loop5: rw=1, want=144, limit=112 [ 418.689959] Buffer I/O error on dev loop5, logical block 143, lost async page write [ 418.744201] attempt to access beyond end of device [ 418.751067] loop5: rw=1, want=145, limit=112 [ 418.755785] Buffer I/O error on dev loop5, logical block 144, lost async page write [ 418.763830] attempt to access beyond end of device [ 418.781971] loop5: rw=1, want=185, limit=112 15:07:44 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00000b1e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) [ 418.797042] FAT-fs (loop2): Unrecognized mount option "dont_appraise" or missing value 15:07:44 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="b9a2d5b19422", @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xf0ffff, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x44001) write$tun(r0, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x1030) 15:07:44 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:44 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='/group.stat\x00', 0x2761, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0xe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000280)={0x1, 0x70, 0x7f, 0x3c, 0x8, 0x7, 0x0, 0x8000, 0x5, 0x0, 0xb9, 0xffffffff, 0xc5, 0x8, 0x5, 0x6, 0x2, 0x9, 0x3, 0x0, 0x9, 0x0, 0x6, 0x0, 0x401, 0x5, 0x0, 0x4f, 0x26, 0x3f, 0x3f, 0x0, 0x4, 0x20, 0xffffffffffffffff, 0xd06, 0x2, 0x7, 0x0, 0x80000001, 0x1, @perf_config_ext={0x5, 0x1}, 0x20444, 0x98ef, 0x0, 0x6, 0x7, 0xe668, 0x20}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@local, @remote, @remote, 0x0, 0x0, 0x0, 0x100, 0x5, 0x80050004, r4}) close(r2) syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x3f, 0x10083) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000140)=0x2) 15:07:44 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3c4, &(0x7f0000000240)=@raw=[@alu={0x7, 0x6, 0xf, 0x1, 0x8, 0xc, 0xfffffffffffffffc}, @exit, @alu={0x4, 0x0, 0xd, 0xf, 0xa, 0x50, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x5}, @exit], &(0x7f0000000340)="4550d4141f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd34101a574498fd2398c6c67bb1024ec94de4ff2c87fb5b12602f145b484be45912966e8b7e2f6603494a769c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0xc3, &(0x7f0000000000)=""/195, 0x41100, 0x3}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r2, &(0x7f0000000480), 0x100000000000021c, 0xf0ffffff7f0000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffffffffffe) 15:07:44 executing program 2: shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x4000) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3ff, 0x202001) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000001680)={0x0, 0x1c, &(0x7f0000005dc0)=[@in6={0xa, 0x0, 0x0, @loopback, 0x1}]}, &(0x7f00000016c0)=0x10) recvfrom$unix(r0, &(0x7f00000001c0)=""/170, 0xaa, 0x20, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000002b40)={0x0, 0xfffffffffffffffc}, &(0x7f0000002b80)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000002bc0)={0x2, [0x0, 0x0]}, &(0x7f0000002c00)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000005540)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000005600)=0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000005780)={0x0, 0x3}, &(0x7f00000057c0)=0x8) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f00000058c0)={0x7, 0x9}) accept$packet(0xffffffffffffffff, &(0x7f000000ae80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f000000aec0)=0x14) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000001640), 0x4000) close(0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x10009) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e24}], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 15:07:44 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f000e001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:44 executing program 4: delete_module(&(0x7f0000000000)='-ppp1\x00', 0x800) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x35, 0x2000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0xb8, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x40, @remote, 0x4}, @in6={0xa, 0x4e22, 0x7fffffff, @remote, 0x3ff}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x4}, @in6={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xe}}, 0x7}, @in6={0xa, 0x4e22, 0x18, @remote, 0xa8}, @in6={0xa, 0x4e21, 0x500000000000000, @local, 0xfffffffffffffff9}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x1ab, 0x8001, 0x8, 0x100, 0x9, 0x8000, 0x8, 0x4, r1}, &(0x7f0000000200)=0x20) syz_mount_image$nfs4(&(0x7f0000000240)='nfs4\x00', &(0x7f0000000280)='./file0\x00', 0x2, 0x8, &(0x7f0000001780)=[{&(0x7f00000002c0)="132f3b4e561e79b3d96044bd2603aec921a97fea82bfd3f1995ae1f9fcf2cd68884e63502f3dcd8454742ec294ed69d1151a9b57c22f760f3faab295df2e536ba99d7171c7221f32c8989610bbfc3723b88a227481e1f462494bab6eeecb4320819868c3f729cd547ac5f0fcdcf38c5f6555232f9a79cdaf9d10971ad17d0803c539b4ed35d2fdcfde0904369ed71c2624c8ac04eba56600baaf6b4e626fcbfe8ceec31934cdfb596b23036817b0fbe5382084160f07", 0xb6, 0x1}, {&(0x7f0000000380)="60f9e461fd7baa304844f911bf8cd1ebb680a55ab089ce07d01f7d3eba6cc3680f6698109ac2036b71d87916528b1415d79623a7c6b64ba0251d", 0x3a, 0x3}, {&(0x7f00000003c0)="ea155c99ec3fadd51dacc5605dd3d83bacf4766db76d83515955b8fae3c35ce1d2d4a906805f4023c6a2bf3e066970c2d10dc719dc3249d17245219b2b02039692de1aa4694e1de9583220639747732e20a0cd5c50b8a65cca55c120faa76ac4b65d4f98f4cea6a3e19e9dd0bdfe37fc457cc5defb028b16a5bd443d7dc93cd991593b9fd618b6df906cb8a3fac1e90793db39500a2b1ce0b4380b3304ee2f6f7af726ca92e96b8e873cf37e51eb652269e8adf4b944ddff308a956fd20ebfd5b674b65954b2e1f487de41b45c6f0d9765c9c0e65c99d9a0a98eb0b165f83bee", 0xe0, 0x100000001}, {&(0x7f00000004c0)="c9b83229982265c0395596b333de5b5bfc5186491621370f3e9046350061e610a36fc33109e5063cbcffc3d7d33b97270e372c58b356a02074238b09b31f25f0f0d220aea67cdfef5245292689364af02c73e5b00f9d38fe74246d331d5762d3379032dfdc4c659baafdd3b3ce37c579176923974218c4e433cf09aba6d71f10a3b606de21ab198ed706cf82768e79957bf97fcab9f10464cdca282f2a40589bf93273ff12b6a6aba674d7f698482deecf176a38d9f03c733c79abc1d14d3c127cd0a244bfea", 0xc6, 0x1}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="60758dcbdf1164835173276ff65f", 0xe, 0x8d}, {&(0x7f0000001600)="187bff95ac117c7e0011d38170843f0ab847922f8f5953cdd0b9f2fea7db35ce157bb25e77e7bca121f8c66db7b6dbd408e9e9b655e7614b966da108409b1915a643aa05da8e7c72b8caee71947a874b4adf0ec44af2dfeea5203572c514de23c3e9fbd1df6ea127b5aba93c0ce9e34c7faf506434a4b430d752db49dbad5a6bb3ec81078b6f9fa252db1260ceada35e4ce519e9d5eb59077a07bf25f591e39903caaea0f8ee70d5265e873213ad96412b2c571d69c92e52474fafea2d03ea877b83635686718ad216e66e1f6f8b617d40d8d17fd37e7a4117ffd0e0cac5b60647a11bd259b87d8f56c73479dfa49f6d879e232e", 0xf4, 0x8}, {&(0x7f0000001700)="3a36d422aec2cea2173a0c6447e0ab7b1fee71d9b57ae003321e610882ab6465e5bdbc621432f758b3f14b3a737b7e065e2b121ad7fc01a6702fe9f69694886699923c4ea69c8267cfa47d18c469c5ce2724faef4fad9c", 0x57, 0x2}], 0x100000, &(0x7f0000001840)='wlan1vmnet1\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001880)={r1, 0x80, 0xffff, 0x9d, 0x3, 0x5}, 0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000018c0)={r2, 0x5, 0x0, 0xebfe}, 0x10) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000001900)={'mangle\x00'}, &(0x7f0000001980)=0x54) r3 = getpid() sched_getparam(r3, &(0x7f00000019c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000001a00)={r2, 0x96}, &(0x7f0000001a40)=0x8) sched_setaffinity(r3, 0x8, &(0x7f0000001a80)=0x100) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000001ac0)={{0x9, 0x7}, 'port0\x00', 0x1, 0x62, 0x4, 0x4, 0x5d5, 0xffffffffffff8000, 0x445, 0x0, 0x7, 0x3}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000001b80)={0x88, 0x80000000, 0x6a2f5fbd, 0x2, 0x4, 0xe6c, 0x7fffffff, 0x1f, 0x200, 0x5, 0x100000000, 0xc03}) connect$inet6(r0, &(0x7f0000001bc0)={0xa, 0x4e23, 0x8000, @local, 0x6}, 0x1c) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000001c00)=""/27) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001c40)={r2, 0x6}, &(0x7f0000001c80)=0x8) process_vm_writev(r3, &(0x7f0000001fc0)=[{&(0x7f0000001cc0)=""/201, 0xc9}, {&(0x7f0000001dc0)=""/198, 0xc6}, {&(0x7f0000001ec0)=""/139, 0x8b}, {&(0x7f0000001f80)=""/50, 0x32}], 0x4, &(0x7f0000002140)=[{&(0x7f0000002000)=""/91, 0x5b}, {&(0x7f0000002080)=""/161, 0xa1}], 0x2, 0x0) clock_gettime(0x0, &(0x7f0000002180)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000021c0)={{0x6, 0x1, 0x4, 0x81, 'syz0\x00', 0x100}, 0x0, [0xff, 0x200, 0x3, 0x5, 0x190e4fc1, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x100000000, 0x3, 0xe2, 0x1, 0x40, 0x1, 0x4, 0x9, 0x8000, 0x3, 0xff, 0x4, 0x80, 0x4, 0xa99, 0x0, 0x3, 0x7, 0x7, 0x401, 0xffffffff, 0x20, 0xfff, 0x0, 0x2, 0x0, 0x401, 0x521, 0x401, 0x20, 0x1000, 0x1c0, 0x73281137, 0x5, 0xffffffff, 0x10000, 0x5, 0x7, 0x980, 0x2, 0x2, 0x8, 0x40, 0x9759, 0xffffffffffffb6bd, 0xf138, 0x7, 0xfffffffffffff529, 0x1ff, 0x10001, 0x2, 0x6, 0x1, 0x20, 0x8001, 0x8, 0x8, 0x8, 0x7, 0x7f, 0x6, 0xfffffffffffffff9, 0xfffffffffffffff9, 0x0, 0x0, 0x800, 0x10000, 0x101, 0x101, 0x8, 0x4, 0x8000, 0x10000, 0x9, 0x3, 0x80000001, 0x1000, 0x9, 0x9, 0x5, 0x8, 0x4, 0x1, 0x3, 0x7fff0000000, 0x8, 0xc66, 0x80000001, 0x6, 0x0, 0x7, 0x0, 0x7, 0x4, 0x8, 0x2, 0x100, 0x80000000, 0xfffffffffffffff9, 0x3ff, 0x5, 0xff, 0x9, 0x0, 0x8, 0x7, 0x8, 0x1, 0x8000000000000, 0x6, 0x0, 0x7fff, 0xbe, 0x5, 0x7, 0x4b1, 0x1, 0x4], {r5, r6+30000000}}) clock_gettime(0x0, &(0x7f0000002700)={0x0, 0x0}) ppoll(&(0x7f00000026c0)=[{r0, 0x1000}, {r0, 0x2}, {r0, 0x2}, {r0, 0x8036}, {r0, 0x5a0}], 0x5, &(0x7f0000002740)={r7, r8+10000000}, &(0x7f0000002780)={0x3}, 0x8) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000027c0)={0x9, 0x3, 0x1}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000038c0)={r0, &(0x7f0000002800)="4e4fb9895a29f97fc4af840caa50d99b6a8bbc4b57c24d56d54e9a6b366586fa75ef2462cf81d677415b820534579df321bd90410a04201900db0e0345941543f046c5b537390a2b32deaab7f180d017ee989bc37822efec7a2b6b424cfffcc8e362faf995b7db65f0105ef418014e34a8b328f597a21eda22f9d593764b08d7a748a19fc5d09f90d1ba98b644c597e64fddfeb9eae51edd", &(0x7f00000028c0)=""/4096}, 0x18) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000003900)={r4, 0x8}, &(0x7f0000003940)=0x8) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000003980)) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000039c0)=0x8000, 0x4) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000003a00), &(0x7f0000003a40)=0x4) open$dir(&(0x7f0000003a80)='./file0\x00', 0x88080, 0x90) fsetxattr$security_smack_entry(r0, &(0x7f0000003ac0)='security.SMACK64MMAP\x00', &(0x7f0000003b00)='user^[:systemG-\x00', 0x10, 0x3) 15:07:44 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000091e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001f40)={&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x5}, 0x10, &(0x7f0000000500), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="580000000000000014010000070000000000000000000000", @ANYPTR=&(0x7f0000001780)=ANY=[@ANYBLOB="e6ffffffffffffff"], @ANYPTR=&(0x7f00000017c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x58}, 0x0) 15:07:44 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00000d1e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:44 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) [ 419.066025] atomic_op 00000000ff126c23 conn xmit_atomic (null) [ 419.092786] atomic_op 00000000167d954d conn xmit_atomic (null) 15:07:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000f7ca5eb1", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}}}]}) 15:07:44 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f000b001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:44 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x8000000000, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000540)=""/66, &(0x7f00000006c0)=0x42) shmget$private(0x0, 0x4000, 0x54000020, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) dup2(r2, r1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x3f, 0x6, 0x3, 0x5, 0x0, 0x7, 0x0, 0xa, 0x3, 0xf5e, 0x40, 0x0, 0x123b7433, 0x0, 0x6, 0x2, 0x6, 0xeef, 0x100000000, 0x6, 0x5, 0x5, 0xa6, 0x71, 0x0, 0x1, 0x81, 0x100000001, 0xf1d, 0x183a27a7, 0x0, 0x3, 0x8000, 0x8001, 0xffffffff, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0x5}, 0x4002, 0x3, 0x5, 0x7, 0x6, 0x6, 0x4}, r3, 0x3, r0, 0xb) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="280000000498986059c900000000000000000000000000000000000000000000000000000000000000000000"], 0x28) 15:07:44 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f000d001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x6, 0x7f, 0x30, 0x5}, {0x9, 0x1, 0xffffffff, 0x4}, {0x40, 0x100000001, 0xe33, 0x100}]}, 0x10) [ 419.226159] binder: 20861:20862 got transaction with invalid data ptr [ 419.259667] binder: 20861:20862 transaction failed 29201/-14, size 24-8 line 2992 [ 419.312732] binder: 20861:20871 got transaction to invalid handle [ 419.365693] binder: 20861:20871 transaction failed 29201/-22, size 0-0 line 2834 [ 419.390543] binder_alloc: binder_alloc_mmap_handler: 20861 20001000-20004000 already mapped failed -16 [ 419.422725] binder: BINDER_SET_CONTEXT_MGR already set [ 419.436148] binder: 20861:20862 ioctl 40046207 0 returned -16 [ 419.442282] binder: 20861:20878 got transaction to invalid handle [ 419.442694] binder_alloc: 20861: binder_alloc_buf, no vma [ 419.460914] binder: 20861:20871 transaction failed 29189/-3, size 24-8 line 2973 [ 419.469242] binder: 20861:20878 transaction failed 29201/-22, size 0-0 line 2834 [ 419.478017] binder: undelivered TRANSACTION_ERROR: 29201 [ 419.483838] binder: undelivered TRANSACTION_ERROR: 29201 [ 419.496618] binder: undelivered TRANSACTION_ERROR: 29189 [ 419.509184] binder: undelivered TRANSACTION_ERROR: 29201 15:07:45 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x5, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702e6e65742f73797a3002", 0x1ff) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000380)) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000020ff0)=[{&(0x7f0000000240)="2f0000001c0005e7ffffff000d0000000210001f01000000ec0002c91300010000000900000000005867000043050b", 0x2f}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000006000)={0x11, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1262c999645919da9646af7ddb3945a9"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x8, &(0x7f0000002b40)=""/8, 0x40f00, 0x1, [], 0x0, 0xf}, 0x48) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000340)) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000300)=0x2ccc, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002b80)=0xffffffffffffffff, 0x11c) 15:07:45 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0014061e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:45 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = gettid() sched_getparam(r2, &(0x7f0000000200)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000600)={"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"}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000000c0)={0x7fffffff, 0x101, r2, 0x0, r5, 0x81, 0x5, 0x2}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000005c0)={0xfffffffffffffff7, 0x0, 0x100}) 15:07:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xffffffffffffff3f, 0x2d, 0x119, 0x0, 0x2000000, {0x3}}, 0x14}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000140)={0x4, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}}, 0x88) 15:07:45 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000f01e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:45 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0007001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:45 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000050d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x20000000, 0x4000000000003, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) timer_create(0x3, &(0x7f0000000200)={0x0, 0x3d, 0x0, @thr={&(0x7f00000000c0), &(0x7f0000000100)}}, &(0x7f0000000240)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000280)) 15:07:45 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0003001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:45 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0x51, 0x4) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2, r1}) fstat(r0, &(0x7f0000000200)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={0x0}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={r2}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="b955e2d915f3228b350c6649da7e2e0854b31527367e9c92012378cca8a82df11b"], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:07:45 executing program 0: r0 = userfaultfd(0x0) gettid() ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000569000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r0, 0x40000000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x28, 0x9b, 0x7, 0x20, 0xfffffffffffffff1}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e22, 0x0, @mcast1, 0x1}}, 0x8, 0xdf1}, &(0x7f0000000200)=0x90) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000d27000/0x1000)=nil, 0x1000}) 15:07:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000400)="153f6234488dd25d766070") syz_mount_image$xfs(&(0x7f0000000500)='xfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000840)={[{@inode64='inode64'}, {@swalloc='swalloc'}]}) r1 = socket$inet6(0xa, 0xb, 0x0) splice(r1, &(0x7f0000000000), r1, &(0x7f0000000040), 0x9753, 0x0) 15:07:45 executing program 5: r0 = userfaultfd(0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0xf22, 0x7, &(0x7f0000000440)=[{&(0x7f0000000100)="814dcdfc19d423c2ef061ea32f7a451a16c8bb47337d6622778c411fa188ed7a2355534fc8735f", 0x27, 0x2}, {&(0x7f0000000140)="8ce3e90d4c97bf07af4667c7c6df6118ccf65d45d1b3ad5b44caf8f3ff17e772e4d3ced3f6c7a467d3a8caa2daeef6ed4254f2da3e4a53bedbc677a949c84c93d443e855a2f914378483d36cd87ac6a51ed43747ee25c7e5fcd621e2feb590c5c751c8c4440133c76e69d23716f4c0", 0x6f, 0x8}, {&(0x7f00000001c0)="01b25219cc07bd49ba1d4dbeebcbba4052d13171cd1fce1b58a31250409aab563913571a39f38000a6fa7011bbe6b1cc4e68524ccf08892b5f464aa968ee28d26c126c6f55ebb5bf12310103167d71c412c5a13e8049cd594f7e1311ef18149d98e11a49f423ca602d742223eb5d7b9414e1a469bcbe9ce79b2087ba04f26b75e49e386e9018c928e8ed25f8157e98164cc9a7b9d2031beed433d5", 0x9b, 0xe7}, {&(0x7f0000000280)="74d029ccf1fb25ae68be2174ece7148c5041fe9fbb72b94b55a64cbc17c047fdc650aa7ceec65776097d0484a815b68a02e48edda2a9c36bda2cb752a5f9e19449d8c2b2230d5c1f024a68d9d30019fc771a6f70a6504c8e746e192b7d", 0x5d}, {&(0x7f0000000300)="eb8bcd3eba4e4981098b9e886b571e0d52c4ac87f90c3aee09c824fd7e24371d52a8ad8af412f8b4c56f00777b286d8deb8fc42eaae6ac5bafe8c4698e625c38dfa2459a8136966e3e7d008c827d2001a1cb1a79c57d61fcb9a1af6327f21b366c4fd0953d8720e27fe8f2b16ad13a0969e1c4666884", 0x76, 0x80000001}, {&(0x7f0000000380)="7289dfda27e07b09ead4cc4685671a49b9fb7409a22d382e04927a6a76f8b1747839ba9361", 0x25, 0x9}, {&(0x7f00000003c0)="cd41b613f56f7723a6fc35bb3b480fa904936ee42e19008cd01410ee80397de2be8907704b05dc417acc5dcdcdf708b90be31992004c2e8dad7827c4765a5540485c10", 0x43, 0x88}], 0x240000, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bind$vsock_dgram(r1, &(0x7f00000005c0)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xe}) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) open(&(0x7f0000000500)='./file0/file0\x00', 0x840, 0x40) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000540)) ioctl(r1, 0x3, &(0x7f0000000600)="96cc9440c6da1eee8a06447fbeb4cdea127cc2f50e73d97ea0112f69dd5af6d6022ba5ead2e104d9f37f4d1950db682c82e6feef0685b9d4894315084d76fc403c9c711dda5beafd781f209ffd41c934b8ebc0c50bc4f74ccc827ae4cff7fd5cba38f10b164069929a0e0477cad11ced7865c22f56804ea1ba91c27f86d21e71eb73d7523058382bd456f8647419979f") ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)) 15:07:45 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:45 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00000a1e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:45 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000230000006a0a00fe000000008500000017000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00'}, 0x48) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f00000000c0)={0x2, 0x5, 0x4, 0x800, 0xff, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0xc0, &(0x7f0000000100)="f3c214cfaedc432eef762cc9ecf3", &(0x7f0000000440)=""/192, 0xffffffff00001aa4}, 0x28) 15:07:45 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0006001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:45 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f000f001e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:45 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:45 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000031e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) [ 420.277623] XFS (loop2): Invalid superblock magic number 15:07:45 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x638, 0x2) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 15:07:45 executing program 4: syz_mount_image$jfs(&(0x7f0000000480)='jfs\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='uid=', @ANYRESHEX, @ANYBLOB="2c04"]) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:devlog_t:s0\x00', 0x1e, 0x3) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x101001, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x7fff}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e21, 0xc9b0, @local, 0x7}}, 0x6c8a9632, 0x8}, 0x90) mknod(&(0x7f00000000c0)='./file0\x00', 0xc001, 0x6) 15:07:45 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00000f1e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000280)=@vsock, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[]}, 0xc000) r2 = accept(r1, 0x0, &(0x7f0000000300)=0x74) clone(0x4004800, &(0x7f0000000080)="f514db92e884c360a575e35a97c6b61178b8b18dbb6a8b21faf8e15aff2bd2d19a504b3ca270a8f0724229faf42a5c3fec45ad706ac682f2d4a23c4e40e6dc06b5c712aca76ed3868977f0ced9e070cc1347522afb0070e760749f4ac02247eba122282f30b42d0bbe23", &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000340)="d303115482829b244c516c8d88989bac787a7384027d78ff55610a392a27ffe209a9ace069a59269d84fcd5202e5cd04b95156dd1a31d7361e5bf20365e9a7af439c0d9349854155529e2ddf4e2871b1ad3fb709d2db9d8706d3ac07d36c50faee05664d23a9dfde103ad14608a0b2a4bce7a786001f0726560a3ec682320fe5573d1ee1f8638693c14ea3e69f11e34f6f93e1a61800391df0eb6c7a2e265bdcdd5344eda00efb376aa4a04d8d1ebaf1a5549150ead03fcb7aa7c2883044bab9c474fe821ae666b5e036") recvfrom$llc(r2, &(0x7f0000000000)=""/121, 0x79, 0x0, 0x0, 0x0) 15:07:46 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:46 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'yam0\x00', 0x7fff}) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x9]}, 0x5c) r3 = msgget$private(0x0, 0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) r5 = getgid() fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000440)={{0x4, r4, r5, r6, r7, 0x60, 0x5}, 0x90b6, 0x8f, 0x3ff, 0x2, 0x10001, 0x3, r8, r9}) 15:07:46 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000021e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:46 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0), 0x0) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:46 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000800)}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)="8e9ac1c12aa685e9ce0d2b95240c625cf3b4f0386cc3033c4eecb3666534a8884f", 0x21}], 0x1, &(0x7f0000000780)=ANY=[]}, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000280)={r2, 0xa, &(0x7f0000000180)=[0x3, 0x4, 0xffff, 0xffffffffffff8000, 0x46, 0xa9, 0x7, 0x9, 0x6, 0x1], &(0x7f00000001c0)=[0x0, 0x401, 0xfff, 0xcb87, 0x7fffffff, 0x10000000000000], 0x15, 0x1, 0x3, &(0x7f0000000200)=[0x2], &(0x7f0000000240)=[0xb2, 0xffffffffffff7fff, 0x7ab, 0x3, 0x6604, 0xff]}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000002c0)={0x67, @local, 0x4e21, 0x3, 'lblcr\x00', 0x6, 0x2aa, 0x4c}, 0x2c) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x20000025dfdbfc}, 0x9) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@int=0x6, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000580)='ip_vti0\x00') getgid() 15:07:46 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) r1 = open(&(0x7f0000000000)='./file0\x00', 0xf4727126f4de57b9, 0x144) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x3, 0x1, [0x2040]}, &(0x7f0000000080)=0xa) r3 = getpid() process_vm_writev(r3, &(0x7f0000000200)=[{&(0x7f0000000100)=""/242, 0xf2}], 0x1, &(0x7f0000001740)=[{&(0x7f0000000240)=""/213, 0xd5}, {&(0x7f0000000340)=""/123, 0x7b}, {&(0x7f00000003c0)=""/12, 0xc}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/202, 0xca}, {&(0x7f0000001580)=""/238, 0xee}, {&(0x7f0000001680)=""/137, 0x89}], 0x8, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000017c0)=r2, 0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000000c0)=r2, 0x4) socket$unix(0x1, 0x1, 0x0) 15:07:46 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00000d1e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x10001, 0x1}}, @IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x34}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000000)={@local, r1}, 0x14) 15:07:46 executing program 4: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000000040)=""/11, 0xb, 0x0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) sync_file_range(r2, 0x8, 0x3, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)={0x30000000}) shutdown(r0, 0x0) 15:07:46 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x10100, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendto(r0, &(0x7f00000001c0)="323b4cecd57e48476e8eed49fdc1d9c6c50a3bff8dff816de4deba509a126b04dd7e730b1067e0b96ad0a8e62f6a10814dd1b5d46f2added523808c62dd5bb2480130cf8105176f3f400fc7981b575968d16b43f680482316ec35079537c9a184d38c7a81a9b4a5c", 0x68, 0x20000800, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x4, 0x2, {0xa, 0x4e23, 0xfffffffffffffa21, @remote, 0x3f}}}, 0x80) r2 = socket$kcm(0x10, 0x7, 0x0) recvmsg$kcm(r2, &(0x7f0000002c00)={&(0x7f00000017c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000002b80)}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)=0x0) sched_setparam(r3, &(0x7f0000000140)=0x7) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0xfffffffffffffff9}], 0x1, &(0x7f0000002c40)=ANY=[]}, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f00000002c0)={0x6, 0x10000, 0x5}) recvmsg$kcm(r2, &(0x7f0000000780)={&(0x7f00000005c0)=@in6, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x2, &(0x7f0000000740)=""/21, 0x15}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0xa20, 0x4) 15:07:46 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0", 0x8) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:46 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(r0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x6) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r6 = accept(r4, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="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", 0xe00}], 0x1, &(0x7f0000000440), 0x0, 0x20000000}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0xfffffe1f) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r7 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x101, 0x40000) fcntl$getown(r1, 0x9) getgid() getpgid(0xffffffffffffffff) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f00000000c0)) fcntl$getownex(r2, 0x10, &(0x7f0000000840)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940), &(0x7f00000022c0)=0xc) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000002300)) fstat(r5, &(0x7f0000002340)) fcntl$getown(r2, 0x9) getgroups(0x3, &(0x7f00000023c0)=[0xee00, 0xee00, 0xffffffffffffffff]) getpgrp(0xffffffffffffffff) lstat(&(0x7f0000002400)='./file0\x00', &(0x7f0000002440)) getegid() ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000002500)) sendfile(r6, r3, &(0x7f0000000180), 0x10000014e) 15:07:46 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00000e1e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:46 executing program 0: perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0x4004550c, &(0x7f0000000000)) 15:07:46 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) fanotify_init(0x40, 0x1000) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000140)={0x100000000, 0x6, 0x1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x5101, &(0x7f0000000180)) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x7f, 0x20800) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x180010, r0, 0x0) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="67d33f36f33edec2f2ab0f20c06635000000200f22c06ff3f32e640f20d30f209a66b9da0900000f32d8cbbad104ed", 0x2f}], 0x1, 0x10, &(0x7f00000000c0)=[@cstype3={0x5, 0x5}, @dstype0={0x6, 0xc}], 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f00000001c0)) 15:07:46 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf", 0xc) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:46 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000140)=@gettaction={0x2c, 0x32, 0x301, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xb}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x2c}}, 0x0) 15:07:46 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000051e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:46 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000071e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:46 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd", 0xe) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:47 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x5, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x25}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x1, 0x5ed, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x2e, &(0x7f0000000080)="9220d6478fc6a67c975c69f8c328", &(0x7f00000000c0)=""/46, 0x8001}, 0x28) 15:07:47 executing program 0: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$VT_RESIZE(r1, 0x400442c8, &(0x7f0000000000)) 15:07:47 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00000c1e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0xfffffffffffffe14, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040), 0x204}, 0xfffffffffffffffd) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x2ce, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) 15:07:47 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b", 0xf) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:47 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000000f000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:47 executing program 0: clone(0x400a0802140, 0x0, 0xfffffffffffffffe, &(0x7f0000000400), 0xffffffffffffffff) r0 = getpid() r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000241}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x6) sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x8) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) write$FUSE_BMAP(r1, &(0x7f0000000280)={0x18, 0xfffffffffffffffe, 0x1, {0x814}}, 0x18) fsetxattr(r1, &(0x7f00000002c0)=@random={'trusted.', 'mime_typemd5sumposix_acl_access]\x00'}, &(0x7f0000000300)="5da95c2347504c2f73656c66277d70707030276e6f646576776c616e305b00", 0x1f, 0x1) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000340), 0x4) bpf$MAP_CREATE(0x700, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) 15:07:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80006, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r1 = gettid() getsockopt$inet_tcp_buf(r0, 0x6, 0x1e, &(0x7f0000000240)=""/194, &(0x7f0000000000)=0xc2) r2 = socket(0x13, 0x1, 0x401) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="06000000c078918a5692137a59c300", @ANYRES16=r3, @ANYBLOB="000228bd7000fddbdf250a0000001c000300080007004e21000008000500e0000002080007004e2200001400020008000700ff07000008000b000a000000640001000c0007000100000002000000080001000a000000080004004e210000080009007e00000014000300fe80000000000000000000000000000a080006006e71000008000800070000000800090048000000080009005f000000080002002c000000"], 0xa8}, 0x1, 0x0, 0x0, 0x5}, 0x20000010) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140), 0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x7f}, &(0x7f0000000100)=0x98) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r1, 0x1004000000016) 15:07:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x118) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x457d10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @multicast1, 0x0, 0x0, 'wlc\x00'}, 0xffffffa6) close(r0) r1 = memfd_create(&(0x7f0000000040)='wlc\x00', 0x1) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000140)={0x1}) 15:07:47 executing program 0: add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)='x', 0x1, 0xfffffffffffffffb) socket$inet6_tcp(0xa, 0x1, 0x0) 15:07:47 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00000067000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:47 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:47 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000020c0), 0x1000) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f0000000540)=""/162, 0x44) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, 0x2}, 0x10) 15:07:47 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00000a1e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:47 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:47 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000000)) 15:07:47 executing program 4: socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f00000001c0)=0x80) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_dellink={0x28, 0x11, 0x3, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4}]}]}, 0x28}}, 0x0) 15:07:47 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000091e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:47 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000041e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:47 executing program 2: r0 = socket$inet6(0xa, 0x1ffdfffffffe, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x3) io_setup(0x7f, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000900)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000380)}]) 15:07:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x101, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0x1c}]}]}, 0x28}}, 0x0) r1 = semget$private(0x0, 0x3, 0x100) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000040)=0x8) 15:07:47 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:47 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00000b1e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:47 executing program 4: socketpair$inet(0x2, 0x5, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0xffffffffffffff36) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'tunl0\x00', {0x2, 0x4e21, @broadcast}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x16, 0xc4}) madvise(&(0x7f0000b26000/0x4000)=nil, 0x4000, 0x1b) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:07:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x400000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8040, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xd2) r2 = dup(r0) ioctl$NBD_CLEAR_QUE(r2, 0xab05) 15:07:48 executing program 2: r0 = socket(0x9, 0xffffffffffffffff, 0x3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = dup3(r0, r0, 0x80000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)) fcntl$setlease(r0, 0x400, 0xffffffffffbffffd) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB="01000080000080ff5c8baa63000000080000000000000300", @ANYRES32=r0, @ANYBLOB="000000006933ffffffffffff00000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000020000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="000000001b0700000000000000000000000000000000000000000000"]) 15:07:48 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000061e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400), 0x50) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) 15:07:48 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9c5, 0x40040) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={r1, 0x0, 0x1, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) setsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r0, &(0x7f0000000b40)="ac", 0x1, 0x0, &(0x7f0000000b00)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), 0x14) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000340)={0x6, 0x2, 0x1, 0x0, 0xd}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x3, 0x1, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}, 0x20) recvmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000001d80)=@hci, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1}}], 0x1, 0x2, 0x0) 15:07:48 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xf63c, 0x400) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) close(r1) 15:07:48 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000031e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:48 executing program 2: r0 = memfd_create(&(0x7f0000000080), 0x0) write(r0, &(0x7f0000000100)="0795040000000029a7263fb614", 0xd) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000480)=""/240) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7, 0x181900) r1 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) clock_settime(0x0, &(0x7f0000000000)={0x0, 0x1c9c380}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@dellink={0x4c, 0x11, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x0, 0x4200}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_QUERIER_INTVL={0x8, 0x20, 0x9b81}]}}}, @IFLA_PROTO_DOWN={0x8, 0x27, 0x8}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x10000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x80) 15:07:48 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:48 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x800000000000008) ioctl(r0, 0x8912, &(0x7f00000000c0)="15bf6234488dd25d726070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, {0x7, 0x101, 0x8, 0xfff, 0x0, 0x5}}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000002c0)={@mcast1, r2}, 0x14) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000040)}], 0x492496e, 0x0) 15:07:48 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00000f1e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:48 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1, 0x400) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r2, 0xf}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000540)=@delpolicy={0x50, 0x14, 0x101, 0x0, 0x0, {{@in=@dev, @in=@local}, 0x0, 0x3}}, 0x50}, 0x8}, 0x0) 15:07:48 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x6, 0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000001c0)={r1, 0x1}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x1, 0x0, &(0x7f0000003280)) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat\x00') preadv(r4, &(0x7f00000017c0), 0x1c4, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f00000000c0)={0x7, 0x8}) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000240)={r1, 0x3}) 15:07:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x6a, 0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xff, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000240), 0x0, 0x0) 15:07:48 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000081e000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) [ 422.827088] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 422.837493] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 15:07:48 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000000000000000001800000002030000002000000000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e00000010000000000000006"], 0x80}}, 0x0) 15:07:48 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680)}}], 0x1, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:48 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00000067000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:48 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000000), 0x1000000000000236, &(0x7f0000000100)}, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in6, @in=@rand_addr=0x100000000, 0x4e23, 0x5, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x67, r2, r3}, {0x0, 0x8001, 0x5, 0x0, 0xffffffff, 0x7, 0x2, 0x5}, {0xfffffffffffffffa, 0x0, 0x3, 0x9}, 0xf47, 0x6e6bb0, 0x1, 0x1, 0x2, 0x3}, {{@in6, 0x4d2, 0x2b}, 0xa, @in6=@ipv4={[], [], @loopback}, 0x3507, 0x3, 0x3, 0x5, 0x7, 0x3, 0x8}}, 0xe8) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0xffffffffffffff35) getdents(r4, &(0x7f0000000040)=""/46, 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000000)=0x3, 0x4) 15:07:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) keyctl$join(0x1, &(0x7f0000000280)={'syz'}) close(0xffffffffffffffff) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000200), &(0x7f00000000c0)=0xc) 15:07:48 executing program 5: mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/82) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8400, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000300)={0x0, 0x7, 0x2, 0x400}) r1 = socket$inet6(0xa, 0x8000a, 0x800000000000005) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x100, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000240)={0x2, 0x5}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x1000000, 0x4) clock_settime(0x0, &(0x7f0000000180)={0x77359400}) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x31, &(0x7f0000000100), &(0x7f0000000000)=0xfffffffffffffdcc) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f00000001c0)) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x101}, 0x4) 15:07:48 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000000f000ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 15:07:48 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680)}}], 0x1, 0x0, 0x0) tkill(r0, 0x1000000000016) 15:07:48 executing program 4: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)="6367726f757001", 0x0, &(0x7f0000000140)="70f8") openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) 03:33:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) io_setup(0x8, &(0x7f0000000040)=0x0) socket$inet6(0xa, 0x4, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_virtio(&(0x7f0000000080)='%eth0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1807000, &(0x7f0000000240)={'trans=virtio,', {[{@cache_none='cache=none'}, {@afid={'afid', 0x3d, 0xff}}, {@noextend='noextend'}, {@aname={'aname', 0x3d, '/dev/ppp\x00'}}, {@msize={'msize'}}, {@cache_loose='cache=loose'}, {@access_client='access=client'}, {@version_L='version=9p2000.L'}, {@version_L='version=9p2000.L'}], [{@seclabel='seclabel'}, {@smackfsdef={'smackfsdef', 0x3d, "5b5c776c616e30706f7369785f61636c5f6163636573732989282b707070302c747275737465642e707070315b5e"}}, {@pcr={'pcr', 0x3d, 0x11}}]}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r2, 0x0, &(0x7f0000002640)) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 03:33:20 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e0a0ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 03:33:20 executing program 0: syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)=""/141, &(0x7f00000000c0)=0x8d) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)}) clone(0x12800, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b35, &(0x7f00000002c0)) 03:33:20 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x402000, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x1f}, 0x2}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={r1, 0x7f}, &(0x7f0000000340)=0x8) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r2, 0x7fff, 0x10}, &(0x7f00000001c0)=0xc) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={r3, 0x7f}, 0x8) 03:33:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x3ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1f, 0x8000b, 0x7fffffff, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000080), 0x4) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) 03:33:20 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680)}}], 0x1, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:20 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e030ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 03:33:20 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(r0) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r1, 0x4, 0x4800) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xffffffffffffff58) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000740)=@ll={0x11, 0x1d, 0x0, 0x1, 0x7}, 0x80, &(0x7f00000008c0), 0x0, 0x0, 0x0, 0x20008014}, 0x2}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x6) setsockopt(r3, 0x109, 0x800000000d, &(0x7f0000000180)="03", 0x1) getsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f00000004c0)=""/130, &(0x7f00000000c0)=0xffab) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x10) r4 = accept(r0, 0x0, &(0x7f0000000080)=0x8) sendmsg$alg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="3cf5048e7163ea27da961b58abc6fdd726a3e3c95cad1de31c363355c8e1713e51fe7f59651cc3ac45abe4d057f5137c675ed1994a77351dee893cd34df281c9a23f002a9478039ed67f7b156245f27916f826813ec250d85c0192c16f21dd81efe95b0b969ce99dbf198ee2555098027269016440658583e3662d46fe23e2f3d45c0bc9e61731c225d30af8b12b7608313d88f7a0bdcc6fbdb3c103d6c7ecb56197a96d2c5bdeb8105bab16f495a2016c4eac846d256f43ecfe3604edd6e6c3166a78125ac00878f6e74eebf28e9f31e2eea3ae45c16456ddee6203708bad5a11d90a06dad500942c3c7de6c7e2e6ea754ffce452d745214d4e010f4be714a9ece73e14d28ed7cf52fcebaf48deff2638488d1eddcbdc9aea0d5750bc0b88a8ee86f08747e8817fd62d0c5dccd4006c529949725bbfcca2686601f5d220eb6312ee9b5a4550ad2b7e635cc741cf3981965a252825924fd94f0f0f187653512e74217df2d079465950ab782c00861fd93814a32b59cb33213e2e12f790a331a8cc402208b9da2079efa3e880f69c2836b713245e3c4d0aa7c241469ae701e88c3db83f24a7fe1af322f8821fb3fec1497fb9c6f1ea1c0732d8d9f7c6e1e671a7f4eecc4391bb1d4cbaed353d3e56d6ffd2f21b8bc5368bb85ec382ce13f92aa9f1b242a19db0ce84c822a246a949156187fe0176c3d58f8e012aa17fa0988cbcd85e8d928a3f491e81e2f943f2dad5c1f5c9a7890bf05d78a2be476c52aa75569f28c1144a7bac3465cba51b81b034fca3a9034c64ded7615e8a3a0712c45e0eb0f936ea6bbe35deae994ca8a5e48d74520900e295e55af7c5f893249a230a76779ae8978b10ba296f6a68bbdf732b77d258ebda9fed5d628f8401400e72c471d8b76e08471c7778cc22ff69eca42099069eda6d80eff70e032c7735727866ca75b83db9d740ece0263d56a9dfda7bff84643a7de6f7d677f5b5baf1409080b132dac45d8dd4b9c64b66bc4d177ae8e311f6520ca8173e01b3e8343461214aaa5cddbc01a3f6f9b18c68bb33f98a025ce67aaae25e69208b378925780d96fe76f8306b2dd1a28ea0eaad4095144399f80a85e2fbb8f982361cb7e7e61ad89deb2c6ddc014a14685360f1aa39fbf2dc574543d606d6afd18922c8cf16a62e0a45d6adafde216473039edc7001e9f8aed45eaddd89c2b1df832dafa9988fba8e795c911ed2706db4adf3b1a7db02994a43be04b9c66268aba436c6ba24c6671b19fec3e032c2216d33909ce1cd140fde160a222acac813bfdfdecd18d289d8073287a2f920bd2e1a75725ff4b805acf9fc249be0634c26193bf03555ccfc3008ef2001570bf72d5127236de2bb776069b9c5d6051e28c0f5f7f55d5e4cf04822b52434ff0ce7c9912ea49b692bd1895701be813cf94fad9dbbf3d303a234e2164014259e51e1795d4383baa8d977cfe07e2fbf215549d9d4667ae273227b85ea8de7d7c874b6d5463d2451f4253df0d86fde47f8a138d6cdc616e2bfbd32269bcd0a87e473b7a4349aacc40e795fbc909143d72472b4b1f3742e3f5b119a75b48632eb3f67c90bcf606526f39b72647c8343031b29c2cde6576c3a1dfa8677efea6c7f1904410f9c1170dce23bd4fb64bec2010f44109a83cbbdcaa3f391731e8e0f410c9588fef26e792b76beb6174d5a3b87848f051825e06d06838edc102271970d326c74065089a658f0354027a8da470bdcf7f9548fe1ab24adf12d3bd1427134de4c3aa039c11af4c74bf111e12953ffa17ffbded8945b1cd1dba33753cdb9fc3a14393b8ec4f8497ce27cafe19ba44fa38549b8f052f83dace969f7801358f41caf2a02a01fcd362f8a9c6469fb843ae4718cf5d7f92558865546879b344d9a489c983187592fd116b94835828247b46a43ddd8306c23d23c1b0f5e3388c1af04f5144252dd216fd56f54336ebf0c15e6f7614c42eb184c0d0e741050a8f01f05663e2b214649167419ec62cf342d4286f0b31398bfd93ff2896ade403a6b72e031a9839d21a82ecc8cec3f477c3cedcacf466881201d22c305794491a9ec595af5fcbac6189114e285282753e17651d395d51fab8750607db79c5b41a69d273d9f186688207e8cf1c2000b52db649bfea760fa80178f33c65123f84369cb4c1f5ead16544af44fd5d7889d347868995f873b53777ff94e167813859f019cfb5a9bb29bdf14bfdbf82349d2b146e95e1245701ffa957d2b8320d3bf198e2f8346cb3a1d237c958f8357df9e8859b68a94974a36ed7b2c32744b9b5e7597a7e5064bbd3a1bb326ccabb4ebefdd6348e3054dcfe9a8ccbf959151f43fc15697d4899dcda889663d0d724afe4c802ff0e9c13d3c0bf2372909d4a640882fd9bc12b63d94e7ad4583e8b95245fa7084118fe594e39cf8cb61033f6602a1c679687b5594db16c9e74611be366af5c8d4ad07831dc3e2123253af0f68fd1711bf608f5515a471301b64329c51b2011a03a8ad6c4e399b3245eb218083351e9a621d713187a65368f94205f17d6870527ff14fdc2577d2f6c15077deb2e7ab0ecc869a05d48d8cdc1dd7ea8456a0bb60e70d78f253ef417d8a386dcc255f1b14227ac7ab4de5a9e0158945767431b5e86c8dd00342aa12b27f98676a278f326b4256f19ecdd3d8fae6c4a815f1fb7df919e74b6a5003ae8d14f1d2b614ac6b02355765922f506f097602ee202eb55e3b45907b461692a4a1afbec463b9d19a81cdc93885596ec465220840c21cdbc30a778e26569416c454d117c003c8b0788332341685fad7357a1a3a3672949a7161d28f4f73b7e01d01e133541f3246bb9eb8f4b26dc149e4295b49c7c8fbcacd4c3e02e77f08283d310a5b56bc0630f33b857589de15d2d6bdda73b7ae6dc37d9bd64fe84178f02873861b060b6ac2f91a3ed84c44d8e03deb87d632fd06d93b8c841d5a2fdaf338142d7e54a120b2e162fe0e4b170bb97762fb172a30cc31b1f679be796f0b4865c0704850969a6c741eb3b9ad2fb059fe5da6cf6d3ef3c4c4aad4dbb578da214a57f334db2128769a7f961542e61cece3c24cefe9f6ffe75db1ec936aaa034e4a0486a1850ff4edceed6ac9d6468033b620373e421b42575af337585ed0d08f5b3f91557c8b5e7b515bb15c957213ce31787a9ec274eeb88ddbcc15396355e37f0239b0cc8867d35bc7f8a719ec415f69833feea59e1d7ec6ea8ea2b5efaacd3b1b53651e6e0983faa60950b92514f0d582b4f214a80101a0784d155b1dc2b2cba21fddb31eb10e8af70352a47c1c8eb90fba97d93d75608acdc8465c6907bbf36f3f36e59bfb1eeafbed14726fd34c2354785f1aa65422cce50bac7a9a51a7ecbd4d1d97ae65ebcc1414eaf000165fb15e037539cdfe0bbff3100395d2a6834fbfae1dad1f269ed290316ee18a0666fe682fdeb832c2e4d7818c0f0896d55e696dfababb0f561afc802cb43fb88fac2f5f8ecc18fa40a9d53b7a3bcc19f193e535b89ea96aab74c39c4928f72ba3a88941043a6a6e87db746b42fcc7e575c25c45694d54d6205abbc33331a869b4c4ecf50528d0fa3dc50ea15873ed2f7ee500194203525f70b70094b4c7280e5e6e325d2493273b4acc8d71352fa64d3bd944a79975f5dd597a85d2ad639b55f5f72ce6dd554f48b9236f5d8652c65b5c3a909b420eb60b8330fe43c17ab31eb2ebe54fb906ffe166c86b29fed4947a97117d2eafce1b20d6485d525b948a906c2864c63005cc0571e386a263fc2b68f03ed2377a0a81a48ff726fecc5c476eb3e36fd796e11bb4f8612b57ad8b9ebc7d3e7a2be68380d9e4a447d590d82713504dc0658525ea88400811753fa6234a01f46d9fa7df62b266b5c889f5286b7c72eff18b0425dd9c2e6f1f9778ffa1d14ceeff7d76e05c93e5215a0b8084e2e4d25984a835534453bd7e0ca7579edbabb8fec973978b37c4e70cb2796a2fba6e6235063857851f94b7cbab38ec1297f89dbaaec4b3a11f86b69b273fcecaa1ba1c6c52bf455be9e495e75651e8e6c7f03874f96596a9deb61c14eb68049f3f07bac5becf8ae8add48a4a1b8ce5776a5debee0738b4d7750865606e747ab7f9a86b6d933220c4771d2277c1ab68b6b24d4238ca83a3e4247d13fcda8af5087848f7aa4d8ccf5347f7041ac5ee4429c64f2aa653ae0e7b7c16d2e35d186b20fa7109a193f38a002ad5fbb18a52810b7278ba3c0a0d831dd350730c1c255f2fa639aab2537115e1ac60be26a9d88c8bfa1100c2ae9fa9b245033b010050065a89a7384a572f5b2f121e77bca3e71a881ab8433bc77f63f0629a6eb9ff395b96576a57e75e583fb085786ebd482db53648ab02486abfd600efca097a68f561e43d3ba027fcb2fe1d0fa6612b066a3c95b0177c78b2bb0c99310a3f51ab8a8290507bb5256afe8e67a31b7c2bb643dbf2cfbeedbbde00d3dc481d8c8bdfcf540e85c9cc1d4c2bccdb13bfd5f3d2a4a320043582af152ca716a1d097a7496e0e040ba7446e1ea8d9f22cdda1835960ddbc64d4828745909b865fcb28025d8769f847783b10f50db50e5de2de3e0c5bedff9b928387cf43c1a621001d5903e5e60c9bdfa01f023b134f224533faaf7f218b9797787ceacd7b96853c58e4247634d4faadf56f9a4480c4673d656758aedca41707e6b3753db3db09f7c3be9233bf429c6a0603a14ca44d78a3a3802e3edf7fe1595fc5870637a262eb2e36473e5520b3ba9af4d46fe5b49d1e3a2812e1f502b58a2aa0a472925ab1f4c8bc3687ef1f7a82700021e70f50edef894bf902285e3c087a7f980289c62c8b282fa52072966131f3f3f33686f270ffe938c3cce1eb0623837ae1ffcceb62c95bfc33a06e45db21a2d46e5a8891fa37b8edf93255d6f4441c3ed4b551b7a949f28cec5e001cc31f9a4057cf79485bea15438f42fed35633674249a9e52b17c2434db28612e7a8060016baef0739c34478df046c9c9959de176ba3a52037cc36410d84a5889ad48e42c509ba21c38d8a561ed2689ffa232554491ea9c0fddb3920c37fc4ced61621a879a6003eddb104a84d11143e31ba57a611112469789eecb0bfa58e6d86b98b0cb2369de8e4032112d70ed3c95032b37d49947d222ab8d91f3a79183c7ea9edd581cf00a2a57928b06ba3511009d8bdbe378084d871eb5ca88885559980c994f0d8d8d8b20f3f9a49705d5a56ba42647a5db3ca3775bc7979512d24b01f27a74a7f2de01ddc92c4f562676f361f5c579954907bf4b99c3a8963777cc2a551aa69873d631cf5d32674a8cfc751cfdab1da79412aacc166e776f512e350849c2250b36e1585f8eaecb515f156a7171c2ab615436105a9095becc24e1370a7409e4c35137c984c146dba9a6e6261ec6e56168756a440818eb58db3a53b60e7735f354956d4b71ee0b9782d1e6dc36a6999a877bc67a75fdecf5eab32f721da105a76a94c24738bbdd2e6603fc71a051e3108f680b2346e215b05364e43a8c4fe2723178e154289681e4078e955bd53858fa04bbe82dcab9c3ce7439f6293ad74dec15f8425d251158edcd7c664d47ad9285978df107a15fb6dd090aeb37a0975dd584ecd987ed494f7a28c32222765aa5147eef2c03bced05a802ce9568fb0a1cd58ba3c9fcce1a925868265a0daffaecb2a0289c7294881fc5519c8425eb201cda5ceafc81c1cc04f2039c1f3cf57a7209d32b23a01e7c146e9e8b6609b8238beff2470cbf300e1c249e5f4a3e965ec5cdd21ea6434429606faa6f96e7e", 0x1000}], 0x1, &(0x7f0000000440), 0x0, 0x20000000}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000800)='tls\x00', 0xffffffffffffff6b) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0xf) r5 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x101, 0x40000) inotify_add_watch(r5, &(0x7f0000000440)='./file0\x00', 0x3ffffffc) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000400)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000100)='./file0\x00', r1}, 0x10) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) sendmmsg(r3, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000300)={0x400000, 0x40000}) 03:33:20 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x100, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @local}, 0x8, {0x2, 0x0, @rand_addr}, "0000000500000000723000"}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x8, {0x2, 0x0, @remote}}) timer_create(0x1, &(0x7f0000000000)={0x0, 0x1f, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}}, &(0x7f00000000c0)) 03:33:20 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e0c0ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 03:33:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4000000000000000, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x1, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000480)='/dev/dsp#\x00', 0x7ff, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f00000004c0)="990f20c06635080000000f22c0baa100b84200ef0f005433f4660f06a70f01d166b93502000066b80e00000066ba000000000f300f07", 0x36}], 0x1, 0xc, &(0x7f0000000640)=[@cstype3={0x5, 0x5}], 0x1) r3 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2002) getuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000440)='./file0\x00', r4, r5) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000580)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="2e2f6367726f75702e6370752f73797a31fe", 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4, 0x20}, &(0x7f0000000200)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000003c0), 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0xc0045878, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000080)) r7 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000140)={r7}) eventfd2(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000000c0)) 03:33:20 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680)}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000300)=""/73, 0x49}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:20 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000002c0)={r0}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000200)={0x7fff, 0x7d, 0xf8, 0x537a}, 0x10) fallocate(r0, 0x10, 0x0, 0x1000f2) r2 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x0) sendfile(r2, r2, &(0x7f0000d83ff8)=0x1200, 0x8000fffffffe) lsetxattr$security_evm(&(0x7f00000000c0)='.\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "b3bf888762d083d0587da93129fc1e0650523371"}, 0x15, 0x3) 03:33:20 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e0b0ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 03:33:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0xf601}, 0xc, &(0x7f0000000700)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400154c000000000000000000008000000000000000"], 0x1022e}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x800) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r0, &(0x7f0000000080)=@hci={0x1f, 0x0}, &(0x7f0000000000)=0x80) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 03:33:20 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680)}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000300)=""/73, 0x49}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:20 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000bf1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) [ 423.663426] kauditd_printk_skb: 227 callbacks suppressed [ 423.663440] audit: type=1800 audit(2000000000.450:468): pid=21362 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor2" name="bus" dev="sda1" ino=16595 res=0 03:33:20 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x800, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000180)=0x10) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) clone(0x8000000, &(0x7f00000001c0)="a16b5e7874ce533417191d4c583f292a98130ed0b80ce2", &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="a85197b95a0607a8ebc5c65ac150064a928d5f044dd47e66a3118d40cb267235751edaad39e721") setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000560], 0x7, &(0x7f0000000080), &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x1bd) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x7}, 0x7) 03:33:20 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r2 = geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000015c0)={{{@in=@multicast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f00000016c0)=0xe8) syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x5f, 0x7, &(0x7f0000001500)=[{&(0x7f0000000140)="aa3816eb1296ddb027b2494e775a42185781a9fbe45a810e4d7c5cea61fee72b21d8e5adb50621a2881a058b357e872ce95b3fa85d3852ed1ad009725b747a4d258c0da88b98f0a786eb8729b3cfdf8fe8569287211095dcaffb7a64e36243ec759c7fe71a517396e291bf41c052f19d8812ff3b3711cc6e2da24dc1fa55b382933c0a2be870c47d82c014b8a430b82e4b230d08598269ddb4167a054aaef5e36341a49de0c8119374831fea940917dea828a740e895c827a02c709f2c154e765695e38ad002c371a260063b16b5effcb6bf2447a83e7769607374", 0xdb, 0x5}, {&(0x7f00000002c0)="7612c640a97da846b644b7fdcf8dbef8026006c7d68a6d76f823c60363abe9319b980d3417b2ef472a34db18f3375934d650ef02d18884d03fe48b95efb5e54d5bb78c05ae3cca8c276bbfb78fb6483e8fe4184c7fa0c5a2e191dbdfad5f577ceedc17432f86a0b07b81c79e3cc12c9899814a0386f17e2675f33559e9b704", 0x7f, 0x27c4}, {&(0x7f0000000340)="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", 0x1000, 0x7fff}, {&(0x7f0000001340)="39412fd43ddc7297696c67ae31d2414890a6487c95b9b459bc7ed3d634be93262420763789825eff8ffe3c06bc4897ce14b949a99a6706b9c6307a894a7f8736d7002bdf47378be2482a257e3f", 0x4d, 0xffffffffffffff00}, {&(0x7f0000000240)="c07a2a6a87852a6684504481446a8fee1163e9e923f65e5e23014719927b40c5", 0x20, 0x7}, {&(0x7f00000013c0)="d382a5b24374cfbbb850083436daed1058d08c64b62f3135a4b79a402b68064b57f33d524b0982601a14482fe9807329310109aa87e7bcd7bc5863f6f8930eb5745b442bc590f8831098989082117b3ef48d2742300847a5c9dd318ca235805fa25f9deeff1fb74878f3c7778d28bf4ae2f02d398a7be0780ac08f39ded5761a185d055b1dc3bda939dc3a", 0x8b, 0x3}, {&(0x7f0000001480)="8136edef0803859d57b74257ac110ef2634f5c7274909a1b4ece62be9c0155b2034cb2cb0dc8f9a443f798ef2da4a621d3c39c03075c1ddfadb0f01ab10df953ee034d5373f3c9fff7e9620bd535cab88b9cc6becf469503fd11f44f1900def4fe6277bfa91a0ed17180f4db46dba6ec5c1bc2a5a1f0c803f0d1d15b2bf2fb8b", 0x80, 0x8}], 0x74ec725c03909d72, &(0x7f0000001700)={[{@balloc_noborder='block-allocator=noborder'}, {@replayonly='replayonly'}], [{@permit_directio='permit_directio'}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/midi#\x00'}}, {@smackfshat={'smackfshat', 0x3d, '+'}}, {@euid_eq={'euid', 0x3d, r2}}, {@appraise_type='appraise_type=imasig'}, {@appraise='appraise'}, {@fowner_eq={'fowner', 0x3d, r3}}]}) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x101, 0x0) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0), 0x4) 03:33:20 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e020ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 03:33:20 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680)}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000300)=""/73, 0x49}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:20 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e050ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) [ 423.900605] kernel msg: ebtables bug: please report to author: Wrong len argument 03:33:20 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) tkill(r0, 0x1004000000016) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3fb2, 0x4000) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x7, 0x3, 0x40, &(0x7f0000ffe000/0x2000)=nil, 0x6}) 03:33:20 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000240), &(0x7f00000000c0)=0x3) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) [ 424.000121] kernel msg: ebtables bug: please report to author: Wrong len argument [ 424.113365] audit: type=1800 audit(2000000000.900:469): pid=21372 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor2" name="bus" dev="sda1" ino=16595 res=0 03:33:20 executing program 2: r0 = memfd_create(&(0x7f0000000000)="0000000000001c0000004300000000", 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 03:33:20 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e080ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 03:33:20 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x71}], 0x1, &(0x7f0000000300)=""/73, 0x49}}], 0x1, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:20 executing program 5: perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x80000000000009, 0x7d) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000000140)) ptrace$getregset(0x4204, r0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=""/249, 0xf9}) write$cgroup_int(r1, &(0x7f0000000000), 0x12) r2 = getpgid(r0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="200000003701000009000000000000000900000000000000", @ANYRES32=r2, @ANYBLOB="582e6ac0"], 0x20) socket$inet_dccp(0x2, 0x6, 0x0) 03:33:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200200, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000280)={[], 0x7, 0x8, 0x0, 0x0, 0x1, 0xf000, 0x15004, [], 0x9}) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@shortname_win95='shortname=win95'}]}) [ 424.162192] syz-executor2 (21362) used greatest stack depth: 13120 bytes left [ 424.201835] FAT-fs (loop4): bogus number of reserved sectors 03:33:21 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e0d0ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 03:33:21 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x1) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x85a, 0x3, 0x7fffffff, 'queue0\x00', 0x200}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:33:21 executing program 5: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000640)={0x0, 0x0, 0x6, 0x0, [], [{0x9, 0x0, 0x1, 0x9a9, 0x3}, {0x9, 0x5, 0x7, 0x9, 0x1000, 0x6}], [[], [], [], [], [], []]}) r1 = syz_open_dev$amidi(&(0x7f0000000580)='/dev/amidi#\x00', 0xbf4d, 0x2b4500) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f00000005c0)=""/41) r2 = socket$inet_udp(0x2, 0x2, 0x0) write(r2, &(0x7f0000000500)="257a0bd2fbbf77f5bb4ff0b4a26811b3e0d44e38ae93cedb2c777e49fed792287f6371f0d7da6b1c5612a454d964b7365c2c91f4a9fc466fb645352f7e525dfb377f06196a96f87461b5af86eae8b47e9a17c9975b9137f8", 0x58) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x4100, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000180)={0x800, 0x100000001, 0x8, 0x0, 0x0, 0x3, 0x9, 0xfffffffffffffffc, 0x1, 0x7, 0xff, 0x612, 0x0, 0x8, 0x10000, 0x2, 0xffff, 0x3f9, 0x1}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="a29ab0893fde", [], {@ipv6={0x86dd, {0x0, 0x6, '?:T', 0x14, 0x6, 0x0, @remote, @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8}}}}}}}, &(0x7f00000004c0)={0x0, 0x4, [0x0, 0x6b8]}) r4 = memfd_create(&(0x7f0000000080)='wlan1posix_acl_access', 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000000c0)=0x6) ioctl$KVM_NMI(r4, 0xae9a) r5 = inotify_add_watch(r4, &(0x7f0000000100)='./file0\x00', 0x20) recvmsg$kcm(r3, &(0x7f0000000480)={&(0x7f00000001c0)=@l2, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/152, 0x98}, {&(0x7f0000000300)=""/50, 0x32}], 0x2, &(0x7f0000000380)=""/255, 0xff, 0x6}, 0x2000) inotify_rm_watch(r4, r5) [ 424.223467] FAT-fs (loop4): Can't find a valid FAT filesystem 03:33:21 executing program 2: r0 = socket$inet(0x2, 0x10000003, 0xfffffffeffffffff) stat(&(0x7f0000000080)="2e2f66696c6530000000000000000005b400", &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="a29b459c0a0fd964b9179c0431f6fa42f7f1e6be07348fdf2e3a5b7b884f60641d9d66c20fa78383ae0a800b6864945072249fa5a40a60d94572069435a5", 0x3e, 0xfffffffffffffff8) keyctl$get_persistent(0x16, r1, r2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) r3 = fcntl$dupfd(r0, 0x0, r0) syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x5, 0x100) sendmmsg$unix(r3, &(0x7f0000000540)=[{&(0x7f0000000000)=@file={0x0, "2e2f66696c6530000000000000000005b400"}, 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000480)}], 0x49249f6, 0x0) 03:33:21 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x71}], 0x1, &(0x7f0000000300)=""/73, 0x49}}], 0x1, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:21 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e060ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 03:33:21 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000005c0)='io.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20000, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@sha1={0x1, "77b6b089a93a3dfa8ded0b8bc9e51f41b7272f53"}, 0x15, 0x3) sendfile(r1, r2, 0x0, 0x6) [ 424.330526] FAT-fs (loop4): bogus number of reserved sectors [ 424.357029] FAT-fs (loop4): Can't find a valid FAT filesystem 03:33:21 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000005c0)={0x6, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x2d, &(0x7f0000000280)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') renameat(r2, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00') getuid() 03:33:21 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e070ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 03:33:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x100000}, 0x2c) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) getpeername$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) 03:33:21 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x71}], 0x1, &(0x7f0000000300)=""/73, 0x49}}], 0x1, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:21 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e0f0ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 03:33:21 executing program 4: openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x802, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@nfc, &(0x7f0000000200)=0x80, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0xfffffffffffffff9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f000075cf53), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) mmap(&(0x7f00000f2000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) iopl(0xa500) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)) recvfrom$packet(r1, &(0x7f00000000c0)=""/130, 0x82, 0x2100, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x28, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) dup(0xffffffffffffffff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x200000, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x161) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f00000001c0)={0x10000}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) 03:33:21 executing program 0: clock_getres(0x4000000000003, &(0x7f00000003c0)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x408100, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000002c0)={0xf9, 0x3ff, 0xd8d, 0xc3, 0xfffffffffffffff9, 0x8}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x9, @local}, {0xa, 0x4e21, 0x86, @local, 0xe1}, r1, 0x1}}, 0x48) times(&(0x7f0000000200)) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000001500)={0xa, 0x1, 0x951e, 0x8}, 0xa) r2 = memfd_create(&(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000001580)={0x12, 0x10, 0xfa00, {&(0x7f0000000280), r5, r3}}, 0x18) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000000c0)) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000080)=0x78) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000001540)=ANY=[@ANYBLOB="030000000080000000000000000000e0275800000000000104f1cf8491edde55bd050000000000007336"]) write$UHID_INPUT(r0, &(0x7f00000004c0)={0x8, "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", 0x1000}, 0x1006) syz_execute_func(&(0x7f0000000140)="428055a0876969ef69dc00d9f0008f00008020c421fa7fb432322333331837370f38211ac4c19086d9f28fc9410feefa4e2179fbe5e54175450f2e1ac4010d64ac1e5d31a3b766400f3a14150008000011f0802403088e9fa3a74b") setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x2, 0xfb, 0x7, 0x0, 0xffff, 0x200, 0xfae3, 0x61, 0x1, 0x4ad}, 0xb) 03:33:21 executing program 5: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0), 0x0, 0xfffffffffffffffd}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0xfe21, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000480)='/dev/input/mouse#\x00', 0x351, 0x6002) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000300)=0xb) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000007c0)="8a6f8adabb8ac7842ffea9c5c4d50b5a6395f3ee61801245e4137b2962e9657101e1b6123a0b77dc5006c6add83ffb9714dbecf6266722e3d1bf1774bb4eb793a8fbf718bf9afa27a9e7b2aea6d432a46b7d8d08a1fa4fef05f3d67dc5590b94c09a7f4773675c4afd63f2002a147dcce2dc1df5cd84bdef217787d1c3dc9b43f6238486731e07af3248911cc61a891205f10dacfc094cb238e37decd99cc1b0d4e416b722af442fd7ed7340d1fa291ca13f601a179370cfc44f6aa8ca27d21c2a0b386b5b66357459c63900634a71f4387d47db5a5ae11a82e0a8f2ce9f29501d144d97d3524b3337a29abb41eb17d0519fc46063d7e900") write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x4, 0xfa00, {0xffffffffffffffff, 0x5b9176a7}}, 0x380) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x4, 0x4, 0x4, 0x3f, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000600)={0xfffffffffffff800, 0x73e, 0xff}) chdir(&(0x7f00000002c0)='./file0/file0/file0\x00') clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = dup(0xffffffffffffffff) r4 = socket$inet_smc(0x2b, 0x1, 0x0) mlockall(0x0) listen(r4, 0x0) shutdown(r4, 0x0) ioctl$sock_SIOCOUTQNSD(r4, 0x541b, &(0x7f0000000040)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0xffffffffffffff7f, @local}, 0x10) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) getpid() ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000080)=0x100000000) 03:33:21 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$seccomp(0x16, 0x1, &(0x7f0000000280)={0x20000000000001c6, &(0x7f0000000180)}) 03:33:21 executing program 3: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(0x0, 0x1000000000016) 03:33:21 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e0e0ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 03:33:21 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f000000a000), &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x7, 0x80000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x1, 0x70, 0xfffffffffffffff8, 0x9, 0xfcd2, 0x8, 0x0, 0x0, 0x18082, 0xa, 0x20, 0x0, 0xa86, 0x5, 0x100000000, 0x0, 0x9, 0x6, 0x1, 0x2, 0x5, 0x2, 0xa5, 0x6, 0x0, 0x8, 0x737, 0x2a, 0x7, 0xcef7, 0x2, 0x9, 0x1, 0x9, 0x74, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffa, 0x4, @perf_config_ext={0x4}, 0x200, 0x2, 0x7, 0x4, 0x2, 0x7ff, 0x8}) chdir(&(0x7f0000000780)='./file0\x00') ioctl$int_out(r0, 0x5460, &(0x7f0000000080)) mkdir(&(0x7f00000004c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000000)='./control\x00', 0xa4000960) rename(&(0x7f0000000040)='./control\x00', &(0x7f00000000c0)='./file1\x00') read$FUSE(r1, &(0x7f00000007c0), 0x1000) 03:33:21 executing program 4: r0 = socket$inet6(0xa, 0x800, 0x800000080000001) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfbfff024}, {0x2, 0x0, 0x3ff}]}, 0x10) sendmmsg(r1, &(0x7f0000004500), 0x4000000000001b3, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x1000000002, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5c3}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/exec\x00') ioctl$RTC_AIE_OFF(r5, 0x7002) r6 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x5, 0x4000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000000)=""/182}) 03:33:21 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e090ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) [ 424.838832] audit: type=1326 audit(2000000001.630:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21498 comm="syz-executor2" exe="/root/syz-executor2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 03:33:21 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x100000000, 0x3e) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000000c0)={'team_sl)ve_1\x00\x00\x00#', {0x2, 0x4e22}}) syz_open_procfs(r0, &(0x7f0000000080)='..\x00') socket$bt_bnep(0x1f, 0x3, 0x4) 03:33:21 executing program 0: r0 = socket$kcm(0x11, 0x2, 0x300) r1 = socket$kcm(0x2, 0x400000805, 0x0) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="ff", 0x1}], 0x1, &(0x7f0000000600)}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) recvmsg(r0, &(0x7f000000c240)={&(0x7f000000b0c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f000000c140), 0x0, &(0x7f000000c180)=""/154, 0x9a}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f000000c280)=r3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={"6e720000000000004e97810000000200", 0x1}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x8302}) getpeername(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000180)=0x80) sendmsg$can_bcm(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x211, 0x3ff, {0x0, 0x7530}, {0x77359400}, {0x4, 0x4, 0x1, 0x3f}, 0x1, @canfd={{0x3, 0x3980, 0x5, 0x800}, 0x6, 0x0, 0x0, 0x0, "cc7ef531180fac74f92f6bb5da834b5b0490130560518d23f51faba3f1b2566905fbf94f9748fdbb54638e3a291e915c55227f5b54a96dd6862091baccd06f8f"}}, 0x80}, 0x1, 0x0, 0x0, 0x44010}, 0x40890) 03:33:21 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e040ff1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 03:33:21 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000bf1fff5ff0200000000000001005307a33d6c390836be381b", 0x1f) 03:33:21 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4}, 0xc) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) ptrace$pokeuser(0x6, r2, 0x7, 0x5) 03:33:21 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0300000000000001005307a33d6c390836be381b", 0x1f) 03:33:22 executing program 2: accept$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) r0 = socket$inet6(0xa, 0x3, 0x3c) sendmmsg(0xffffffffffffffff, &(0x7f0000003f80)=[{{&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)="1841eb92bb3a74181605fa6d3be7ca1cf8ae4d658f8224b824d756e78c1e9cc944341fc4527e9229a20046fbc95ff24ee4", 0x31}], 0x1, &(0x7f0000000580)}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40)}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="ffa4731fc72acb6473ee7590e08b333dfc5d0b63dd241b9a264f94d8db40b409980fbb46cbf5e8ddce2d5ff26e5c0efb5c040a8445a20d0e6ac1e77d024b0ec91082c885e2e417ada1aa8502c40c300bcbd288baab2d96537d0601533f08cefce8f776a720d903f8994c3d92da49a8a42e95103fc6b112f4acedf3efbebb2d72f8d62cb99e2fdc8ddb2289470d7cea4728376b735d22a251e002e006dd9960b5d32e3ad60c797c216813cc55d20f32d557087f4a4b07994e28ae27bfef733705b6838c8d78de00c7018d56851eac8d6e90bdacbc932233798174b00c8bd292", 0xdf}, {&(0x7f00000001c0)="57b0080a0c0db6c7497839cccd63bfa4e1b70433c4ff09f064c1725e7d885cc1de0d988fd5822abe9e7bc364cb70ac1d2206ba", 0x33}, {&(0x7f0000000200)="02dbaaabfd43ff46282f6de7b0d05a9743205413344e2279b7b1156f06547c4bae52fdb76f188d37f87a0a5ad77914ec47b8c88b", 0x34}], 0x3, &(0x7f0000000140)}}], 0x2, 0x0) 03:33:22 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0f00000000000001005307a33d6c390836be381b", 0x1f) 03:33:22 executing program 5: socket$netlink(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340), 0x12) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x3ff, 0x80000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)={0x48, @time, 0x1f, {0xd76c, 0x7}, 0xfffffffffffffff7, 0x2, 0x7}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000240)}}, &(0x7f00000002c0)) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000001540)=[{&(0x7f00000003c0)=""/182, 0xb6}], 0x1) r2 = gettid() ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0x8) tkill(r2, 0x15) 03:33:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) getpgid(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r2, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x8400, 0x4}) r3 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000100)=""/56) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000016c0)) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000580)={r1, 0x0, 0x9, 0xf758, 0x900000000000000}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000003080)=ANY=[@ANYBLOB="0400"], 0x1}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000140)) getdents64(r0, &(0x7f0000001700)=""/160, 0xa0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000280)={0x2, &(0x7f0000000440)=[{}, {}]}) write$binfmt_misc(0xffffffffffffff9c, &(0x7f00000005c0)=ANY=[@ANYBLOB="73797a30675693259bb724ba79e532a5326f466113487cd7b1ec1a4d62ce591798540b5a657ca8a9893e49dd9e91a921e4dbca0dd461a92572aa0bb0677cd5b801a22f7644d875824f2db9ee785c060ccbd168e0f89f383bdb04ef08d0c6504a659a34791a7a75544f57045dff6fd4c8adeae82e5850d4e7cc962a48af579067e8fa76491e83731aa483fa9c1d6de5e46ba44b048b89c7244c03f6b2583aa7577310281dde11e425b471b2ac8b6414c3cd4c35dc0d14e250bf13cc8986db6c11ebe1f71554d1217664844d234d0729fb13fd70fc8d2adda5033e22b05a8d650e261400641424808e04ca90078802ce01382b8a2e5b7d4c397525fa45cdd3570fc208ba7fe99ef8e9907ab6a315f4203d894956f06409c9467c415a51cbf8626babf6b3da1637bd108d18023251587a6d406b5cb7bf0ab7d6636a60b67f8266d6c6929db0e6676ad5e2833c72280397f3321e28be5afc318f881aaaa7c56e5d44217b5f3fc850602742e38294d44ebc82627446a8734ae62b2fd3a360628f82d928ff770b2377fc77d97eed944eaa50e0fe31f8319e8212ae44c21457f13fed41391511228aac1b81f01d73865240bee1297f4076c3a2f9ae5902c5be95d76fced3f7e656dc0e339a7d824dee1ddca34fd23b6ef09dac5459fe9ba88de83c6e1c01eaa3f5d1c6997ae57ce278cb23d0356b759471262feccfce612933da8b7f520c1a5324980ce12c2791525d2714d695f8a866300b816274924b9b02eb3f6d6816c37ca99ca2f62d1b64d26571b9ed59058e60db550435239229d6e0fb44709aea0bf40d82d5fc10675fb8881e6fd6efbfafd72d474329934d66ec2131d2c15b03f4ef8f14ee22cc46acd5248df8148fb368dd7288442711135c31e4622e6654d66ecfac251cf3706979b142f20bb167b5f30c4c6ccc9c6f22e42f5410236351822da83d09140561dcfdb18cb4f84cb813a1f50ac2c3e7f686e025444ca38a237c5df95bf139f748055e5fc42d6a9f1cb9bb263ea6b1f50031a7cbfc45ad438c4a48858d7411c7f8dcf937c5fbce20dac04def2f7f98eae67edc2e3ab3737b4446949273820a55a140810eb597ef4e4c9f41f761397a5da040f41ad8399425c176f0bdba022cf8c6f8df6fe80a143b816687bf0ad37947f96b3d142df3d7c8136d05f37500d59339ee22315ee2ca46a9c5743a4f8bcf0e713662a5865c757f98f77a2ec0cc3f2db90d030a0116510f4ba55ae45499de359f0ea1fda11def63bf856742f4a94554b529158f823ddc9ba7c033258eb7dcf257dac93030c458e177f953a4f3b3d7a27ef25f565858a7169670aaec023a3ba38d7c87a577fa113c6d3472e0bd5a22eb2ada0875fa920825ed98c3066ca5d864271ba9bfc154b044c81b31c74ab5a329ce7f1f3c19a7968e42be427a230f86bf0bbbf0502905e8105aefd2707adb9a1adb04f162807a7155a4c3860b55167cb8afa30640a48c06bd22448698d46f6d15da238de338b4dce4f7fde4e15a675686f762a16d572479303c6b097c91d06cf32d764eb6e050c30d3389027719a5eda4629b17560ce9611c53c41999d25c6cfb360388c0cd9b320a77405daa3a422eb4bf05a806f54183ba260e220380f68f0c5003e1066f5b0b48694ee64298f9df69e7dffff68bc7ad7786b2b440a864b3ed5ab693524ea09b48a126d180eb37dd6aefe5de81872a19031a8a603a01f15c08ea3951ab326f0fa1f0d511e468018233ff870bedd828f95dfc5b68702c899848cda0ccebb1cd0517f9bb287d331752124bb3af744c3c0be810706680843714e89c096c7d042152a123fbe4dd323ec391a0bc2935af240595d102bce1fc8e0ec4be0e02ca6e0e2c2377de6bc43f85656e4782ee8929e6f8692e408272556b2f4f62f0996769254553f08a5b38fc2abb527109a4896953cb0753c71b76f924fa8ee5e3aacdedfb38aebc94bb7ad24dba0d3b2b1d60f962c1f48168fe17ad673af5ad9f7491110a7c0420adce2cd7f93d89788e180efa46231fb66f415c436e8c185709105ed8550d573dfbed04cb77722523bc5c1aaec41f343f1b55914d2b649678f3efe097d93a64a8746fb4d3df26fb168b37f2c821d3ce275718058eae56375d15178e2ab5c4a01e2f81f727087cef2397d1fdb00aae7d114c601c310bb9d004aa0a07ccf453a159bb5c69babfdaa26523aee378165ebfd595dca2375429ed6ca93124c8b849f22e95092986d4f335e068cdc41f1e52f43fa8a5b57ae2ae34ed67bf0731bf743a2771baa581dc2b3a0a5340c26d51359f43c3fad51497449756636c2503dba970cbdad2708c76ddaa31eb244e5af4b95af2422d8fea40639530c80e5615d646b8f16549587f04ed32574e0dccb68a3ab8702a2a60fc43ed6bffc645f85fbd5357a8b9e65a013013eeb46f601c483a72601b5694bf603873a928ac7d29b5e1ce97759cc68fd47cdf249c21f9e5211b946073ca78f0aa63ec77fef792a64ed46a3c1c0e9ab1fe6d183d165d0ba255d82c4a53d2702a5bdbf5d6a6b6ea1f9d4c524fa3e2cd4b530e75a8b5e32b9132e5f76e2bb9f65d5a16c7c5dbb6cee05387b84e95e77945a3b988287578960a4cc215454d960535b21f1dc0d6ad547f9125364cb06726d9ccccf5f9e79ddb0b443ca885ab8ef13edd95c4c74476d045e4bff3599b28a02c13d728e55380991b4908707a7287bccfff9b3b9bb834b6925c871730395d066c144faeaa181e52373c0e3f74f974d79fc3ae535022f1b676f2fbde2b43cb63268ab8965f74a34faf4c2ac5a71fc32fe07efcbef8d25e3d4d1781e82ef5d6d1670d1b45afd4460d768c76d64fff73b473f60f718cc410b20aef9d1fb50e41f650e9e8ec640516058ced71f321ab5d6bdd1f8b85704726bce4f8632f694540d73ca2ce00199303d199e3bd80926af9741a77b8a5ed9ba5c4c36b6d4aa0e39a6eca3d8112dd5013a997022655e0a6aeed07f4f9f1e63e8c06c0bf10623475cf8d2c3d2e0f4058a7aa048a3fa24898108457e4859dfaa4f1a5a70098dd014107f8abfeb83729eaf35a495b427fc8ee78cad8803cc5958e85a562d392fb9e107bb143a4f2d01b0386f8d6b1af7b56d8de13814ec3839c11d72683f6b14967e6b419597beee95da362b323c8289b21ef3da077bece4fedc2e0c9538af59a9082f234bc565ba6f0e4f6ac9842d0dcdb702266bba870b07578e29c224cd22fc8b549cc3377e441c9dbd1dc68952a5690df38a1f393d754ec2a4b0f644a41c89bda92b76c0e327939e0a743051e6bc34bbfda003874157729c6102d877bb255f52e3188489757dd410e958be6de00cdbd6a5b8a192d29f811d5e3baf76b6c6271ef415feb740d370843492f5c98eb5bb606e5f9e8083305b6f742c64851dd8f462b665cd866592e53ded083d78df70608bb376552c2c57d13e0b9d4aed0149115af68be6d9209653a0d248ff124e9d8483416b06363c1b3a6c9580689fbe8fb2cbeffb8df4e44bd6b39ece26ac09f36f4f6d8f2f7ef40b62dd474a898e3bb81374a8f6ab44fe6b3a26e5bfc125cfa700d183ec1335791f75f249a89091f59001539778e7b0b561ac893cb1ad9308c47293c8de890e2cb3463ba9148cf6473569a5b435f2bab2a36c8907afa5b8f0fe8e75e0a723669cd2b4c981ef55a860699b92290410d53bac54c6fd387b9fd51025469e3a47f5708e3a152c1a07b84feb5dbff61ab74021a8efe28da6fa7695e8e0ecf5a1e7e77fa7d7e2f002d27bfc854a1f6dd229bb7084d99b9c8dbaa06d16ffa3f9f81d3900b47caf8a293ef44d798e9a32a01a3d4d4a3ce278a50d6d425f438c39c70b36783efa4c614e44e02861d4e17c243ee9272020b4d745c91c99d30933d42569c65eb3e615cde94e3039da077fbee84f0af276aa0212fbd03db63846fb01467ebf1147b412813bdd0a557998088c982662628adfbe61c713ab89bb0d9f44cf8dd3e8ef32c9fb94f118a79f32ddd56e7647ecb28d7c66eb511f7ff9545d7fcbb1dfafb18f9a959ce84512aa06bd992c7c99210bd0f4244b6372a62e20adb884cea7d032f3e2f0cf6d38b2d19b89e35171c6399d1bf732f2935a6db8e9514a1543f4c5606b949373fbae831fa68a087c62db1f0345d2672054c928313147bf61597b12e3213a9e650565d5bc79e2bc8e8182b6e4c5660848972ef129502452e432ecccce578b1e182bc433797e3792288e5c09f8b32edf5707d3a5e3c243411ab4b229729f94d14bdad6e59e45bfa991abcf6943e1c32e0b621db09a65cae614146b62d3b4b59f5dd8e176d7833d86f82faf4574f8965b805e2ba7ea0ce97392de528d9cf7653eda66c22b3c76ed8ac2c4721fbf92c1982240fb0c16ee905d04dd6a435f9fd4c6e0699cc7837dfd542b10a04ad9e8655a66b2a7fc137b9a99bc61f5a8970e1aacb4dd5902b771b816a03574097ccc30949e62760d256554686c5f9e797fc8c51bbfe8da9fc75e9d874cd006a831f96334493cfcad119597313bd30fadc3ccc7c1bcc8b532c3c35a5bd036951767ba2e6319f4da860b03081d04840200e0f9e1701000d70a4ee9564f1a346495bcb0d532188ec1bd146673d98a100df3d1dbb331b1d30458eff330256ac62536f31e2c229bfc37fdd5323fb7b6dabc83d5f37bfc6cffbf973f24986b004151b59fb62d5aacbb2b40ca53bd04822ea7de3fb169d4a060869d7ccb890da28bf582ae51cebb07e700a524705b12f4891325f5d560bad6527ac513869d789c1fcfd0ed51a2c0a72e2fd50e8e8f43d2da21f80efc69a137611821842bf822c01ec47088456fe1b06057041046b687a4842e633c46c7d585a70a1530034ab2deb44c5106fc3fa07ccf58d3f414de69491c7fb827cc8ef02c8e4f96a3cf2ec3adc4f40b7ec7f113252f7ee353718bef1a7806d81b5aaaedc052b7bc1184f6699edabd9f2ce82cd4037a6f2fe390336b931ef9c4f14144592db701d153ae7ee04c552f0149b432d3867b0b459a37b2918ed5e918582dac912801d1f467c7febe39398191493bfbc4838be0d8e763878cadfd1e101d1ad4358660fea4cef1f5e592de2890916e80c0ec74066a6fc00c93b254a5781243231a85eecc9eeae419fcbec3f26717c8f36c1cf403152ade7cb18d0772a385a2e0f0a988a4f7584c057763721f96f09547ea0f5308f22e6d9f9af112ac6167fd844a48828b938b0dd1894c2693de060ddefa1670a320f3d0604f9038f79be0dbc3101a0996dc51f178f979f96759909d16f5b2d47a63023e68db25937d8b099974b5f07e3226551b883c249e8183944bef3950365fed2175ed52b93d443d67e1f3ecccee0a25ee8127704b99b72bce64858d862a542366eadfaab34c02e2de1175ff9c4baddf18e48392d813fd50c28680c6860287dd077fd4f3324b4a728b3aac0bc56a962fc23da291b10282cac0f24cfcc4481e030b32db7ff590d20a7c449042a3f0dcf66d9ff56769e79b98863e75cf16cddca1d12a9bc0c77b47d85a93b5505bdc8b3249c3497d02decd1259b30d9dbbc4d96f4b155087960b405f485a69f85a85e085bda77b3216f6a55ab336a88c315937b003d610c6126f4c99a366b8b54c9135c6a791490c5f5019e4ed93ac6a4e39dea56ad1354bc39be166460a4e4e56caf60e8f0a6128f9fa13f5d0797b35165782427d1b933cb042f1cdca6c2164e06a4b8fe06c38bc17058e5b39979260ac15b20e4abcea609ccb51eee85d64a21bd5b107e295ae7d6fa74771badf24ab1f0b2ef14094d3ae0adefc1"], 0x1004) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000240)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d, r4}, 0x10, &(0x7f0000000380)={&(0x7f0000001600)=@canfd={{0x1, 0x6, 0x0, 0xfffffffffffffff9}, 0x34, 0x1, 0x0, 0x0, "0ec23a78d5761e34da66f955c6792c8331eab9eee82b232eec26f9502258131d256d7dd0b081ebd930895e33fb8f07455b3b04c4151f38ec33b0cd4e8079d6cd"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x1) creat(&(0x7f0000000200)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001680)={0x4, 0xfffffffffffffeff, 0x100000000, 0xe7, 0x2397}, 0x14) [ 425.609892] audit: type=1326 audit(2000000002.400:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21498 comm="syz-executor2" exe="/root/syz-executor2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 03:33:22 executing program 4: r0 = creat(&(0x7f0000001dc0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) sched_getparam(r1, &(0x7f0000000080)) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="b315df752698f0716ae54c04885e1f7fd314ad84079b34ae640277f7cd"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) 03:33:22 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x0) 03:33:22 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0500000000000001005307a33d6c390836be381b", 0x1f) 03:33:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00004e7000)={0x2, 0x2a7, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000180)={0x7}, 0x7) r2 = syz_open_dev$usbmon(&(0x7f0000000700)='/dev/usbmon#\x00', 0x8, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000400)="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") pkey_alloc(0x0, 0x2) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x80000000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0, 0xff, 0x0, 0x8}]}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x18, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c4019f0581600e6ffffffffffff0c6300000b630000"], 0x45, 0x0, &(0x7f0000000280)="07000040000000c70100faa5dfaa23444812ade8bd3d4bc60ee171800ae94b1f538a45f462e8ad6541e172a8298e6d7974968645047eba443de1a56a38f0ecb23d65fd0ff4"}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x20000000) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x103000, 0xe9, 0x6c82, 0x4, 0x0, [{0x8, 0x0, 0x1, [], 0x68eb}, {0x1, 0x40, 0x2, [], 0x5}, {0x20, 0x3ff, 0x7, [], 0x1000}, {0x4, 0x6, 0x1cb8, [], 0xfffffffffffffffc}, {0x207e, 0x7fff, 0x5bf, [], 0x3}, {0x519, 0x8, 0x101, [], 0x8000}, {0x2, 0x80000000, 0x1a31, [], 0x80000000}, {0x6, 0x3, 0x10001, [], 0x100}, {0x8, 0xff, 0xfff, [], 0x6}, {0x2, 0x7, 0x6, [], 0x9}, {0x7, 0xfffffffffffffff9, 0x100, [], 0x1}, {0x6c41284f, 0x8, 0x6, [], 0x4}, {0x7fff, 0x5, 0x2}, {0x101, 0x7, 0x8, [], 0x101}, {0x5, 0x9, 0x38000, [], 0x3}, {0x0, 0x4, 0x5, [], 0x2}, {0x9, 0x8, 0x1, [], 0x8}, {0x7, 0x3, 0x22, [], 0x2}, {0x3f, 0x9, 0xad6f, [], 0x2}, {0x4, 0x200, 0x1, [], 0x79a27093}, {0x45, 0x131, 0x8, [], 0x10001}, {0xfffffffffffffff7, 0x7ff, 0x4, [], 0x1}, {0x8, 0x1, 0x2, [], 0x100000000}, {0x7, 0x3, 0x401, [], 0x6}]}}) inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x1000820) 03:33:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900001a07000000068100027b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) lsetxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='security.SMACK64MMAP\x00', &(0x7f00000001c0)='-eth0\x00', 0x6, 0x1) sendto(r3, &(0x7f0000000000)="855d88dcb7d3131ec8122099f1dd7829191cbf248fcbe4c52bbeb992163274ee75abea18b0f3c6243d19211d62d22c96faa149c86d3334bd1c20fa4aae8ef8cb", 0x40, 0x800, 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000280)={0xffffc00000000000, 0x4, 0x6, 0x0, 0x0, [{r2, 0x0, 0xb2c}, {r3, 0x0, 0x2f}, {r2, 0x0, 0xcf7e}, {r4, 0x0, 0x3f}, {r4, 0x0, 0x81f}, {r4, 0x0, 0xd04}]}) close(r0) 03:33:22 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000180)=0x3) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'U+', 0x7}, 0x28, 0x3) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000100)) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) sendmmsg(r3, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) fsetxattr$security_evm(r2, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000140)=@ng={0x4, 0x12, "82a884569e85b8"}, 0x9, 0x2) 03:33:22 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0214060000000001005307a33d6c390836be381b", 0x1f) 03:33:22 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x3, @mcast1}, 0x11) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r1 = dup(r0) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000007c0)=0x80, 0x4) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000180)=@generic) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x40000003, 0x0, &(0x7f0000000c80)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e21, 0x8, @remote}}, [0x8f, 0x0, 0xfff, 0x1f6, 0x5, 0x100000000, 0x1, 0x6, 0x0, 0xbd0, 0x8, 0x4, 0x100000005, 0x9e2e, 0x8765]}, &(0x7f0000000600)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000a40), 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="01003a1e2410"}) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@hci, &(0x7f0000000580)=0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x488100c0}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[]}}, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@local, @in=@broadcast}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f00000004c0), &(0x7f0000000a80)=0xc) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000080)=0x20000, 0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), 0x4) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000800)={0x0, 0x81fd, 0x8, "71756575653000000000000000000000000600"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000680)='/dev/fuse\x00', r2}, 0x10) ftruncate(0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0) io_setup(0x0, &(0x7f00000006c0)) io_cancel(0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000540)) ftruncate(r3, 0x2007fff) sendfile(r1, r3, &(0x7f0000d83ff8)=0x54, 0x87ff7) [ 426.008970] binder: 21573:21574 BC_REQUEST_DEATH_NOTIFICATION invalid ref 374927385 [ 426.037456] binder: 21573:21574 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:33:22 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02fffffff0000001005307a33d6c390836be381b", 0x1f) [ 426.118997] binder: 21573:21585 BC_REQUEST_DEATH_NOTIFICATION invalid ref 374927385 [ 426.162161] binder: 21573:21585 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER 03:33:23 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000f0000000001005307a33d6c390836be381b", 0x1f) 03:33:23 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000006000001005307a33d6c390836be381b", 0x1f) 03:33:23 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)}}, 0x20) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000080)) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000380)="dcdbd6d333d6608f117fef9bf9100f67309a00139b0c6777e5a0c3d57a8e3ed349f68e55c3625d642cdd51aaa22596bf820f07639be946381983993e3737e684c49b206c533c2ce3674aa44f019562796df2f61bffc64e1e466f90ef1057997b517ac5a4b14b7c9c6a32f7bbe5f1167084073b3582d0594e4c61d58bb86e713e32e5d6b8277799977f999e67c95eaf003a4a86e0cb660cc5602f744eccd0c57411b67b98bc79042212b71cf166860687c51353dcedf3ea1d98e0445d7df47701484c018627377abc5f7f577a7e92fc07e27c9757658266e7027034c1731b27656cc1a39bdbc9ea2ba7b96b392de5f360b306b6099561c7852601c3c947fbfcdf8694431d18a0100d9e734362b73dc2ba53c61bbafbe79db9f4feb70ef2a7cd8672f6280f2587342686376fb8f468c44f1fbee18d31094ba34f596f074dcf302c9035a0f69c8d167ca877e927c3068a357c64a0d7120309d1bd06726e9c7e70d8c01ad5444d2b6fb367fd39492afa5299d4652dab478113db95dc21274d9ab69627fe8a320bef7015435b76ce7501cdc7bf5de8eb2516ac6cd36b0e00648cbe60e882253c7cf15c2ac03d278b1aba12bb70ef3fc0ccae78eea43bee0a12e201e2b1d6c2fea052f2911a1efa232045c80fe283091996a589fa0a47afb0616d80e05043d0fb8fe1f74f3599580fcaccfc445c5b42f5fc8e4546420dc455fbc77854af423b2d38acd8cc925db73d3dc31339413dff7ecf3254c2a44d1b89acf311360f2d9a1abb002d19791ffbf431a5f93ed6e982a19715d96fcc4568c1d7563227590b8132d237bc6244cf8267c6424169229e086bde52678813460762245fda66115237d3ad73921a51ada16b7eace5a173c02e7150b5a254542bd2b3d869ce9c9062baf00ea4e540b9e687c34ce35a39a52e62261b51288998dc99ad065b869163e0c93b2851f914b778ba1095c6052c53df9e2402ca0fa399512d38e2b33664363694f00c494ae2209bf7d4fc295286e9ec0c45cff9a13ff2f0a9b3929184fbf4b93c30902f3d0993a9ae790e116dbb2bd7249c629ba6577eaae824df8f410efad7f4fe6f00b157fd5efe2adb014f3d67021f292123ca70add7ba3531b5c55b8542c427b649efb441fcc8991ba9faf4b3a685009c22e83089aee06f0f590a650079855e6b82408029377f96a6cab6e52e1015169499bce2630799ca62c222c7fd66bb210cef6006fb56a9bf9fe61a2d2d2c0d33bb4a2d871808bb94134c3358979bd053f984db298bc4e3c71c9db9ed5b71efecf95948359a28edd4927d0feb6f4625feb332ced10182045db4909102f603b7dc3e3123b71a29e6578e069fc6472823eb50717e77a0d39b5733354d0aca63e2db712025dfbf41c3446fb2bf7a85741f17353f0ee59a69bf1eb55f594459dda461463d9c1074a2a91305cd71553d5013a08dbec66795a63502dff24bb1fd3997c1ace7ee5593eb69110ddde300142a00c07b14b5e58fa8fbda7bfac4a7df8f5c5acc3f43f9fbf0ac29079c8a4b3783a214e193711ecae1beaa3c0c9d67c1426f81edb0c8838eed8c7a5e1f1f6528693d4ec36c664f401b44d78e76fc6305fde48a5461b1045316df55b3b11d2a5bc846c833e864a7a614fded3a0c8a09421a3d6768d2f4a86ef385bb1d4ec412f9dca4c223b6bb8c051c8fb317d3e6328977b104511bbbe21709e428bd8ef7a2552ed7644fd14c7464bc95640474a81287759a73a1f3c6d2a2738773c001d2de6c8454f0805760dec647050f28caec64a8e89b3b695dc9a7c13417c57a3bf1bc242218cdb3405153882fb23fda0bf9c435dc75166b9c615fb8c2de18b6155781e8912aa40bf7ca0ff18ac0653a5f64cded206fcfba1d53a8d6385b8d6cfff6b9611bbfec890948d7a2a96aba3a7457b5235b1f04b087ebefc8b2069e3a7d1a983eb640df829e07c5e18c18687cad5d876848925e718ddd1427fa51768c53d182a5c9249ad44315f3001bb0fbfeaea5d0d0e0c8e3eb1c19ed5586840d4745718b83c878a8eaa9531de0ee892c86d434f3220ff3395ce0991f939ee7f276399be4994599bef4b221b738c1c8830fd8bc24cf626192af7c58647d2051a8b037cd3fae57c893f87c1c5197853aa3107aef2d505c714e49c88dfa07b41b978d38b55babcee64e6e382eca29c692cb560c3ee7c0dbff57ffd6f76c7d6f87414579d140ed58c8c588e9140233541a114e032021e5ca6d9cc430d78a51b4cf2f18f9dae9410c38a40fc802ed12955710ecc6434f96067c06292519bd7a4cbd6f88acca950537fcadc376ef8095feb5e590862f18d1d677edc671f49bb14a9d254660ad71b169080e7327726cbc22d5cc7051fbb0110124f0da183c11e4ad45b79788f9dc5372f5a9765c3ae4cf1431c019e5ac33cdf3496558b22ce10b6d69e74ba53a5c5d605db6a6c230d93bd8757568739ca1e17dd0ed1fa6b674cd18167c342c0217ed162b957b1324ff797b0e8bb53b410f5aebbe3166ec258b451c4158f1d58ce90af41e9405055492179668336b736a3fd35dd2386a291a46d30dee4f5a4eaf931698404e284b4b5c2913d38cb6ed8c58b688cc69b84ebcb675bac8db1320e18da63abbedf4240f9dd156c4f8f9045e82d1dc47a101d870c422295bd24bde836771aed32f477b79a2ec2d8b977b8171ff717a4d684a25d6a84374166bfbe80818a9fb7a83e59180e62571b0d885aa2d9a922038c22bc6cf48a517af42cc660b5cccd1eeadf923f0dfbb4e67802cef3e1d387377a631624c0396d6b26c3e347deae90ed2cc0460770d6e23d5e594a92ca2a4f0bfcf4483d757d48c4f02c93af5426b0618a4303599b7907e13152ad9fdd3f8b5f916b295017986fd8855d127c6c5d7d294a8dab90a0579ce49c72c25c8aff8fd2e7b759e25e830ff89de6c075803846c1bc6ea8be052089c91fe2816737ef5782aefcb81b0c97c7abc84c4832d3aaf7f1bc4e6d4a0533cb05dd855034d31e9178805b5811f1652edee5130ae600951b82bb5da30a29a8ab4f5b1de89c643437006d3063fe7f611746ed1114cc25e573a40d6525e270afc5d86646f1b09ede316973eb4bc1cd29bf5a0c8d25f946ea7cac4478b2eb4e2defd289c080fb6a16348d818d313e06a2b78bef02cf684435434203a1c21e2e1014cbc43f26d4c4ec061fc993df9fb28580c491c46421ade0badfe32f6b6f0937aa959c053c5eb06448ff6f3bd6d467d64d536ab9e23b65146ee5f7072ec79d18db7bea23a7d5a94b82137ed5b079a1572e2b6946c6682250f55b4d43ea57860c1a675f25209a83a8155593b6ca100ae6b1f18c62b2a2e6094200da603ef8029448a0671c0059387266eb081b10b60e5707d094faee1ec582608ac8e0a0a1337adba2159c59bed336723f195dff47776a7790450008d1ddcdc84bf2e1e529b1109e50025bf9da578e624a4f8240e149dc4c5389a8450a8b0289e048b63c35aee285fed9acd30e2664bef6cc61ffbf2d60c39cf737a8b77275036781f934db5cd97b60f39719df5f6bea29c6a60f3ca265617b7b72bfa85f64a3ae4e12abedf219a09e4cec773dcadfe44702af8c6ff96ab2aeb25275e22b7d7323df017ad4c01cccc55629adc41eec4bd9491d2beef10a74024fcd6b86844a38aed3c4dd215083948c84a3d99092715ce24f85815fd4dec11a93f2c474c14409afa8a700658902d7e3443a028fd27168e37c03b04690727cde0d89887cb6b5aba178b3bbc10d9b3b94435757790e4565483222c2ff3443637998e601d9f729f82eadc20bf477f1339782c67730c125407748bb0ce1b188cc569c4a9ecd855f702e88acdc562504e229e8d9dd28292c8b1a3ba0d83daacdc16b11e482d3a331e76a446f7c2957c8a01ebadfd40cfbb9856097e5f7b43c7410688218634fc4d31fe78efc987fdc783dc7c26d335e8680de279999d47907a173ad1b62d5be28478c38cfb58aca8de93d3c6f434dd008500b04a1103f81778798abc82591e209523e5f8b1b2b4a0f15c6383166a230728a59f232b3549fb6e1482640e8d587715d514011baf48a878f645d1fc04184e90a3368eb7f7b683bd66632ad366567a441575feaaacb5d5f7bee66f1b56f21b848c92a77292d5d282bc6a4eb19cf79da03a0a28c2c8a590b5ebac29eb97095720c7f9bd577d206db29e2cffa35795d3a13362ad777b31f860a393372aca3c74fec4a8849a952daad2ce57714c6f8a2aa99b743faec420ba8766fd7076b93661a157100b843b6f383df68f52eb3b1a1dab3f588528d1fb8c4dac412c47be2cade271d5f79dfddd25c28cbc7700777ce51007116edc5cf735b8da05d49fe710c22d73e58aacf74b83b4176247417fac0451bc78cfde5eb9c5af2f89c42e204e15df38c05058a57cdaf708131aae11f01951638a804ee9146b9577f9512b826a067659453ff9e2afdf53a2e26bf85b27cf26c3e127a56444b75089bcc6c4b0a8453e02aa06d0699cc57d37e2e346d3be37be0e7acef545a8de0bca85b58c4ba61eb26f5f0280d7c5f27cc694eb5632e41d97bbc1832d5dd6b19a31d36fa0cc55bdea2f6a22e97ce538202d846bcfb195a8ceb8db34bf56a6075e8c128de7c3006f81fd1f976bdeb865f1beff8bd19458a9012341ec2c4382ef4c776ebbb95e472d72b2b3e335f7ec1318131605d5339781a5e55a5fc562602e73e42a4a14d3fa0fadc2aacb7b6037a411cf8b231dcd2144e0a3182b826e8dc80db6021045824f679da7c6f72e5aa28107b6b7aa4a621c9c46deb0af19e0a2435ed4843aeee4fa592634dc231e96798f83d049af7f8764ee7e3ae54197a68a8d722769d69fd55cacd0d60ef22a9d7cbc31da453f1fe3d13d6923fa5bb985098d21e0bbf94e6adae7dd5e32a5033f4116f38e2f9442e4c2bbf3c7707bb2c97f3ee9c29791ef6e8174c1ce4a797be4e19318fe5ba7d6f64699d35f2d14cf9e52dcf7069d9fc1c2cc193460604ec6952929c4c8dac429de60a1aa8b26e15f116e6e509de8eb23daeb7971fbe199694db1348e787611124f32e861d4602b5e67ef4cb7ab4a40d012a895454d69f5f5f20d33fcca5676b99ffea3aa220159909c1bbf0a0f4001dc542ec39bf1af9c67f1a7cbbe9d08ee4c609ffaa6f52deec829e6f02d49e2fe69760fff0e1bd54eadf60565cf1a4b85b16aca0b6038a2b98016cc326988a5e8968f49926163c49239e3293fa4d56eaa564cdaad6848a5ed51e4632becba9f745f6ef8b0752a7353003560019635fb6a0b3e832c4a67df818f18abd78deddf5b16aceb391439066a5d61a8d3e0cb2d90ec163ea738a2f5efddbf9b311cd4c51f577e3c859b7d66fe7d6c63cf14daeae3727ff98b28af2e55946f7435f44a7d660fcffd1310098ea7b82503eb34e5893e1e07f88334327f0ff640ff4c6662e716de670c1d18cbf749a7439f10793b161af165ba764e2181284c9bfa6bbf0f573e3aba0e7fa1cab96d3748020d7d0a9a119534fd30e6dddddce0e9e1f3422c58c14d948d11ad5ad963e5b53dff04444fb73200f8b5e4697b9bb10e25784af9646058ab7978cd0b031e19b7bade01f4abc3b6b8d32a367a8f4600c7ab37f6a7e6b42da5b377552f3fd447f3666ae1a365e9d67b0b3f8f26da8c34a378bed51b6fe94e0597aa60278bfe1708a72ea8d69d5fe37b9b6973fa7a9e11e8ee1bfb49a2cd6549c30e7d4695208d5a7ccc0c6213e40329bca6a996d81f8387fa85b0cfd3384e4c66d6ea5b553295d68568c323debf4bd28bf1db", 0x1000, 0xfffffffffffffff9) r3 = add_key$user(&(0x7f00000015c0)='user\x00', &(0x7f0000001600)={'syz', 0x1}, &(0x7f0000001640)="a4ca465a402945db11de42d4fc1adc9ba540279c01fc920c9a463403732793d1cd341fd1475e9a051dfb4634c6e0b8996eba439410ed5ac4453f0d6a84402ac340ec88ff8a088fd498d1634490", 0x4d, 0xfffffffffffffffb) keyctl$instantiate_iov(0x14, r2, &(0x7f0000001540)=[{&(0x7f0000000240)="cc7678ad9f7cb9517fabfaf3d8d3174ac109bd0d2501df7c46e0c7e8f920971717dbd8ddbe7fefd6ae7048bd75c4bf349ad3811c9b5bb80ac7ab197ea6b753aa66f5bdeb81ad6e2bc8764729911e6f6cb93e6b10807deee60e8538cad501f5ab4f841fc9da963e024e5e708ebe412143a1701eff564f249ace6494ba3576c5ed42f58717e47b6f1be516f638a89269d4ff963314cca05a6d821d08fe2de494b3c4a2ce60e67a195b647587833908", 0xae}, {&(0x7f0000000140)="a121541811f7e203e10c14e33b10b64dbf33ee2d0dfccd388cb4813a2793f169f4", 0x21}, {&(0x7f0000001380)="f62c572333e705f0866887abd67253fcd932d01cead854e48990baab39df77d179b13ec9dce44a40ad1255a37ff56c360b9f2be2ece1a11a0c43b8dc5c638feb", 0x40}, {&(0x7f00000013c0)="476e89ba8e0af0ec10e1613b4aaa9c5ce3445e334cc9347101fa4d57d64aa79f050405b732aab909b100e3511aaf6cc2996f643e8292eb3833a413c5e304e2a1aad76d8729de84d253d01dd31d9d95bade572d7b6ae57b31c2697684", 0x5c}, {&(0x7f0000001440)="608476aa0c882a00319bdfaad90dd5f0ee543b9cddbd42f4cf87538bbc1514624cf9c2f6e01a9cd5962dc0e3c7a1de4eb546e502bd3c2de8d8027bd4cf599b5f82d6ff2695a8b252423e81facdce90de02e621fbc3cfc13d05611175ecc25744775d7f8d7b2c721e3bd71d219fcdb84b5b96f87adb6b5a680cec95adee5e3b6858aaa91e7ccda35eac2a9587e50e7cd9d9c9c7f4edf26e55e8f202627107a07f9aa580fdc99035078d5ba9c2ac52f9c4fbf267fce3375b1652fff4e48af7f153323502c8e62dd17904453a489abead3403f43899dc3c9a6edde7714cb5dc0b8aed46d9e09c", 0xe5}], 0x5, r3) close(r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001a80)={0x0}, &(0x7f0000001ac0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001b00)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000001c00)=0xe8) fstat(r1, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001cc0)={0x0, 0x0}, &(0x7f0000001d00)=0xc) stat(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f00000038c0)=[{&(0x7f00000016c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001740)="f22bad677adc303a94af7ffbe928596731732a8d54b7360e96461dd1", 0x1c}, {&(0x7f0000001780)="3f2725cd789ff6a8bfff0e2caebbf694697897cdce322d5784167c804e4beaa0f6065fdcbbd5dcd8280324a3a826f1907f046eb7275a0238f12326708155c302a27e50e82fd96cec699fe3c2297248e06429c1701d0d57ad6fbe8c253d24b11a1370ebfddfd983d9894fef115cdddd82c17c366dd9287bfaa8e5281c15113c3df9f6f99dd0d75f59504b2c39273d4c29ec7159fd21fad98cf0d172fe8d5af21d7fab122d98d68466c98a51109be86e16f5a0887927feac3cd5804821ffd70a23114d25ea0131c71566835c5c5ff26bef01da4ba4b368fa19bd3a639aa1d3a6c9004bf722248b531610d8fc91d35c", 0xee}, {&(0x7f0000001880)="0ce080e9035799722f6336d286a53e6ec97d6cec8334d2d2e32c73deb4d2d4cd8ddc6cb37b5c", 0x26}, {&(0x7f00000018c0)="d811a7838b4f2fc8fb6dcdf5c8d60ad758bb014818b830d50945feb799ab9a660886b41d12b3e8c37bcb36b4d52eaa105ffe8ea3f490bbeedae7e0a9b4d847d1acd058d761a61ccd826c193b8a2550ce6bb6bbc509c097ed4ab5c5d4c77547df38e114bf4ee4234017dcedd7f20b30af7283c6d7be8e37bdf1eb05ccba96b5679d2c2d0bc7441a3fa38e00e9e0065e6ad5b738d6f4b1cab3ae076531b2c10138673881e79e4b2280", 0xa8}, {&(0x7f0000001980)="089a4eab1638f6cd518a4cc068af738fcc7722568fc9386d3e3440eb1bb7e74af48f971ab9cd6f35e808aa3d27dfc8ef59aa245e6f7301aecea36b5407c47aeea347eca9608a277c129310c2aef441add80c33", 0x53}], 0x5, &(0x7f0000001e00)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x40, 0x4}, {&(0x7f0000001e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002180)=[{&(0x7f0000001ec0)}, {&(0x7f0000001f00)="068ba1acf0796c83e008064fcde891f73e37f00fe42f5620f4d98ada600d87a620c572b92436982ac79f75ec2c6edcafc19c589650c5eb9013dce9f10822b6b18ee0e80b3c10f04ac3165e6a5fc859ed68f7ce024333d3324d08098e8342ba06804aee25c76d83c8f075ba6720b14518d8e1238180688db75aca270687564f55779f74bf74aeaf7f0ee91ce5980bdc81ec789adf1c6cf2818aff8735a55ee899f67275ee72b7b937d3f3789e19f1b0369d7fe57c1156c8498208d9b6323ddef19a670772eb779c909e67", 0xca}, {&(0x7f0000002000)="418cdc6c7518745a04a380b78a151be64462c8d98c54c0bdc8f1650be5da955ec1944d6fcee30a281cb066a5de179e9b931a206845671d9de6948850011a5e96d6d03cc8bd254c465681f238fd1ab93791635c2df30d1ebaf48e54af97cd1a964fe76f86ca794b00f6e268829e001c08f9f149c9fc267de71f30a24bd8e5a988f56c6c7663a85e531c48d25e8364438d9fdf36db3fe9d933f2a657f925c698c54134a50c4d0584db2e0baff5fc3dff825f55d319c2c22ae0eb3d44f031bed8", 0xbf}, {&(0x7f00000020c0)="57baa95236", 0x5}, {&(0x7f0000002100)="e801f6886807199aabd4f413e98b32a4e84edb89d3", 0x15}, {&(0x7f0000002140)="5c28c3e998440181f1a51127b8", 0xd}], 0x6, 0x0, 0x0, 0xfa86ac81078bf8fa}, {&(0x7f0000002200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000037c0)=[{&(0x7f0000002280)="e0f3122bd15aea9e3f6d0ab963c70607ca0fbc041dba8ecbfcc91d26de9438a376b298881d993bf371bbfef1faf0abac38d222ff70d7fde599921009846909f6d5c42007be9db29fa0d19a4f0af25941fca2a5fa8c903b84621574959e937e6c7c1bdef1e3ab21be5d702801d2760b3af65e1dee2356f33df4d10acb3bbc9441e8108f35b9b46ee9a4f13ee6707ebf72f8181098d7c0a028da64d2322c1e961e6dcb4ecd088913", 0xa7}, {&(0x7f0000002340)="0027a64de7546a7e0629ba7358d34f6be86a6d5e0f1670715913efcb7b5120d922c7fa88ed9338a3b58f47b1f7d9fe5f60e730600602a2a2f6561c5e65f2f158690d16b0148ea616e8b005c7c971675f794869d04e8079a4138fe424827e02a57198d943af934655b387da80daf9885b52a3c54048f28065efd8700f3b18ca83ffc384", 0x83}, {&(0x7f0000002400)="15eba00a3fd6d00ee6e95a17e3aa27492b1d4f335639217fee72484346635aa35ddc370b7f5b2e5106efe1599196ce", 0x2f}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000003440)="b81555c79494e831c53e398deefb889491f20e91b113122976db723eede71e3564a28a2636d4596004beebb0fb", 0x2d}, {&(0x7f0000003480)="5f9b43bdc133ba7d1b568132381f3a98c467c73174d71c8ece6a643d9dfa816952974cc7df2bb3c1739f2eb43435be9a8fcd1dac502d139abe27f5b001944c277c5413f0b9e275c9f77ba4c7d43ba68dac5225859716830133a848f89b89876bff9cfe3b8866827ee73c53089035fad723f97f58c867888604666a8414865b5e0327b8999001679e52755f105320abe1d2abb301ac6f4e5b9273ee19055ac3600d7da1f9a294a1e209bacdc841f41a7c29dcacd533315386d0e5eca48396fcf999b049af4afcc52027a973c8003267e07bc6716f", 0xd4}, {&(0x7f0000003580)="4d058a0bfe62b8cef2d3d3b7b908604122f06e2da4d915ab9f29134b2d1863536c5494b165fccdb0d14e18f7dee2ed1333d9d8fdf77b422f0d365929da7da125f5ba5248ce871734df0ed2f2200de0fab5d5c2ba9419f2826d24191516e21b1df39af790af50e4d11714c29e90bd6a78266a927d0416ec6d8bd56f7d09159184100d557d048a0d2f5751c9", 0x8b}, {&(0x7f0000003640)="d88e3e63db492bc025b1d7d437a7ebda5716ea168cb2d5b103c74e6489648f2a33ebab735d41a73f8585d3d66309027d0cdb52a9f6998e69d88573e0713efa467e2a5f", 0x43}, {&(0x7f00000036c0)="3aa8816a5e20adf9c41c716f683b2f049362944984ddc8299a7d8ee010e82c28147b45f53eb510012ef310d090cf13060858ba72f2597787d574292e5712d926a840743075fe42ae467ec827538bb6d0fb8c4ed26fce0b6b3acfa9731602a7a42b52536c0edcaf0b5f78bfc50fe49e385aa0d48483da2a7f96fe97c1b9ebc31f026c4f44edf5639987b4f512c0f30f50a98fa287146032abc629f54494ce0d367e976e1a35ba9fe9d56516cb7ce556437808cac0cc26192d3f3dcf0ea0668f88b524c5a6f4be19fa08fa5f665ca8c819e625428f046e21fe87168e188a", 0xdd}], 0x9, &(0x7f0000003880)=ANY=[@ANYBLOB="18e5ffffffffffff0000000001000000", @ANYRES32=r0, @ANYRES32=r0], 0x18}], 0x3, 0x0) recvmsg(r1, &(0x7f0000000180)={&(0x7f0000000300)=@un=@abs, 0x14, &(0x7f0000000140), 0x10000286, 0x0, 0xfffffe43}, 0xffffffffffffffff) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) 03:33:23 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)="b4dae9b7513aed3e64f55c475475e072d7da38eb0805e2aa8dbaa3a43c057cb9fe48aecd8156b5b2b5f22e8235b577eadde670aa77440d8fc2efae0a89b34aa8818edbdca32e93670cc4fc7708102992385a2fa20e93d7bc07c007cb3fad928c5d78a52e2f5580d38cce3e686948e303a921fd3ac8f887219d78c476dafb8e01901a0cc23ddeb2d703e78d899f602092dc00791b61a55cca1985862547f68211b54972fc1487da8dcbe9f52efd2075741486b7e1decd17bd553d5423f6b596005f39fa596278f1c0db90c4828f5dfe5ef70205d5fd83159f0e526c", 0xdb, 0xfffffffffffffff8) r3 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$reject(0x13, r2, 0x1, 0x0, r3) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") recvmmsg(0xffffffffffffff9c, &(0x7f0000005200)=[{{&(0x7f0000002700)=@can, 0x80, &(0x7f0000004b80)=[{&(0x7f0000002780)=""/152, 0x98}, {&(0x7f0000002840)=""/49, 0x31}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/34, 0x22}, {&(0x7f00000048c0)=""/150, 0x96}, {&(0x7f0000004980)=""/21, 0x15}], 0x7, &(0x7f0000004c40)=""/65, 0x41}}], 0x1, 0x0, &(0x7f0000005440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x100, 0x0) write$UHID_CREATE(r6, &(0x7f0000000380)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000280)=""/218, 0xda, 0x9, 0x8, 0xffff, 0x0, 0x401}, 0x120) r7 = dup2(r5, r0) sendmsg$netlink(r7, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x12b, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) r8 = accept$alg(0xffffffffffffffff, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) sendmmsg$alg(r8, &(0x7f0000005900)=[{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000001300)=[@op={0x18}], 0x18}], 0x49249af, 0x0) 03:33:23 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x12, 0xc, &(0x7f0000000040)=@raw=[@alu={0x7, 0x704, 0x3, 0x8, 0x7, 0x38, 0xffffffffffffffff}, @alu={0x4, 0x37f6, 0xd, 0x5, 0xf, 0x1}, @call={0x85, 0x0, 0x0, 0x30}, @generic={0x800, 0x5, 0x9, 0xffff}, @call={0x85, 0x0, 0x0, 0x2c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000140)='GPL\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x8}, 0x48) 03:33:23 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02fffff000000001005307a33d6c390836be381b", 0x1f) 03:33:23 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x42, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000040)={0x2, 0x0, @ioapic={0x0, 0x3, 0xfffffffffffffff8, 0x100000000, 0x0, [{0x7c, 0x91, 0x0, [], 0x5}, {0x0, 0x9, 0x0, [], 0x800}, {0x4, 0x2ea, 0x2, [], 0x8001}, {0x3ff, 0x8, 0x5, [], 0x401}, {0x0, 0xfffffffffffffffb, 0x5, [], 0xfff}, {0x8000, 0x100000001, 0xfffffffffffff000, [], 0x9}, {0x9, 0x6, 0x3, [], 0x8}, {0x3, 0x4ffd, 0x8, [], 0x6}, {0xfffffffffffffff9, 0x2, 0x5, [], 0x1}, {0x1, 0x10000, 0x7587, [], 0x8}, {0x3, 0x2, 0x8, [], 0x1ff}, {0xfffffffffffffffd, 0x6, 0x7, [], 0x200}, {0x2, 0x40, 0x0, [], 0xfffffffffffff001}, {0x3, 0x2, 0x7fffffff, [], 0x7}, {0x8, 0x10000, 0x9, [], 0x2}, {0x6, 0x5, 0x200, [], 0xfffffffffffffff9}, {0x3, 0x8, 0x4, [], 0x9}, {0xffff, 0x8, 0x81, [], 0xf9a5}, {0xdb, 0x0, 0x20, [], 0x7fff}, {0xfffffffffffff148, 0x9, 0x8000, [], 0x107b}, {0x8, 0x101, 0x9, [], 0x7}, {0xdc, 0x3, 0xffffffffffffff00}, {0xd0bda50, 0x5, 0x7f, [], 0x2}, {0x7fffffff, 0x9, 0x2, [], 0x4e}]}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={r3, 0x12}) 03:33:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000180)=0x80000000, 0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') fremovexattr(r1, &(0x7f0000000040)=@known='security.ima\x00') r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000002c0)=ANY=[]) fallocate(r3, 0x0, 0x0, 0x1000f4) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) fcntl$getflags(r4, 0x1) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) shmget(0x3, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) fchdir(r1) connect$unix(r5, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 03:33:23 executing program 3 (fault-call:9 fault-nth:0): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:23 executing program 0: r0 = socket(0x848000000015, 0x805, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000001c0)=0x6, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e23}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e20, 0x37, @mcast1, 0x6}, @in6={0xa, 0x4e20, 0x5, @empty, 0xffffffff}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e21, 0x86, @local, 0x4}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0xfffffffffffffff7, @dev={0xfe, 0x80, [], 0x12}, 0xffff}], 0xd0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, 0x1c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x2) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000800)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='vmnet1]:\x00', r1}, 0x10) syz_mount_image$nfs4(&(0x7f0000000200)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6, &(0x7f0000000700)=[{&(0x7f0000000300)="f3fef90d77d2210e0aaae2f7a06b9f02f6ebaf405b6ff39b6a0f4aa3b9ff1c407891ab0fbd92e62e6d9d936341cdacc485b9561c175811f68b88882e438c3ced933fbcb222a5e6f341a21cb08d11b0c95f124599185f37eefdfcb5094c6f0cecd560bd10e6c94a61d6e8c850c1b8988c00e511405102907909ebb1498e7ec876efef753d9c9ee43139630a6873b000760d22ee25d2f562239a15fcb0ac53377d922e7976e39e292152f3cb134a233e6f5837e7c7532b98a88af39783f250fa35", 0xc0, 0x8}, {&(0x7f0000000280)="551975de79a6d70e899d98e03d81acb3198933ce2995e622fecc9bd65c14d46e8ff8b1a12e7598a8b53d12a4a905e5681764", 0x32, 0x4}, {&(0x7f00000003c0)="9e11b0f46fc05384ad1550d4df241888c48f43981aef0666d18f6badf99297a105cb28a2e097c0cebc154058fc38110be7438df7899e3152519de28f538df56e13d1c0154277ae6d346b764187abc5c8f5473f06febc87617e266960a74f936b04a12a054635021fe516ffe42a0098ca271611e4bc468d75de3782f1d133eae5d4404e5ef2cfcd52f25490052bdc3d83aec7e69b8c9148c493fe2cfc16d1c0", 0x9f, 0xfce5}, {&(0x7f0000000480)="511b130886102541e297fa1b7fcc55d4a74d2d3fb4094bdee90082671fb8ddee2cd2d3607528df93f29376581987bf1b5a06c4f8208a840450db97aae761b99117087aed36c073d45e76fe1f9849d181b78386d9814146e9e39a8cf2318e0515cb7361651223bf488c0d64dfe7f28f596d69749eb24a373b0bf97421afb8d6f4f9c256352e450e67c0148e45f0821845fba16be819b84412ec516c9efd5e9e83b553b457546326a1d3d6d696c9159a", 0xaf, 0x1ff}, {&(0x7f0000000540)="55b6d920cb920c601e09cb47518956b4e285743ad16d2f30bab9e44740115bd225cf77a275fa12729bc3be7df8709e2b5d66b703c659db7b82d39268cad0c36b79094173858a66afafb90ec79a1fe0154cef150efbfb47cdb89d8a1ff45b71e352c961457c55b41e246806c6ccb4ee5c1f3b0312e029a48e37bb509bd6651854d18e325a8952eac984ceb7c56f2eac722a23d1f9cd8176b542c35bb26ac8efed4a41142741ea3c9d9502a7c449d9782eb136c6249abb829c98bdc35b9b8e92e119f1bd973501686dd3144182274fe217798da6283a38eba41e8fa97834fae1e4c4d5e8fcd5e834ba737039139d57", 0xee, 0x9}, {&(0x7f0000000640)="61a1cf2c207415f6f375d7954397291b762aead7fb9b18702f480a866fa6df869c22780d189c63e957557f56c21c35088d826f89b6f2f6522754e9c9af6da9f4c698f402ef50b4ec0b425e419fdd6671fbc551bd097e5831bf17027278c5c8d403b1cf105708a2329fc00a1b9224172ee01247b2e29d23ea1c7183c70e10efba5b8d360ff59cf1aba0f43cbb110ad165d37d349363988d1f852cfeef5e207b1f1d5117c69b9f78933fe08328002fcf45e630c8d156cc", 0xb6, 0xf43}], 0x400, &(0x7f00000007c0)='\x00') [ 426.812929] audit: type=1804 audit(2000000003.600:472): pid=21628 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir561301514/syzkaller.K3X3SU/67/bus" dev="sda1" ino=16596 res=1 [ 426.841934] FAULT_INJECTION: forcing a failure. [ 426.841934] name failslab, interval 1, probability 0, space 0, times 0 [ 426.861140] CPU: 0 PID: 21634 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 426.869652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.879014] Call Trace: [ 426.881618] dump_stack+0x1d3/0x2c4 [ 426.885268] ? dump_stack_print_info.cold.2+0x52/0x52 [ 426.890483] ? down_write_nested+0x130/0x130 [ 426.894913] ? down_read+0x120/0x120 [ 426.898648] should_fail.cold.4+0xa/0x17 [ 426.898670] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 426.907847] ? mark_held_locks+0x130/0x130 [ 426.912096] ? mark_held_locks+0x130/0x130 [ 426.916338] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 426.921815] ? fs_reclaim_acquire+0x20/0x20 [ 426.921837] ? lock_downgrade+0x900/0x900 [ 426.930304] ? check_same_owner+0x330/0x330 [ 426.934638] ? lock_downgrade+0x900/0x900 [ 426.938811] __should_failslab+0x124/0x180 [ 426.943059] should_failslab+0x9/0x14 [ 426.946875] __kmalloc+0x2d4/0x760 [ 426.946893] ? sock_kmalloc+0x15a/0x1f0 [ 426.946909] sock_kmalloc+0x15a/0x1f0 [ 426.946926] ? __sk_mem_schedule+0xe0/0xe0 [ 426.946946] ? af_alg_sendmsg+0x852/0x1260 [ 426.966720] af_alg_alloc_tsgl+0x402/0x550 [ 426.966753] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 426.966786] ? af_alg_register_type+0x3f0/0x3f0 [ 426.981135] ? check_preemption_disabled+0x48/0x200 [ 426.986166] ? lock_sock_nested+0x9a/0x120 [ 426.990410] ? lock_sock_nested+0x9a/0x120 [ 426.994654] ? __local_bh_enable_ip+0x160/0x260 [ 426.999341] af_alg_sendmsg+0xa1b/0x1260 [ 427.003419] ? aa_af_perm+0x5a0/0x5a0 [ 427.007250] ? af_alg_pull_tsgl+0xd70/0xd70 [ 427.011651] aead_sendmsg+0x103/0x150 [ 427.015465] ? crypto_aead_copy_sgl+0x350/0x350 [ 427.020153] sock_sendmsg+0xd5/0x120 [ 427.020979] audit: type=1804 audit(2000000003.810:473): pid=21636 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir561301514/syzkaller.K3X3SU/67/bus" dev="sda1" ino=16596 res=1 [ 427.023880] sock_write_iter+0x35e/0x5c0 [ 427.023899] ? sock_sendmsg+0x120/0x120 [ 427.023924] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 427.061091] ? iov_iter_init+0xc2/0x1e0 [ 427.064110] audit: type=1804 audit(2000000003.850:474): pid=21636 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir561301514/syzkaller.K3X3SU/67/bus" dev="sda1" ino=16596 res=1 [ 427.065083] __vfs_write+0x6b8/0x9f0 [ 427.091891] ? kernel_read+0x120/0x120 [ 427.095802] ? apparmor_path_rmdir+0x30/0x30 [ 427.100239] ? lock_release+0x970/0x970 [ 427.102100] audit: type=1804 audit(2000000003.850:475): pid=21636 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir561301514/syzkaller.K3X3SU/67/bus" dev="sda1" ino=16596 res=1 [ 427.104227] ? check_preemption_disabled+0x48/0x200 [ 427.104254] ? apparmor_file_permission+0x24/0x30 [ 427.137198] ? rw_verify_area+0x118/0x360 [ 427.138939] audit: type=1804 audit(2000000003.850:476): pid=21636 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir561301514/syzkaller.K3X3SU/67/bus" dev="sda1" ino=16596 res=1 [ 427.141360] vfs_write+0x1fc/0x560 [ 427.141385] ksys_write+0x101/0x260 [ 427.172152] ? __ia32_sys_read+0xb0/0xb0 [ 427.176233] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 427.177926] audit: type=1804 audit(2000000003.850:477): pid=21628 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir561301514/syzkaller.K3X3SU/67/bus" dev="sda1" ino=16596 res=1 [ 427.181699] __x64_sys_write+0x73/0xb0 [ 427.181719] do_syscall_64+0x1b9/0x820 [ 427.181751] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 427.181779] ? syscall_return_slowpath+0x5e0/0x5e0 [ 427.181801] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 427.228270] ? trace_hardirqs_on_caller+0x310/0x310 [ 427.233308] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 427.233327] ? prepare_exit_to_usermode+0x291/0x3b0 [ 427.233347] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 427.233372] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.233391] RIP: 0033:0x457579 [ 427.243435] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 427.243444] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 427.283269] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 427.290639] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 427.297917] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 427.305211] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 427.312467] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:24 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2000008017, 0x10, 0x0, 0x3, 0x10, 0x1}, 0x2c) 03:33:24 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200060000000001005307a33d6c390836be381b", 0x1f) 03:33:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil) r3 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x9, 0x800) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000002c0)={0x5}, 0x4) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/19) r4 = socket$inet(0x2, 0x3, 0x2) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000200)={'rose0\x00'}) getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) r6 = getpgrp(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000300)={0x0, r6}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) dup2(r1, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000340)={'veth0_to_bond\x00', 0x400}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) accept4$unix(r7, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) ioctl$SCSI_IOCTL_DOORLOCK(r8, 0x5380) 03:33:24 executing program 3 (fault-call:9 fault-nth:1): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:24 executing program 0: mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x7) close(r3) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x3, @remote, 0x8}}, 0x4, 0x5}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x93, 0x10}, &(0x7f0000000200)=0xc) close(r0) 03:33:24 executing program 5: capset(&(0x7f0000000240)={0x19980330}, &(0x7f00000002c0)) r0 = socket$netlink(0x10, 0x3, 0xf) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd000000100001000a0c0c00fcff0000040e05a5", 0x58}], 0x1) socket$inet6(0xa, 0x80800, 0x4) io_setup(0x8000, &(0x7f0000000000)=0x0) io_getevents(r1, 0x9, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000180)={0x0, 0x989680}) [ 427.434954] FAULT_INJECTION: forcing a failure. [ 427.434954] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 427.472009] CPU: 1 PID: 21658 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 03:33:24 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000000d000001005307a33d6c390836be381b", 0x1f) [ 427.480536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.489895] Call Trace: [ 427.492516] dump_stack+0x1d3/0x2c4 [ 427.496173] ? dump_stack_print_info.cold.2+0x52/0x52 [ 427.496200] ? __save_stack_trace+0x8d/0xf0 [ 427.496225] should_fail.cold.4+0xa/0x17 [ 427.505754] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 427.505772] ? save_stack+0xa9/0xd0 [ 427.505789] ? save_stack+0x43/0xd0 [ 427.505809] ? kasan_kmalloc+0xc7/0xe0 [ 427.514964] ? __kmalloc+0x14e/0x760 [ 427.514979] ? sock_kmalloc+0x15a/0x1f0 [ 427.515000] ? af_alg_sendmsg+0xa1b/0x1260 [ 427.538007] ? aead_sendmsg+0x103/0x150 [ 427.541997] ? sock_sendmsg+0xd5/0x120 [ 427.545903] ? sock_write_iter+0x35e/0x5c0 [ 427.550149] ? __vfs_write+0x6b8/0x9f0 [ 427.554053] ? vfs_write+0x1fc/0x560 [ 427.557786] ? ksys_write+0x101/0x260 [ 427.561603] ? do_syscall_64+0x1b9/0x820 [ 427.565682] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.571525] ? fs_reclaim_acquire+0x20/0x20 [ 427.575864] ? lock_downgrade+0x900/0x900 [ 427.580028] ? lock_release+0x970/0x970 [ 427.584017] ? check_same_owner+0x330/0x330 [ 427.588355] ? trace_hardirqs_on+0xbd/0x310 [ 427.592704] ? lock_downgrade+0x900/0x900 [ 427.596872] ? sock_kmalloc+0x15a/0x1f0 [ 427.600864] ? __might_sleep+0x95/0x190 [ 427.604856] __alloc_pages_nodemask+0x34b/0xdd0 [ 427.609565] ? __kmalloc+0x31c/0x760 [ 427.613297] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 427.613317] ? sock_kmalloc+0x18a/0x1f0 [ 427.613334] ? __sk_mem_schedule+0xe0/0xe0 [ 427.613356] ? sg_init_table+0x28/0x60 [ 427.613376] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 427.613398] ? af_alg_alloc_tsgl+0x3a4/0x550 [ 427.626629] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 427.626647] ? af_alg_register_type+0x3f0/0x3f0 [ 427.626666] ? check_preemption_disabled+0x48/0x200 [ 427.626682] ? lock_sock_nested+0x9a/0x120 [ 427.626701] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 427.626726] alloc_pages_current+0x10c/0x210 [ 427.636145] af_alg_sendmsg+0xb08/0x1260 [ 427.636173] ? af_alg_pull_tsgl+0xd70/0xd70 [ 427.636197] aead_sendmsg+0x103/0x150 03:33:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = memfd_create(&(0x7f00000004c0)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000200), 0x4) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) [ 427.636212] ? crypto_aead_copy_sgl+0x350/0x350 [ 427.636242] sock_sendmsg+0xd5/0x120 [ 427.646610] sock_write_iter+0x35e/0x5c0 [ 427.646631] ? sock_sendmsg+0x120/0x120 [ 427.646657] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 427.646675] ? iov_iter_init+0xc2/0x1e0 [ 427.646693] __vfs_write+0x6b8/0x9f0 [ 427.646720] ? kernel_read+0x120/0x120 [ 427.656400] ? apparmor_path_rmdir+0x30/0x30 [ 427.656418] ? lock_release+0x970/0x970 [ 427.656438] ? check_preemption_disabled+0x48/0x200 [ 427.656460] ? apparmor_file_permission+0x24/0x30 [ 427.656480] ? rw_verify_area+0x118/0x360 [ 427.656498] vfs_write+0x1fc/0x560 [ 427.656517] ksys_write+0x101/0x260 [ 427.666291] ? __ia32_sys_read+0xb0/0xb0 [ 427.666314] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 427.666335] __x64_sys_write+0x73/0xb0 [ 427.666354] do_syscall_64+0x1b9/0x820 [ 427.666374] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 427.666397] ? syscall_return_slowpath+0x5e0/0x5e0 [ 427.674851] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 427.674873] ? trace_hardirqs_on_caller+0x310/0x310 [ 427.674892] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 427.674910] ? prepare_exit_to_usermode+0x291/0x3b0 [ 427.674934] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 427.683058] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.683072] RIP: 0033:0x457579 [ 427.683090] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 427.683098] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 03:33:24 executing program 3 (fault-call:9 fault-nth:2): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:24 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000008000001005307a33d6c390836be381b", 0x1f) [ 427.683115] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 427.683124] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 427.683139] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 427.691525] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 427.691535] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 [ 427.852661] print_req_error: I/O error, dev loop0, sector 0 [ 427.878931] Buffer I/O error on dev loop0, logical block 0, lost async page write 03:33:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x8000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000001c0)='vboxnet1\x00', 0xffffffffffffffff}, 0x30) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000240), 0x4) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000280)=""/4096) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xfffffffffffffff7) migrate_pages(0x0, 0xff, &(0x7f0000000080)=0x2517, &(0x7f00000000c0)=0x1) [ 427.886774] print_req_error: I/O error, dev loop0, sector 4 [ 427.892500] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 427.900215] print_req_error: I/O error, dev loop0, sector 8 [ 427.905988] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 427.913804] print_req_error: I/O error, dev loop0, sector 12 [ 427.919693] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 427.927404] print_req_error: I/O error, dev loop0, sector 16 [ 427.927419] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 427.940914] print_req_error: I/O error, dev loop0, sector 20 [ 427.945842] FAULT_INJECTION: forcing a failure. [ 427.945842] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 427.946788] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 427.966313] print_req_error: I/O error, dev loop0, sector 24 [ 427.972127] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 427.979836] print_req_error: I/O error, dev loop0, sector 28 [ 427.985684] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 427.985724] print_req_error: I/O error, dev loop0, sector 32 [ 427.999170] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 428.000104] CPU: 0 PID: 21694 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 428.006869] print_req_error: I/O error, dev loop0, sector 36 [ 428.015298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.021114] Buffer I/O error on dev loop0, logical block 9, lost async page write [ 428.030427] Call Trace: [ 428.030451] dump_stack+0x1d3/0x2c4 [ 428.030476] ? dump_stack_print_info.cold.2+0x52/0x52 [ 428.049482] should_fail.cold.4+0xa/0x17 [ 428.053578] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 428.058701] ? save_stack+0xa9/0xd0 [ 428.062350] ? save_stack+0x43/0xd0 [ 428.065991] ? kasan_kmalloc+0xc7/0xe0 [ 428.069889] ? __kmalloc+0x14e/0x760 [ 428.073619] ? sock_kmalloc+0x15a/0x1f0 [ 428.077600] ? af_alg_sendmsg+0xa1b/0x1260 [ 428.081847] ? aead_sendmsg+0x103/0x150 [ 428.085834] ? sock_sendmsg+0xd5/0x120 [ 428.089730] ? sock_write_iter+0x35e/0x5c0 [ 428.093987] ? __vfs_write+0x6b8/0x9f0 [ 428.097882] ? vfs_write+0x1fc/0x560 [ 428.101605] ? ksys_write+0x101/0x260 [ 428.105417] ? do_syscall_64+0x1b9/0x820 [ 428.109488] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.114874] ? mark_held_locks+0x130/0x130 [ 428.119118] ? set_next_entity+0x2dd/0xc40 [ 428.123368] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.128926] ? fs_reclaim_acquire+0x20/0x20 [ 428.133263] ? lock_downgrade+0x900/0x900 [ 428.137425] ? lock_release+0x970/0x970 [ 428.141407] ? check_same_owner+0x330/0x330 [ 428.145756] ? trace_hardirqs_on+0xbd/0x310 [ 428.150096] ? sock_kmalloc+0x15a/0x1f0 [ 428.154087] ? __might_sleep+0x95/0x190 [ 428.158079] __alloc_pages_nodemask+0x34b/0xdd0 [ 428.162784] ? lock_downgrade+0x900/0x900 [ 428.166942] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 428.171967] ? check_same_owner+0x330/0x330 [ 428.176296] ? sock_kmalloc+0x18a/0x1f0 [ 428.180284] ? iov_iter_npages+0xdd0/0xdd0 [ 428.184542] ? _copy_from_iter_full+0x2b8/0xc20 [ 428.189243] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 428.195225] ? af_alg_register_type+0x3f0/0x3f0 [ 428.199906] ? check_preemption_disabled+0x48/0x200 [ 428.204928] ? lock_sock_nested+0x9a/0x120 [ 428.209177] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 428.214728] alloc_pages_current+0x10c/0x210 [ 428.219164] af_alg_sendmsg+0xb08/0x1260 [ 428.223248] ? af_alg_pull_tsgl+0xd70/0xd70 [ 428.227586] aead_sendmsg+0x103/0x150 [ 428.231397] ? crypto_aead_copy_sgl+0x350/0x350 [ 428.236081] sock_sendmsg+0xd5/0x120 [ 428.239806] sock_write_iter+0x35e/0x5c0 [ 428.243882] ? sock_sendmsg+0x120/0x120 [ 428.247878] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 428.253427] ? iov_iter_init+0xc2/0x1e0 [ 428.257417] __vfs_write+0x6b8/0x9f0 [ 428.261141] ? kernel_read+0x120/0x120 [ 428.265043] ? apparmor_path_rmdir+0x30/0x30 [ 428.269459] ? lock_release+0x970/0x970 [ 428.273455] ? apparmor_file_permission+0x24/0x30 [ 428.278315] ? rw_verify_area+0x118/0x360 [ 428.282474] vfs_write+0x1fc/0x560 [ 428.286028] ksys_write+0x101/0x260 [ 428.289664] ? __ia32_sys_read+0xb0/0xb0 [ 428.293748] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 428.299217] __x64_sys_write+0x73/0xb0 [ 428.303120] do_syscall_64+0x1b9/0x820 [ 428.307018] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 428.312393] ? syscall_return_slowpath+0x5e0/0x5e0 [ 428.317340] ? trace_hardirqs_on_caller+0x310/0x310 [ 428.322370] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 428.327418] ? recalc_sigpending_tsk+0x180/0x180 [ 428.332185] ? kasan_check_write+0x14/0x20 [ 428.336434] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.341294] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.346491] RIP: 0033:0x457579 [ 428.349695] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 428.368603] RSP: 002b:00007fc640648c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 428.376322] RAX: ffffffffffffffda RBX: 00007fc640648c90 RCX: 0000000000457579 [ 428.383595] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 428.390871] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 428.398162] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc6406496d4 [ 428.405434] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:25 executing program 4: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) clone(0x101400fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getpgrp(0x0) gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigsuspend(&(0x7f0000000680), 0x8) 03:33:25 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02ffffff9e000001005307a33d6c390836be381b", 0x1f) 03:33:25 executing program 3 (fault-call:9 fault-nth:3): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0xffffffffffffffe3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) epoll_create(0x1000) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x800000100000005, &(0x7f0000f69000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)="b3b03996ff05abb1e8b1c24b50898d8f", 0x10}]) r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x40002, 0x54) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) 03:33:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000380)='./file0\x00', 0x8000, 0x22) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r2 = getpgid(0x0) r3 = memfd_create(&(0x7f0000000080)='eth0bdev#\x00', 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r3, 0x0, 0x5, &(0x7f00000000c0)='eth1\x00', r4}, 0x30) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)) syz_open_procfs$namespace(r5, &(0x7f0000000340)='ns/cgroup\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f00000002c0)={0xffff, 0x9, 0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0a85322, &(0x7f0000000000)={0x10001}) 03:33:25 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x40, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x80040, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000015c0)={0xffffffffffffffff, &(0x7f0000000500), &(0x7f00000005c0)=""/4096}, 0x18) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000140)=0x1, 0x4) r1 = shmget(0x0, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil) shmctl$IPC_RMID(0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file1\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(r1, 0x0) r2 = semget(0x3, 0x0, 0x20) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100), 0x4) semctl$GETVAL(r2, 0x0, 0xc, &(0x7f0000000180)=""/204) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x7ffffffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="078cffff29006000000cda40fff9d4c97f135d", 0x13, 0x400}], 0x0, 0x0) 03:33:25 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000ec0000001005307a33d6c390836be381b", 0x1f) [ 428.617298] FAULT_INJECTION: forcing a failure. [ 428.617298] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 428.643303] CPU: 1 PID: 21714 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 428.651820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.661174] Call Trace: [ 428.663787] dump_stack+0x1d3/0x2c4 [ 428.663817] ? dump_stack_print_info.cold.2+0x52/0x52 [ 428.672636] should_fail.cold.4+0xa/0x17 [ 428.676716] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 428.681848] ? save_stack+0xa9/0xd0 [ 428.685486] ? save_stack+0x43/0xd0 [ 428.685502] ? kasan_kmalloc+0xc7/0xe0 [ 428.685516] ? __kmalloc+0x14e/0x760 [ 428.685538] ? sock_kmalloc+0x15a/0x1f0 [ 428.693043] ? af_alg_sendmsg+0xa1b/0x1260 [ 428.693058] ? aead_sendmsg+0x103/0x150 [ 428.693086] ? sock_sendmsg+0xd5/0x120 [ 428.712846] ? sock_write_iter+0x35e/0x5c0 [ 428.717101] ? __vfs_write+0x6b8/0x9f0 [ 428.721004] ? vfs_write+0x1fc/0x560 [ 428.724744] ? ksys_write+0x101/0x260 [ 428.728564] ? do_syscall_64+0x1b9/0x820 [ 428.732647] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.738031] ? cache_grow_end+0xa8/0x190 [ 428.742114] ? fs_reclaim_acquire+0x20/0x20 [ 428.746458] ? lock_downgrade+0x900/0x900 [ 428.750627] ? lock_release+0x970/0x970 [ 428.754618] ? check_same_owner+0x330/0x330 [ 428.758956] ? trace_hardirqs_on+0xbd/0x310 [ 428.763294] ? kasan_check_write+0x14/0x20 03:33:25 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200810000000001005307a33d6c390836be381b", 0x1f) 03:33:25 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020d000000000001005307a33d6c390836be381b", 0x1f) [ 428.767544] ? sock_kmalloc+0x15a/0x1f0 [ 428.771532] ? __might_sleep+0x95/0x190 [ 428.771553] __alloc_pages_nodemask+0x34b/0xdd0 [ 428.780190] ? lock_downgrade+0x900/0x900 [ 428.784349] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 428.789378] ? check_same_owner+0x330/0x330 [ 428.793716] ? sock_kmalloc+0x18a/0x1f0 [ 428.797713] ? iov_iter_npages+0xdd0/0xdd0 [ 428.801981] ? _copy_from_iter_full+0x2b8/0xc20 [ 428.806681] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 428.812687] ? af_alg_register_type+0x3f0/0x3f0 03:33:25 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200400300000001005307a33d6c390836be381b", 0x1f) [ 428.817372] ? check_preemption_disabled+0x48/0x200 [ 428.822400] ? lock_sock_nested+0x9a/0x120 [ 428.826649] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 428.832203] alloc_pages_current+0x10c/0x210 [ 428.836629] af_alg_sendmsg+0xb08/0x1260 [ 428.840714] ? af_alg_pull_tsgl+0xd70/0xd70 [ 428.845071] aead_sendmsg+0x103/0x150 [ 428.848892] ? crypto_aead_copy_sgl+0x350/0x350 [ 428.853576] sock_sendmsg+0xd5/0x120 [ 428.857310] sock_write_iter+0x35e/0x5c0 [ 428.861392] ? sock_sendmsg+0x120/0x120 03:33:25 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0206000000000001005307a33d6c390836be381b", 0x1f) [ 428.865396] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 428.870950] ? iov_iter_init+0xc2/0x1e0 [ 428.874939] __vfs_write+0x6b8/0x9f0 [ 428.878666] ? kernel_read+0x120/0x120 [ 428.882570] ? apparmor_path_rmdir+0x30/0x30 [ 428.886992] ? lock_release+0x970/0x970 [ 428.890982] ? check_preemption_disabled+0x48/0x200 [ 428.896008] ? apparmor_file_permission+0x24/0x30 [ 428.900875] ? rw_verify_area+0x118/0x360 [ 428.905036] vfs_write+0x1fc/0x560 [ 428.908609] ksys_write+0x101/0x260 [ 428.912249] ? __ia32_sys_read+0xb0/0xb0 03:33:25 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000000c000001005307a33d6c390836be381b", 0x1f) [ 428.916336] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 428.921791] __x64_sys_write+0x73/0xb0 [ 428.925687] do_syscall_64+0x1b9/0x820 [ 428.929592] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 428.934970] ? syscall_return_slowpath+0x5e0/0x5e0 [ 428.939912] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.944761] ? trace_hardirqs_on_caller+0x310/0x310 [ 428.949773] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 428.954778] ? prepare_exit_to_usermode+0x291/0x3b0 [ 428.959786] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.964619] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.969797] RIP: 0033:0x457579 [ 428.972975] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 428.991858] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 428.999550] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 429.006829] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 429.014106] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 429.021359] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 429.028646] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 [ 429.066023] minix_free_inode: bit 1 already cleared 03:33:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "df5a4ee9efcbc0f6ea2d95a622971554175b370849b488649394688e97a1fa14893c44bb591f5c60b3fe73c2ac6a0f5e28df3ee68efd30df5e01784c0aea39"}, 0x60) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00'}) stat(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[]}, 0x1, 0x0, 0x0, 0xc040}, 0x0) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0xf2867b033b5bf990) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x10000) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x10001, &(0x7f0000000680)="a617896f6a177149a76f") syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @random="fd976e1f5858", 'bond0\x00'}}, 0x1e) 03:33:26 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000003000001005307a33d6c390836be381b", 0x1f) 03:33:26 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0xe) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vga_arbiter\x00', 0x2040, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000240)={0x80000001, 0xa, 0x0, [{0x8, 0x7ff, 0x4, 0x2000000000000, 0x3, 0x3f, 0x968}, {0x2, 0x1f, 0xfffffffffffffff9, 0x100000001, 0x9, 0x5, 0x338c}, {0x9, 0x2, 0x9, 0x1000, 0x4a25, 0x2, 0x80000000}, {0x8, 0x7fffffff, 0x2, 0x6, 0x3ff, 0x2, 0x6}, {0x9, 0x564, 0x9, 0x9, 0x1, 0x1}, {0x9, 0x2a, 0x101, 0x7ff, 0x4194, 0x0, 0x100000000}, {0xfff, 0x0, 0x5, 0x81, 0x8, 0x1ff, 0x7f}, {0x654, 0x5, 0x2, 0x3ff, 0x9, 0x4}, {0x7, 0x1, 0x6c00000000000000, 0x2, 0x7, 0x0, 0x8}, {0x5, 0x2, 0x7ff, 0x3, 0x7, 0x6, 0x8}]}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000001480), 0x4) write$input_event(r2, &(0x7f0000000000)={{0x0, 0x2710}, 0x5, 0x34ef9bc8, 0x7}, 0x18) 03:33:26 executing program 3 (fault-call:9 fault-nth:4): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:26 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000060c0), 0x1000) readlink(&(0x7f0000001580)='./file0/file0\x00', &(0x7f0000000480)=""/4096, 0x1000) stat(&(0x7f0000001600)='./file0/file0\x00', &(0x7f0000001640)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x5, 0xc000) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000100)=0x101) getgroups(0x0, &(0x7f0000001980)) getresgid(&(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000001a80)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") write$FUSE_DIRENT(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b08956d069e0000000020a17b3059fc2c28de66ce654d316e6f646576656d3100f9ff00000000000000000000000000000000000001000000000000002c00000000000008000000000000000000000000000000001c00000000000051a717000418b9b3cc002b737973740400000065"], 0x90) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000140)=r1) 03:33:26 executing program 2: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x20, r1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000073000000000000611810000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 03:33:26 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02f0000000000001005307a33d6c390836be381b", 0x1f) [ 429.337684] FAULT_INJECTION: forcing a failure. [ 429.337684] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 429.350977] CPU: 1 PID: 21764 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 429.359494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.368849] Call Trace: [ 429.371474] dump_stack+0x1d3/0x2c4 [ 429.375128] ? dump_stack_print_info.cold.2+0x52/0x52 [ 429.380351] should_fail.cold.4+0xa/0x17 03:33:26 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x1, 0x0, 0x10001, 0x138}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000080)={0x8, r3}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r2, 0x0, 0x8, &(0x7f00000000c0)='bridge0\x00'}, 0x30) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740), 0x0, &(0x7f0000000040)=ANY=[]}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d7, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x1ff, 0x0, 0x6, 0x0, 0x0, 0x5, 0x8000, 0xc, 0x7, 0x0, 0x7, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x1, 0x5, 0x0, 0x7fffffff, 0x7, 0x101, 0x100000000, 0x2, 0x4, 0x0, 0x5bb, 0x1, 0x8, 0x1, 0x0, 0x9, 0x0, @perf_config_ext, 0x1, 0x5, 0xb7, 0x7, 0x5, 0x0, 0x7fff}, r4, 0xe, 0xffffffffffffff9c, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r5 = request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r5) 03:33:26 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020e000000000001005307a33d6c390836be381b", 0x1f) [ 429.384433] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 429.389550] ? save_stack+0xa9/0xd0 [ 429.393187] ? save_stack+0x43/0xd0 [ 429.396839] ? kasan_kmalloc+0xc7/0xe0 [ 429.400751] ? __kmalloc+0x14e/0x760 [ 429.404487] ? sock_kmalloc+0x15a/0x1f0 [ 429.408480] ? af_alg_sendmsg+0xa1b/0x1260 [ 429.412723] ? aead_sendmsg+0x103/0x150 [ 429.416718] ? sock_sendmsg+0xd5/0x120 [ 429.420628] ? sock_write_iter+0x35e/0x5c0 [ 429.424877] ? __vfs_write+0x6b8/0x9f0 [ 429.428781] ? vfs_write+0x1fc/0x560 [ 429.432509] ? ksys_write+0x101/0x260 03:33:26 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020a000000000001005307a33d6c390836be381b", 0x1f) [ 429.436328] ? do_syscall_64+0x1b9/0x820 [ 429.440396] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.445792] ? fs_reclaim_acquire+0x20/0x20 [ 429.450140] ? lock_downgrade+0x900/0x900 [ 429.454314] ? lock_release+0x970/0x970 [ 429.458309] ? check_same_owner+0x330/0x330 [ 429.462863] ? trace_hardirqs_on+0xbd/0x310 [ 429.467199] ? sock_kmalloc+0x15a/0x1f0 [ 429.471186] ? __might_sleep+0x95/0x190 [ 429.475187] __alloc_pages_nodemask+0x34b/0xdd0 [ 429.479877] ? lock_downgrade+0x900/0x900 [ 429.484040] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 429.489063] ? check_same_owner+0x330/0x330 [ 429.493398] ? sock_kmalloc+0x18a/0x1f0 [ 429.497384] ? iov_iter_npages+0xdd0/0xdd0 [ 429.501636] ? _copy_from_iter_full+0x2b8/0xc20 [ 429.506320] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 429.512299] ? af_alg_register_type+0x3f0/0x3f0 [ 429.517015] ? check_preemption_disabled+0x48/0x200 [ 429.522043] ? lock_sock_nested+0x9a/0x120 [ 429.526307] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 429.531861] alloc_pages_current+0x10c/0x210 [ 429.536301] af_alg_sendmsg+0xb08/0x1260 [ 429.540392] ? af_alg_pull_tsgl+0xd70/0xd70 [ 429.544763] aead_sendmsg+0x103/0x150 [ 429.548599] ? crypto_aead_copy_sgl+0x350/0x350 [ 429.553280] sock_sendmsg+0xd5/0x120 [ 429.557001] sock_write_iter+0x35e/0x5c0 [ 429.561071] ? sock_sendmsg+0x120/0x120 [ 429.565064] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 429.570616] ? iov_iter_init+0xc2/0x1e0 [ 429.574615] __vfs_write+0x6b8/0x9f0 [ 429.578352] ? kernel_read+0x120/0x120 [ 429.582291] ? apparmor_path_rmdir+0x30/0x30 [ 429.586708] ? lock_release+0x970/0x970 [ 429.590728] ? check_preemption_disabled+0x48/0x200 [ 429.595797] ? apparmor_file_permission+0x24/0x30 [ 429.600660] ? rw_verify_area+0x118/0x360 [ 429.604818] vfs_write+0x1fc/0x560 [ 429.608389] ksys_write+0x101/0x260 [ 429.612030] ? __ia32_sys_read+0xb0/0xb0 [ 429.616109] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 429.621587] __x64_sys_write+0x73/0xb0 [ 429.625489] do_syscall_64+0x1b9/0x820 [ 429.629388] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 429.634764] ? syscall_return_slowpath+0x5e0/0x5e0 [ 429.639700] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.644569] ? trace_hardirqs_on_caller+0x310/0x310 [ 429.649599] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 429.654633] ? prepare_exit_to_usermode+0x291/0x3b0 [ 429.659659] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.664521] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.669716] RIP: 0033:0x457579 [ 429.672931] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 429.691841] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 429.699562] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 429.706838] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 429.714119] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 429.721418] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 429.728704] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:26 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff029effffff000001005307a33d6c390836be381b", 0x1f) 03:33:26 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0205000000000001005307a33d6c390836be381b", 0x1f) [ 429.927662] audit: type=1800 audit(2000000006.710:478): pid=21771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor4" name="file0" dev="sda1" ino=16581 res=0 [ 429.959199] audit: type=1804 audit(2000000006.740:479): pid=21766 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir508664740/syzkaller.T5AFlF/434/file0" dev="sda1" ino=16581 res=1 03:33:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002540)={{{@in6=@loopback, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000002640)=0xe8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000004c80)={@broadcast, @remote, 0x0}, &(0x7f0000004cc0)=0xff5b) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000657e0a8159b4a550000000000000000000000000000003700f5d553f2412af3750000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4b7f}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x800}, @map={0x18, 0x6, 0x1, 0x0, r1}, @generic={0x3ff, 0x8000, 0x2, 0x9e2}, @map={0x18, 0x9, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x95, &(0x7f0000000100)=""/149, 0x40f00, 0x1, [], r2, 0xf}, 0x48) 03:33:26 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7, 0x4800) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80000101005, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000000)={0x0, 0x0, 0xc7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r2, 0x80000, r1}) pipe(&(0x7f0000000140)) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000000c0)=0x534efde5d2bae475) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000240)="80fd02090040f04607208616da524ed4f3152e22bd0bfade0e76d08949c293572c7478d3194fc0be45eb974b02ece821dec4a58fe29212932e09000000d024ac6822", 0x42}], 0x1, 0x0) 03:33:26 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1000100000010, 0x3, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x9, 0x800}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={r1, 0x3, 0xa9, "5c8dc708bdcf253ed81cffa771631ae66bc493e141e8a3790790c11c0762b96f4790689db8c1712c83fe6bcd2ac58467e4277e5ed4830b76a7d81f0fb3195956dee6ab328de1654526f5b13f26809ca572cfc1a6935badc36d1a0b6de8ab01eb7028f39e63a4d7e0ae0a838d3e1544dc40a1846f1243e3b41152b31893fa47cc0b0d27ff8f06897acdf3daa4621b6dc92ff1ce3c659b91c699b783e9354c531603e4d90bd92a1da1ca"}, 0xb1) write(r0, &(0x7f0000000100)="1f0000001e0007f1fff57f02000000000000010053d6445f89390836be381b", 0x1f) 03:33:26 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0208000000000001005307a33d6c390836be381b", 0x1f) 03:33:26 executing program 3 (fault-call:9 fault-nth:5): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:26 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200030000000001005307a33d6c390836be381b", 0x1f) [ 430.092410] FAULT_INJECTION: forcing a failure. [ 430.092410] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 430.115812] CPU: 0 PID: 21803 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 430.124341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.133704] Call Trace: [ 430.136323] dump_stack+0x1d3/0x2c4 [ 430.139979] ? dump_stack_print_info.cold.2+0x52/0x52 [ 430.145179] ? perf_trace_lock+0x14d/0x7a0 [ 430.149451] should_fail.cold.4+0xa/0x17 [ 430.153521] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 430.158646] ? save_stack+0xa9/0xd0 [ 430.162280] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.167835] ? check_preemption_disabled+0x48/0x200 [ 430.172848] ? __kmalloc+0x14e/0x760 [ 430.176566] ? debug_smp_processor_id+0x1c/0x20 [ 430.181262] ? do_syscall_64+0x1b9/0x820 [ 430.185328] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 430.190699] ? zap_class+0x640/0x640 [ 430.194410] ? zap_class+0x640/0x640 [ 430.198140] ? zap_class+0x640/0x640 [ 430.201869] ? fs_reclaim_acquire+0x20/0x20 [ 430.206208] ? lock_downgrade+0x900/0x900 [ 430.210363] ? lock_release+0x970/0x970 [ 430.214337] ? check_same_owner+0x330/0x330 [ 430.218661] ? trace_hardirqs_on+0xbd/0x310 [ 430.223154] ? kasan_check_write+0x14/0x20 [ 430.227396] ? __might_sleep+0x95/0x190 [ 430.231386] __alloc_pages_nodemask+0x34b/0xdd0 [ 430.236056] ? lock_downgrade+0x900/0x900 [ 430.240208] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 430.245237] ? check_same_owner+0x330/0x330 [ 430.249679] ? sock_kmalloc+0x18a/0x1f0 [ 430.253701] ? iov_iter_npages+0xdd0/0xdd0 [ 430.257955] ? _copy_from_iter_full+0x2b8/0xc20 [ 430.262630] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 430.268603] ? af_alg_register_type+0x3f0/0x3f0 [ 430.273273] ? check_preemption_disabled+0x48/0x200 [ 430.278308] ? lock_sock_nested+0x9a/0x120 [ 430.282559] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 430.288126] alloc_pages_current+0x10c/0x210 [ 430.292538] af_alg_sendmsg+0xb08/0x1260 [ 430.296616] ? af_alg_pull_tsgl+0xd70/0xd70 [ 430.300949] aead_sendmsg+0x103/0x150 [ 430.304755] ? crypto_aead_copy_sgl+0x350/0x350 [ 430.309436] sock_sendmsg+0xd5/0x120 [ 430.313155] sock_write_iter+0x35e/0x5c0 [ 430.317222] ? sock_sendmsg+0x120/0x120 [ 430.321237] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 430.326788] ? iov_iter_init+0xc2/0x1e0 [ 430.330782] __vfs_write+0x6b8/0x9f0 [ 430.334498] ? kernel_read+0x120/0x120 [ 430.338388] ? apparmor_path_rmdir+0x30/0x30 [ 430.342798] ? lock_release+0x970/0x970 [ 430.346782] ? check_preemption_disabled+0x48/0x200 [ 430.351820] ? apparmor_file_permission+0x24/0x30 [ 430.356672] ? rw_verify_area+0x118/0x360 [ 430.360825] vfs_write+0x1fc/0x560 [ 430.364383] ksys_write+0x101/0x260 [ 430.368012] ? __ia32_sys_read+0xb0/0xb0 [ 430.372080] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 430.377538] __x64_sys_write+0x73/0xb0 [ 430.381428] do_syscall_64+0x1b9/0x820 [ 430.385318] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 430.390682] ? syscall_return_slowpath+0x5e0/0x5e0 [ 430.395612] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.400460] ? trace_hardirqs_on_caller+0x310/0x310 [ 430.405481] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 430.410502] ? prepare_exit_to_usermode+0x291/0x3b0 [ 430.415522] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.420373] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 430.425561] RIP: 0033:0x457579 03:33:27 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000000f000001005307a33d6c390836be381b", 0x1f) [ 430.428771] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 430.447674] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 430.455382] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 430.462701] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 430.469988] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 430.477254] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 430.484553] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:27 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x6, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000240)={{0x0, 0x8}, 0x61}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0xb}, 0x80000000}, 0x1c) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="12000000000000673998d8beb2da1e730f00c304809c00000000000400000000000000000000000000000000"]}) 03:33:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) sendmsg$nl_generic(r0, &(0x7f0000001640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x1474, 0x10, 0x10, 0x70bd2d, 0x25dfdbfd, {0x1a}, [@generic="9994ffbce18d74764b16753022b6fed7e26b70df0c24faeb5f5bb6df27f067b97fdd74b624c6dd64713c1965ea82913f965df10982f8f90ce1c54b2cb16c57301748177ccbff2fb9ef7ec4aba9ac160daa51ad260af1c2a301a04e8ee872f4cde3e3d0924744", @generic="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", @nested={0x12bc, 0x68, [@typed={0x8, 0x36, @u32=0x8}, @generic="6fb71f182ef564a545bbb107d44ebc3bfef5cf971ef85d54f9d8877f4254c620bb0655288f718e41625d04277a836e1d71cb9cfed62c2104c904ee43de8f05fee4d48e0864eb57099247cabbf36ae89f0b4b45616027ab57e1aecaf0f3ea3e24f02d60dda07298c8cad001a3207909875d5615ef899d", @generic="00eaba8ddab42e5b47e02a5e19d444a929c22eac260502de62fe063cf8467308013f030d3589117ae590624757bdeecaeb08f67c9a0179430b71b17b62dfb03d9573d6c199a62d318875e8721a630649dd12dca146c90424f5ddad9e9995326b6524e8d914aa65336dd80e0ed86a8ed151371aa4a14210decd680673a7796d6b0ac78a52ba32f85e91a0239976413e99bb96530431d70e7ff1af182510baafd2f6270838eb97d4b7caf4fe500d772100a3849e8deda57446c6f717cb9012dcd04acff9f55e673eb0b910501ad41d2ea0a0fa08cada7932edc3668bfea54bc6a9ff", @generic="11946490f05aac9351908dc7f401afc200f0e9a626fefd6b0714e7255b4a8da013f2e2f69e9c77f5dacc314450dce2c7266ec28e9a27a095ab32817397a3aa1d3d2cd732f6c0675bc7b0136cbe70601266457da68d689449ec6859879b9dd4580afcf8fd16c8d14ed86cf85e5c509328e018f881769317094f6c7ab5a46d206069a19dcabec9a9416684f1b1109370108cbe6cccd2a54f78fe33de13c17008b382f4db5c7b487f68080752f99e410be7043cc897d5ee68e3dbb8a957de0d77677f12a43f9e994e9e7e89f456ee6aa21e9e62231f5062815269aea5a21c6f44742dec66b7524e3f36821cf5b3f2e3", @generic="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", @typed={0x14, 0x70, @ipv6}, @generic="cf201863ddcc6a06f6423be65750f277c915355615f15bbcdcb84adf5d444534c58cb6050944f9fe554bb85532f5681783d8505dc17f8d2cf6b3b5961e402a65df2eaa1aca1048a2fc8ae0aa96c199ce00de5c11d4f1"]}, @generic="4aa8e9a67cb8ad4b9c0d915d4b447e149493aaf6db212722faa271f510777ab5a070f166ca1a03aac1f1e54abaf444c3", @nested={0xc, 0x2f, [@typed={0x8, 0x24, @pid=r1}]}, @typed={0x4, 0x5b}]}, 0x1474}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000180)={0x5a4b}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)={0x5}) 03:33:27 executing program 4: r0 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) clock_nanosleep(0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) getgroups(0x2, &(0x7f0000000000)=[0x0, 0xffffffffffffffff]) getgroups(0x3, &(0x7f0000000180)=[r3, r2, r3]) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x52000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r1) keyctl$chown(0x4, r0, 0x0, r3) 03:33:27 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000d0000000001005307a33d6c390836be381b", 0x1f) 03:33:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="b05edda0272ed5d9532642e90f9602e9b6ee87810db11f4b3e50491923cc736c003ec9fdadfe87833cde0a692c64b6d111a2ba0b3ed7b8983689948c70cf76ff1e45ae66664eb6930c6d3fbfad4ba82f1567a9c75ec5fffecc992932960a4dab95fc55185341abee155ad28a298270ced4cce11591ebe1f137507dc8698db1543743467f6e4279b2b604745cf283186e4baf68d39b7227975c62b39337fddafa9af79b9b0d3ec7539b88285c9014ab667a43fc8aa0acbf9f5d8ae8f904bffed9d78bcfe07e6ea4fa7fe62528d661bcc4630fdf66b72bc88971e73ed4838dca64c27d42d3d3b82415ab1de92989471cf985451d7fad95433f0d8622f0cd9071e8") close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x0, 0x0) close(r0) 03:33:27 executing program 3 (fault-call:9 fault-nth:6): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:27 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020c000000000001005307a33d6c390836be381b", 0x1f) 03:33:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}) 03:33:27 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./bus/file0\x00', 0x581480, 0x82) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000000)) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x8001) ioctl$int_out(r2, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105517, &(0x7f0000001000)) close(r2) 03:33:27 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003a40)={{{@in6, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in=@rand_addr}}, &(0x7f0000003b40)=0xe8) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x7ff, 0x1, &(0x7f0000003940)=[{&(0x7f0000001940)}], 0x0, &(0x7f0000003b80)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) [ 430.757310] FAULT_INJECTION: forcing a failure. [ 430.757310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 430.795479] CPU: 1 PID: 21838 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 03:33:27 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000000b000001005307a33d6c390836be381b", 0x1f) [ 430.804031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.804040] Call Trace: [ 430.804067] dump_stack+0x1d3/0x2c4 [ 430.804098] ? dump_stack_print_info.cold.2+0x52/0x52 [ 430.824833] should_fail.cold.4+0xa/0x17 [ 430.828926] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 430.834050] ? save_stack+0xa9/0xd0 [ 430.837691] ? save_stack+0x43/0xd0 [ 430.841328] ? kasan_kmalloc+0xc7/0xe0 [ 430.841342] ? __kmalloc+0x14e/0x760 [ 430.841362] ? sock_kmalloc+0x15a/0x1f0 [ 430.852922] ? af_alg_sendmsg+0xa1b/0x1260 [ 430.857158] ? aead_sendmsg+0x103/0x150 [ 430.861167] ? sock_sendmsg+0xd5/0x120 [ 430.865076] ? sock_write_iter+0x35e/0x5c0 [ 430.869328] ? __vfs_write+0x6b8/0x9f0 [ 430.873231] ? vfs_write+0x1fc/0x560 [ 430.876960] ? ksys_write+0x101/0x260 [ 430.880756] ? do_syscall_64+0x1b9/0x820 [ 430.884825] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 430.890191] ? cache_grow_end+0xa8/0x190 [ 430.894245] ? fs_reclaim_acquire+0x20/0x20 [ 430.898565] ? lock_downgrade+0x900/0x900 [ 430.902704] ? lock_release+0x970/0x970 [ 430.906700] ? check_same_owner+0x330/0x330 [ 430.911034] ? trace_hardirqs_on+0xbd/0x310 [ 430.915342] ? kasan_check_write+0x14/0x20 [ 430.919578] ? sock_kmalloc+0x15a/0x1f0 [ 430.923551] ? __might_sleep+0x95/0x190 [ 430.927540] __alloc_pages_nodemask+0x34b/0xdd0 [ 430.932206] ? lock_downgrade+0x900/0x900 [ 430.936355] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 430.941366] ? check_same_owner+0x330/0x330 [ 430.945680] ? sock_kmalloc+0x18a/0x1f0 [ 430.949678] ? iov_iter_npages+0xdd0/0xdd0 [ 430.953915] ? _copy_from_iter_full+0x2b8/0xc20 [ 430.958581] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 430.964539] ? af_alg_register_type+0x3f0/0x3f0 [ 430.969204] ? check_preemption_disabled+0x48/0x200 [ 430.974211] ? lock_sock_nested+0x9a/0x120 [ 430.978435] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 430.983980] alloc_pages_current+0x10c/0x210 [ 430.988392] af_alg_sendmsg+0xb08/0x1260 [ 430.992453] ? af_alg_pull_tsgl+0xd70/0xd70 [ 430.996776] aead_sendmsg+0x103/0x150 [ 431.000562] ? crypto_aead_copy_sgl+0x350/0x350 [ 431.005224] sock_sendmsg+0xd5/0x120 [ 431.008936] sock_write_iter+0x35e/0x5c0 [ 431.013002] ? sock_sendmsg+0x120/0x120 [ 431.016985] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.022509] ? iov_iter_init+0xc2/0x1e0 [ 431.026472] __vfs_write+0x6b8/0x9f0 [ 431.030176] ? kernel_read+0x120/0x120 [ 431.034053] ? apparmor_path_rmdir+0x30/0x30 [ 431.038452] ? lock_release+0x970/0x970 [ 431.042416] ? check_preemption_disabled+0x48/0x200 [ 431.047421] ? apparmor_file_permission+0x24/0x30 [ 431.052296] ? rw_verify_area+0x118/0x360 [ 431.056433] vfs_write+0x1fc/0x560 [ 431.059974] ksys_write+0x101/0x260 [ 431.063614] ? __ia32_sys_read+0xb0/0xb0 [ 431.067672] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 431.073138] __x64_sys_write+0x73/0xb0 [ 431.077017] do_syscall_64+0x1b9/0x820 [ 431.080897] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 431.086249] ? syscall_return_slowpath+0x5e0/0x5e0 [ 431.091191] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.096038] ? trace_hardirqs_on_caller+0x310/0x310 [ 431.101044] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 431.106066] ? prepare_exit_to_usermode+0x291/0x3b0 [ 431.111075] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.115922] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.121099] RIP: 0033:0x457579 [ 431.124385] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 431.143277] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 431.150972] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 03:33:27 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000003480)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x42, {0x2, 0x4e21}, 'veth0_to_bond\x00'}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001700)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001780)={0x0, r0, 0x0, 0x9, &(0x7f0000001740)='vboxnet0\x00', 0xffffffffffffffff}, 0x30) r4 = getpgid(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002c80)={0x0, 0x0}, &(0x7f0000002cc0)=0xc) sendmsg$netlink(r0, &(0x7f0000003040)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000002f80)=[{&(0x7f0000000200)={0x200, 0x3a, 0x310, 0x70bd2d, 0x25dfdbfb, "", [@generic="e35a6978b9993cb04a6dbc24f05cfd50d31006a05811300724fcf0c708ad5f9a7c41ad6de16802df93580da28da8174eda4dc7aa56ea9ac0bc0fa49e31e3e688f31b207542e81bb39aff191323c89bec4a5e7e290026bb519a00a6cc191287a27fe877f11ee5e066ebc77e5b16ce655c8b01dd93e5f5dae6fbaab1fd77ad1c5b9f240ecd6d64684d6654f931e2ce4be4b5ffb3c60d1df006413c10395a616adda9ff2cf3d315ad9f32515df14e10b755d36d21efdd52717994bf19b2d87dcc84ce", @typed={0x8, 0x5c, @fd=r0}, @nested={0x8c, 0x25, [@generic="f6af29962ce8bc94b5730b19143657f0fff8069d181e39c33170e95eccc6280ba1ad17e27e8b533b56e3c3ccc97c518193e725b8276ee862b83efcc410e388697c703d4ab2", @typed={0x40, 0x46, @binary="1647a552d1693ee741c88e2c6ffa9fc5f54d8e948876cdec2a4e2dca49ca409ce3b476bf2629778b33b9269c2d064d17ad0e6a94a6f9715e0d3089"}]}, @generic="74a508e887dcb7934d24dc8cafab791d6fb0b3a76ae46941640db6be0397a52f8841daa199e4c0f0f221ba9c44264a6180c110cd832f8885b17a4641f57dad6b85c45a0b26", @generic="caa6d1c0a9c4826b53ca5ec5c2d63434ca005ef5a9bfa677622a16e380a7c1ff8b9d2f2d365d999184452d4fa614a0c769921a5aa601ab788fcb49ce6e1c098682a16eb887b730d9fcf5ca", @typed={0x8, 0x64, @u32=0x85}]}, 0x200}, {&(0x7f0000000400)={0x114c, 0x25, 0xc00, 0x70bd29, 0x25dfdbff, "", [@nested={0x113c, 0x2f, [@typed={0x4c, 0x5f, @binary="fa1a8221973ea394872775f49f54ee0491526740a2cf47c84780e10f879fd0a33e38a38092f044ccf5d6e79ac37208090cbb67b6ff12b71e6091c485353caeb5472158f841ba0645"}, @generic="d22b113e5cbfb8beb6080e63a158c353b4d42673be8721d7dc106863a3b8f8c0497a94e4d8696f79e703db7b6cfd4717ad1151dd6d92c8f3a5c2bbc4b6a110af4ae9afe02d2a1f6136115de653d090bb512860a2c300db46e60e590a949583c3ed8ab527fc9b8bcaa07b2fa0384bad43e788c826ab384bc608b37574836627ea8237ed43da0174eca19aad0bfad0fb97c62b431db6525a630bf91924bdfb6203b6d93076d0a20000d065c51d6cc02a0dfb1ed94a8a20b237143d60c5507e155038ad7c805b6019544652072702614e5080964c6bd0831da5a29786921392c4d262a36fc489caad200539d1ec09ddd95f511633af53bce8f2e6f993937575b68e9ac04b835308198a96e083839571fe89de97205eccf0482f8ca2335d916ca18d9350b7dbea7eae4b4f6844228940e5ff0e6127a34f6c0f68eb45110b050d868c8c52193a654a495c41c99f4873611a2d1ffb9d564a119360c643c81be9ea75c0439203023ba8c1cc3907c9f64fbadfe444ae9b83ab2b23107b1bc27095b5f818c8abe3d34c1ff59790af84361d48e9923d4c96b306b136a8b6a2f8a2b5ba7672faf142269d5d145aefa829475a1a95f488fc067f1de443c86a62801fc46e6ba29dc768a7b8a72938b9b5ac184c07aeef4c2d77c69e7494921274fa66a9056861e1c5cfd24165dcc76ded3985db28a318bdcf7c6d102c084684a031f7644d930089710a2779cd3b70dfa030fd726ebd6512137e937e6d8b3a21d584170bbde7f329328525f01e5889d15ce9fba5124db11532215a1922212ede3fad111760277fc2806930af0ad4c668fefc2f6b96d10bc2c800cf8286a3429efcd0e4d603a0ed593039fa1603d04a69d4a76a74ac3e29946a05c1895d7f9ddda16b6cae477a295ed99273ed1aa50b1456962e6edccca5291a89516615129a5a4c743ad72df8337cec2dc3de25126cba14884b724675c79b5b93052779a4fa6848b3bddcddde827f3e23021aa8aee3449902b86b71b1532b66ee13e0046d32ec2f29307f73f131263a7152c81261352cc080f536a49d2e8c24e385249cc9e7c18612f7813d2c5af1ed454c0f102dd9ac49be9db78f5b8f1f62bb94472c0450ae3f65807b88bef6128f94daf497c1d18d29fd8778590e6889769d56a80dc4fb2058eefd8e69e4b05484f7ab25c6432667af2cb6eef1bf7895f630bcec97fcbabffb9271a522246ccb0d4c53d89b103923217f6556d58c7e84798f05eb5e325ced9c3238d7163ad17a4c45ef3f37a9ce0621c3f5ac9347898a867ce1e0fc83915025619b3bf46958f84355ee9bb0715464fa94e89cf25b172e194378d47286d9af83307136e806b85a9f5dcfaee845dd02313e0278bcc223311ac2cf2e3eb929ff060a986d638a7aff0f3a3b33d59cfee27165477868062f7ebced7703febb18d8246336afad16981fce4b81e338f6b890eace6c111632b456f86d623052d9973c2c69820c2332f8568709743b7165bd055a58b2882a770b238a55324f892ad4468890a68de0baef2e5848dfbb85d431e959ddc9263182a27fd0f207d82d0cc7c799a6900481f249ea9f1daa892808dc5bf0f804e0638737804aa1cac163d6320fa8388a223ec8b5b10a9f7f2443e704b9d798d74b24c74f049ca65f126166870db332db55d4130909f3b62cecb5c3eb8f4d55cd310dff2b20f813d7753ef30f5034df6aeb3ddfb4476714597ba5bcefad57eda41e74129b236060e72d2e85227f6d9eed49f3e521fdc48eafe9d34acd80953478753a09b3958960a0504670f74a56ac3d75709b821bab7fcb9d166a762c6070d67c2574b2f4b3d472fa87335f0143a8aa4af099b1f37afa880bdf361d313ee5d4f3be775d5f459be979a9a351ec2f8bd826795b9d4594dc1d45b0bf5695c77ec64a2b0f471412de6d7c846c95b8fb505e07538b738fc51c01180606b81185365e20601011aba53464d68e78b71cc070748d9f599ac6142596628235645c0d2fb1e330a7522b4f60488ce93e075ca7d4264130d51bd4fb48cb255588ce373a6a20cd154ca8ff39b0a3c4e96f82e721bffbf0567acb396c4ceb7385781631cf99364078bc642ed66dffb8ae02a98cdf8fc4ba58458ce76950a01fd6fc8c4343634a80907c70a779a66fac6d659af3e231706ddf9201f7ea78fb51c29ad4f1de3f4930d087ca9c5e23543d23ef1af95cd1a6be83ddcf515182835a406535903f4520670c14caccb54928c7c40835233bd752387d38776c9980cfbf15a886c2527703402ca8d959330ce01b01c8977bf8fd2d7361c32f166093c2a6723dfd80866762743908e26cfc284d54f19e42e57b08438252596799b51a70d63b4b7e127573f99e04aa7d241b47741f8c567cececb3bc929e20d6aa742e1ccd611b28613a71fb58c3d254ecc60320f9321d4f67deca6fa2bf5f36481ce43acbcdc5ca73e0269f5e778dfb16da370d4f4ab887bf6a59bc75082d6e6ecd5692429fb2bb8024b7dbe981a84a298ec86201855e0a3f751fb91e949a85635da692246f59f4e849af637e6c0ab3f90bc2ed3a44d1ea08d1492b871085cf32b0b89ef9fa129d71e701ef1ad11f0130b239afb1e062e4a32f2d8f134c2d118e5a6433fc119289cb58b44c8d4131ce00cd39d0152f0cf2dd6f8fec73dcaec485d9fea9f78677f5f7ebcf7a52e814b8e2ebd38d49d9d23e412831b2530deafb5c6685332c8a0fcf81ca50fc01f9b0b8ac359f931a7a8d38ad9d4d9973f9a2f01201398d25dee3eb446ab3fee7a1e535e889e1aaa139f6d423b298794ee437611a09c81b2700eb2ed59e3debcfb3d10bdc7d81bac84484e28be454b43eb811530f3b709a8f85ae1494ee1b3ded1d5a59bdcf15e37c81a70f62554bf80bbe9d7c45715aedb889549644aa96eccf6b3c99bf14016b7c94f24016a7449fbaf838442046f73573b25b03baa20789a34374b3a69faf704cfba39e7d01abbb48605d066a80525886ae6ca6270679ae2090bdd58b35c910a061ab866bfcc9212b1f4229b979c88a92b004fed11cb8c0bdfba64b23a82d3bcce7a07152c9918efd30b8650a656e2ecdae0f637e864998be68d8b6b0a58f4cf835c0330a591d887a3a701d512c045ea8c200508b24a08dc61bd3fc231ee1558eee755ee441982760abd0fc957c4b871dde37765b8b150db256c6a35e43561c0dc543d1a9dde1bf3e281a6ac1f7ed57f614c29657feddf2b8e936366f57b09026e6029b0048abaddc0df305ceecebe24497a90949d450a3bbdd138a4348925420d5d9bb740f1938ab2ea285b6a34ecc38425f65203d47a31747f34e1e575347802b3a1a6d145e7c92d0b2e381fc32f210ffb624c334dc953df0aa869532e354dee4b8ac1c46bf9842ba16203232c7ee7ffa5694cf1a60478e36d33c347b6603cf649b0dcf1a473fd042cad8fbdc472635de85115853b9ac5f1c31e81843151f0e3093b392ab165ce5ec79671115d98c5d8abe8b8bbfa6aac9ab0871ea8bfd1a8eb5b4ddbf1b11146975e058d521c8d9db06e46d49b4bceb107463b3e768099561f01c789f8c3d691b9d522209e47782a71c94c59bf9d9e2b8eee1c7a0608a08d2844d6f34a49850ec5bd94837a9e4d66e0ad24606b447934ec143dc8faf968c1c3a6bccbce14d9f87f23f2e930b64b9550c03ae59b1fbe9eb7d397f02385e1710bc24eb4974f1855c299b038a8ff1e3cc2f3fcf0988514c99ed2a6fb296dfae73b80e197a0f2de754db6cf0f8ef209bdd327bfd57b2328f047e54d535339d4482723a6d3b14ba1a3fc67af3822cb1dab52a6755afd6a4ea8345f57078aa4d9422d97d0212040e010cbd239b696a9c9bcd7bd6baba0b5936eda2c1059cdb267aee0910298855e0d1ca0bd5c2eab3168fcb93b486fa77dbce0f0fc00401035d94c07b773636db43ba1bc8da6d185597d74471539affe825fbd1f35403c899306fb7674f9f1eb982531d290c32f3a4bf33cad2d4d894d4325e6cbf58fc6719fe73c4e468b7889edba73e1fbed858da37b46a54b1c657d2ee00f64e959e71e928717e98ddad8b3b71391206e7fa76f090552cd2537be92667a96f925f0b5a3b1f18caceca4017b4362e598df3f85b9e7923461dc257edcbb2e8c46765b0398a444070b7eeef0d70ebdebda6040a798400d586e1d75baa82b8d1623315994bd6733205ef45d4690e5337bb3528776cab9c5e93d9fe4137ee994cf2b744b8ce4cbe7b808628f3017aa49bf003c3f43764c9a674449de043e89c6e089d480a3e51b6e5f366a084a141b7ac10d9e8bbe0482a9373468ccf89ef87a3d74db1f2b12d75a608d724e54615450be84b5a6518a1268df976f2db5ec4644bff259bf7bef0bf4ee97fb093f3a5e99bd34c182e1e2ff2da79a851b16b448aeb1ca2d2a541627099a587cc5153953b0a9d48709f82e86cd08d135e79a7651d2928f3cd885b01f862d9794287208177530548db97b53f118e229c15d0f45f4784f09d6982a8f22b965eb2ea7e393b6a3adb0395f9bc9d44994c746548a1085ad75bf7260642d89c1192aacc21d09b0814fafe36a0283cba406145bf4e5dbb5aec24e6a4db0e4c591016a2f2785065d5ed275fa73ca8eee79caefb847fa53409a81a44d8f928d4a84b18aeb1d8f4fe03dc358391cb36ef2c6c0f5bbb4f5a452c3af1064a60662ddd4c6df1499fd398f19460fae91a5d4dc84321df91def19f4c32aeaa50f7413f1b14970a9f7b303e962e57d4e886aad4808ae19d05aa0bcf74f8ab93511a317bc4b356f0df878cafffa5b4f60feafbd83ab40af822cc3979910dfdf24c3939b2582438ddb27d3229b83a533426c12d1b34c334ad52d75c52e0e3135d4543b0b4b2d6728a539d6fd00686a4ae75c25de0a796ea10794250283b618871a107e3e40fc2322921f18312426cdd43f19df7d22dc8e4e626b648374477a75a0991dc4855840f2c86d70393e9b47a18dfff7a8770a02ed9fae043034d99558d0fe0c7ec2e58539ceb92f09112c64f1e4f527d29a92e2df00a5b5baccf660f4b1cdca1aa22315c542f255eae7ce76f1a7db70b038b70256b32808d6de4e34ba4b3b7661bc949ca4ad29258963b3c35729e875b0ae58f5934eae364ccad9fcc9fdf26d861b974f08121a6ebc27b84d2944e31635b0f38fae3c068771452d6f366e8c118707e428b2ede68e27e847958585865db5f40519a2bb810429674b860ee2ce4b2ec691d42e441457d45eeb3302c8b6373a38e2b7fc33cbfe2f9bc22287653b724ce7a4c1db761ccd78c32d9aaf91023f050b59cd590a2c956a13c6a60abcb4d9ef0350641276d4738bf8b4ac083f1bed0edd6772124fd7a364a18d951e39b87f2a51dce521958341cae3d299deb86cb7e0b867bccb9e48c9a4b686ebd7625922a1a3a3bd8fa11daf663c1ca6446eb45195cea83771ba38ce0b89ba1ce14f68b036514a21318e482e5625b0b42f2e15ca54eb877444eca77c7613e55810e6bc75b0356fd3e0b0ddee167a9e2225d6b161604cec9cfacd17cec18fd6c8b1cf5b55e40a87c294382930069a8b2d1dd80450fe0b4a0211d0dcf082eb13323a84f99a4f673d75c39a6e84fd9c5cc8d4875d7b833774abb488e4d14f13e9a468146bcdf3757e41c5e4bc96ee19f701938614e8f5f8284443f839b46689930cbf6324ad64874ed79880ed5f20fdc909f866df968d3b369b494feca9918a39ea705c6a27282c4490275c26c4b3cd1bc88c7a6f868993b08dfcb5ba85c570fc69a3ff36ab08dcdb8a4eeaa689fdcb746b2af131c", @generic="1f21ffb159123bdb69256ed7c78e6ee1f9affdf2a620ca6d15b9ad1370137305427b0df8288533fcb19952d3a849d4a70c1430e0bb09da288e73d061e9f0053183ed4867688bb1ceb92e3f390cc038352a1effd12f2a69006c8608d401b8eab1cee85bc30f01e44df4578594e761d82a7eebf3b06665436be7a5c22faba38986cd0b461d0ab5fd78916c6c6e4d3872a768ccddef7a108f75112e95b2a918ee6f51c7dcc7c3dec0b793d702f979bf0ea10eb323a86519cbe2f188235b0ea9169a0f183299506c67c83c7ecb6a20e5d1f0f64ef6d97b0f88cbd3ca33693a4501ae430d", @typed={0x8, 0x48, @str='Y\x00'}, @generic]}]}, 0x114c}, {&(0x7f0000001580)={0x10c, 0x1a, 0x800, 0x70bd27, 0x25dfdbfc, "", [@generic="e9189d869bec172da8b565e6031dac7728f138a4bff9553506163142585bd34114d7c35c9a9c201d52b4d04f73c5f9bd7b067148e50499628c032a400a7eff235dcc4d7b32ff", @generic="69abbbac45c18cb2e8c60ace807c94d766cc8cc4e6cddea9725cf090e639e23a361a506fcdb56b77c7a498ecf511898baef987c5d81825fe725fe09befd7838451063c77149d59db920dfc002e234a11e9c1", @nested={0x4c, 0x17, [@generic="095a73afc32cc1f2b093cbfe059ad8bcff051dedf649bf1be82931335585f3a223535d1cac3fdd44ee6d4e22125511f048729de6caa25808a48605787832942a0e2a49672a9942dc"]}, @nested={0x18, 0x5d, [@typed={0x8, 0x88, @u32=0x40}, @typed={0x8, 0x39, @pid=r1}, @typed={0x4, 0x3}]}]}, 0x10c}, {&(0x7f00000016c0)={0x10, 0x14, 0x4, 0x70bd2d, 0x25dfdbfd}, 0x10}, {&(0x7f00000017c0)=ANY=[@ANYBLOB="881400001a00200325bd7000fedbdf250c0054005f060000000000000edd27649fae717452ef330cbd57fa7990e087315a77e6cc844492798401030004005b00080081000800000008000900000000000000000000000000000000", @ANYRES32=r2, @ANYBLOB="7ee25f51a708ba0937e1eeaea6691ce6653d984f7a2c0dea1dcc581a4d41a8f6aa7ec0481f0c019e50c63e6bd6c4a88911d922eab2087f5d3775b8520a92c06968ce8f06610aedffa1d9bebb28ae847fcac5bc27148085abf962bdeab12d9da04aa13c7344320a25d13c19726a38a0d5aa7a92c9c361430a90f2501971d32043a2b8ce7f9779a74ec218226159e42114d419b19a03d98dc56adb13f3cc273a09aaaaff0c95fb5e50ed5d5c2977e69ad538a620e3fea4d1ebfc74329d4efe2b100041002f6465762f61647370230000b54b4f61faff9ed98bce885f7521d302cbce9c0a6104f03e75c431f3bf502255eefd8ceba8b55155315a1151c31262643b30c63db277457992e1d272da86e30aea617ae38d75f219a4caa27b83f81631496dd8c609a7c235675dcc8f85db40f13cc1a8835a20dc0c06bc3dbc872bf1add1bb442fa7de542cd2ba5322f72f4e802db88be1e41751525f9c87a4601431520a85433eeebb3214040093000088025a0008000d0000000007301c2c0f4ee456716daa122890c6a231e5c71bd94d9b74674f3a5613afe92157b160b3b131e33a35cdec178452b35dbfb982359e966a505ce8c7e4ee34f52bcd6737f5b5cc14ee0a753d989385b0150a2614dc8fed4625f8dd9031541637df3adc27ec1ce61c4d52eb96926dc197a7de3099a8ffafcbe612d7875f029413147c48d419dc5c893619132de9c052684f7ddbfded8f9af5153e59f66fdb5188ddc4e8a4d50de66c16ec4f6646620299e53b734c4c25a33d9592a737f9edf4c393747fe5f19c1f2fc2ce803cac2687a3fe1017dd88ecd15a8a418b354aca3018b8481e92b91ac91c3162b602fd85e43546044034b95d3e35c665b2f185d45e728f387c894f2fc43cb8625495b699eabb15afee43710f83d0e3b97527b1af8cd80055a0df7ccfbf010c12a60b09dffd54fbd31fad7afff63d568fccd02af1220b4810fc191f4a0bee7e2645453e3a57395885e26ea2efe5e656fc0010de95361ffb2e8d29f120b2bd476b4448e35e1a4487d1ec297b17aca3d8f4ef97397d42b4693fc9e2ae6fb7fdd4fc919fe2123fef60fd7a58a978af4d8a4aed5907b39fded5fd8c6926c39d9ece1743dd1d577ace4aa8c54c5b3148df0eb769b7f19771261b019d7ad597a7e36a495b5230f35ab1325c3615b21195405ac28f30720479f40676252cbc0e2d61fb7a86910f27397b4f307afdf13bde3e7720f7ee889b55966944f20421391c77c4a39f198d1a6d8da85c0a82e734e7b0d5c26e24cba02d0141a20d962730f7eac83237f3cac6bc88b475dab76e464951429189cb97a5386a964cee85a58e7fe98f547a95a97e5202f468a4b062b1537376616a08008100", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0c00360010f3000000000000180054005aeb81c71f413544030eec9bce58625d492e6fda00"], 0x1488}, {&(0x7f0000002d00)={0x204, 0x3f, 0x8, 0x70bd27, 0x25dfdbfb, "", [@nested={0x70, 0x46, [@generic="690ccabc221d1f7f88c285e3a97185ea60b8696257e6b04cbe978a064818", @typed={0x8, 0x18, @fd=r0}, @typed={0x14, 0x65, @ipv6=@local}, @generic="c7908f11b6d4d912f74daebf7d3e333d491237945111016983e1acbd600fe9c4dbe3beb828345a496c", @typed={0x8, 0x88, @fd=r0}]}, @typed={0x8, 0x87, @uid=r5}, @generic="1a974b6cd4915dd2eebce90c74886e386b01ce1692c05d41d46087c372aa690fe80dfc28eb850c263008a74a92cd08dbce4b6ef01a7a4fa7594a3ff7a5cd710265f8aaeda0f8fd1cfda1c46469b77f7fecd02dc58b0645d694209f54433bbef6941254bf0ab44aa4abd8006b37c7f8651859f2d9d5e00f98c00b2c420d29b96207836bdd2850b5e6e8e86b82d9ea2951a56f9919a02a242f470756f40a0be2f9179ce533b8144628fc9fa0596f73e355e3e9383a69553fb99024d324ce438aa7ce035f0a09954a0fac501579947f1d40181bb3e4d20826f63931a802a21266af6ac0f980f3a84cf6e4218024d7b7c2276935042902eab3ff30", @nested={0x80, 0x7f, [@typed={0x14, 0x1, @ipv6=@ipv4={[], [], @multicast1}}, @typed={0x8, 0x66, @fd=r0}, @generic="f1d96e005183fc7d495233c3e5d26bfa6804d126e5b4da5d9f287d649c4dce530736efdb0378d31a6b0549c1ca231b4d792c2450a6853c849f2c6e959ee3a01794ab7c941fd6f2c954ba9a059e1d7e8cfa07baeacf", @typed={0x8, 0x16, @u32=0x5}]}]}, 0x204}, {&(0x7f0000002f40)={0x10, 0x1d, 0x10, 0x70bd2b, 0x25dfdbff}, 0x10}], 0x7, &(0x7f0000003000)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}], 0x28, 0x4000}, 0x40000) sched_rr_get_interval(r4, &(0x7f00000000c0)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(r0, &(0x7f0000003400)='./file0\x00', 0x4000, 0x8, &(0x7f0000003500)) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f0000003080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x4, 0x0, 0x6]}}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x0, 0x0, 0x4, 0x3}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0), 0x4) r7 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) recvmsg(r7, &(0x7f0000003440)={&(0x7f00000030c0)=@nfc, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003140)=""/244, 0xf4}, {&(0x7f0000003240)=""/117, 0x75}, {&(0x7f00000032c0)=""/46, 0x2e}, {&(0x7f0000003300)=""/131, 0x83}], 0x4, &(0x7f0000003400), 0x0, 0x8}, 0x2041) socket$inet6_udplite(0xa, 0x2, 0x88) [ 431.158249] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 431.165526] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 431.172783] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 431.180036] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:28 executing program 2: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}}}, &(0x7f0000000380)=0xe8) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000080)='./file1\x00', 0x8000, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb58906d6b66732e66617400020120000200068000f8", 0x16}], 0x2024000, &(0x7f00000003c0)=ANY=[@ANYBLOB='shortname=mixed,shortname=winnt,shortname=winnt,shortname=lower,mask=^MAY_WRITE,fowner=', @ANYRESDEC=r0, @ANYBLOB=',smackfsfloor=vfat\x00,uid=', @ANYRESDEC=r0, @ANYBLOB="2c61707072616973652c686173682c61707072616973655f8d7970653d696d617369672c61756469742c646f6e745f686173682c00"]) 03:33:28 executing program 3 (fault-call:9 fault-nth:7): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:28 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000001000001005307a33d6c390836be381b", 0x1f) [ 431.311518] XFS (loop0): Invalid superblock magic number 03:33:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=0x0) ptrace$setregs(0xf, r1, 0x1, &(0x7f0000000300)="db2b890a1ddcac") r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000000)={"7261770000000000000000000000000000000000000000001b00"}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={"74756e6c3000000000000000e0002000"}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000900000000000000ff000000000000a60000000000200000030500000020000000"]) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) bind$bt_hci(r2, &(0x7f0000000040), 0x58) [ 431.364097] FAULT_INJECTION: forcing a failure. [ 431.364097] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 431.382306] CPU: 0 PID: 21884 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 431.390824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.400200] Call Trace: [ 431.402814] dump_stack+0x1d3/0x2c4 [ 431.406464] ? dump_stack_print_info.cold.2+0x52/0x52 [ 431.411688] ? debug_smp_processor_id+0x1c/0x20 [ 431.416399] ? perf_trace_lock_acquire+0x15b/0x800 [ 431.416421] should_fail.cold.4+0xa/0x17 [ 431.416440] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 431.416456] ? save_stack+0xa9/0xd0 [ 431.416476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.416492] ? check_preemption_disabled+0x48/0x200 [ 431.416511] ? debug_smp_processor_id+0x1c/0x20 [ 431.416557] ? perf_trace_lock_acquire+0x15b/0x800 [ 431.416575] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.416598] ? perf_trace_lock+0x7a0/0x7a0 [ 431.464539] ? fs_reclaim_acquire+0x20/0x20 [ 431.468873] ? lock_downgrade+0x900/0x900 [ 431.473030] ? lock_release+0x970/0x970 [ 431.477007] ? check_same_owner+0x330/0x330 [ 431.481331] ? trace_hardirqs_on+0xbd/0x310 [ 431.485656] ? perf_trace_lock+0x7a0/0x7a0 [ 431.489892] ? sock_kmalloc+0x15a/0x1f0 [ 431.493876] ? __might_sleep+0x95/0x190 [ 431.497856] __alloc_pages_nodemask+0x34b/0xdd0 [ 431.502537] ? lock_downgrade+0x900/0x900 [ 431.506703] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 431.511746] ? check_same_owner+0x330/0x330 [ 431.516079] ? sock_kmalloc+0x18a/0x1f0 [ 431.520063] ? iov_iter_npages+0xdd0/0xdd0 [ 431.524310] ? _copy_from_iter_full+0x2b8/0xc20 [ 431.528991] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 431.534971] ? af_alg_register_type+0x3f0/0x3f0 [ 431.539647] ? check_preemption_disabled+0x48/0x200 [ 431.544669] ? lock_sock_nested+0x9a/0x120 [ 431.548926] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 431.554472] alloc_pages_current+0x10c/0x210 [ 431.558886] af_alg_sendmsg+0xb08/0x1260 [ 431.562960] ? af_alg_pull_tsgl+0xd70/0xd70 [ 431.567289] aead_sendmsg+0x103/0x150 [ 431.571092] ? crypto_aead_copy_sgl+0x350/0x350 [ 431.575782] sock_sendmsg+0xd5/0x120 [ 431.579511] sock_write_iter+0x35e/0x5c0 [ 431.583575] ? sock_sendmsg+0x120/0x120 [ 431.587587] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.593129] ? iov_iter_init+0xc2/0x1e0 [ 431.597111] __vfs_write+0x6b8/0x9f0 [ 431.600829] ? kernel_read+0x120/0x120 [ 431.604718] ? apparmor_path_rmdir+0x30/0x30 [ 431.609139] ? lock_release+0x970/0x970 [ 431.613119] ? check_preemption_disabled+0x48/0x200 [ 431.618144] ? apparmor_file_permission+0x24/0x30 [ 431.622990] ? rw_verify_area+0x118/0x360 [ 431.627160] vfs_write+0x1fc/0x560 [ 431.630704] ksys_write+0x101/0x260 [ 431.634339] ? __ia32_sys_read+0xb0/0xb0 [ 431.638410] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 431.643865] __x64_sys_write+0x73/0xb0 [ 431.647773] do_syscall_64+0x1b9/0x820 [ 431.651667] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 431.657033] ? syscall_return_slowpath+0x5e0/0x5e0 [ 431.661966] ? trace_hardirqs_on_caller+0x310/0x310 [ 431.666988] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 431.672008] ? recalc_sigpending_tsk+0x180/0x180 [ 431.676794] ? kasan_check_write+0x14/0x20 [ 431.681039] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.685913] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.691102] RIP: 0033:0x457579 [ 431.694296] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 431.713197] RSP: 002b:00007fc640648c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 431.720907] RAX: ffffffffffffffda RBX: 00007fc640648c90 RCX: 0000000000457579 [ 431.728178] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 431.735451] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 431.742718] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc6406496d4 [ 431.749994] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:28 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101081, 0x0) socketpair$unix(0x1, 0x2040000, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400202) r2 = getpgid(0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, 0x7, 0x3, 0x22, &(0x7f0000ffa000/0x2000)=nil, 0x54697d09}) prlimit64(r2, 0xf, 0x0, &(0x7f0000000000)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="0b0900f5000319ce7a189eafaf7d40118288cbcbd1026984e82bdc7b014270c478d157ca783ee1720cc18e2a07c3bf9239a456a7876ef638b9b5b27caf74402d2aa4d27b692fa43903643d1b2932e3e48e545da44f3baf70de172617ac14a811936f1db88559a5", 0xffffffffffffff72}], 0x1) write$cgroup_pid(r0, &(0x7f0000000040)=r2, 0x12) 03:33:28 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000009000001005307a33d6c390836be381b", 0x1f) 03:33:28 executing program 3 (fault-call:9 fault-nth:8): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:28 executing program 4: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000001000001005307a33d6c390836be381b", 0x1f) 03:33:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x14) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x4, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x4, r2}) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000, 0x9effffff00000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xf8, 0x29, 0x82d, 0x0, 0x3, {0x1}, [@nested={0xe4, 0x33, [@generic="a0a2831f3ada0c29ac0ee2910ff520f53f8bf4e55874bc8c7df38cc8e9e0d08aeb5cb09323980fbfe87f216928a1cca5dacca442f57a5ea7e801f59cce2db6683dc9e0983f9438631495cf0e40eddbab2cf47c07d9977514b3695a3bb24012330b598e5db82bcd90f7c377313bd5c32172d7670f9400352bb29b544a677554a3e4e3ff55bcc464cf76415a646344464cc7c38527083e7123f556fb1313dd5a1615b01e6ba408ae6f424f1910edda7790b4ce0356058f7c47cf3c5090681756ce0275537290f07eecd2b164d9e58803e81309dffb1b04a097729940ee0541d931"]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000000000000}, 0x40) 03:33:28 executing program 2: r0 = memfd_create(&(0x7f0000000040)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) write(r0, &(0x7f00000003c0)="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", 0x10b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) setitimer(0x0, &(0x7f0000000100)={{0x0, 0x2710}}, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000500)={{0x4, 0x6, 0x10000, 0xfffffffffffffff9, 'syz1\x00', 0x4}, 0x1, [0xffffffff, 0x5, 0x7fffffff, 0x7, 0x2, 0x7, 0x9, 0x80, 0x0, 0x6, 0x9, 0x1000, 0x0, 0x4, 0x145c, 0xfffffffffffffff7, 0x9, 0x9, 0x1, 0x3, 0x1, 0x1, 0x3c2c, 0x8c4, 0x2, 0x6, 0x3, 0x9, 0x80000001, 0x3, 0x6, 0x0, 0x6, 0x8, 0x80000001, 0x1, 0x8, 0x80000000, 0x97, 0x3, 0x8000, 0x1, 0x8, 0x8, 0xeea, 0x3731, 0x100, 0x9, 0x1, 0x7ff, 0x5, 0xc17f, 0x6, 0x7, 0x5, 0x8f3e, 0x9, 0x5, 0x7, 0x100000000, 0x7, 0x101, 0x800, 0x136b, 0x7, 0x8, 0x4, 0xd0, 0x80000000, 0x8, 0x80000001, 0x80000000, 0x5, 0x80000000, 0xffff, 0x0, 0xa66, 0xb2, 0x3, 0x0, 0x780, 0x6, 0x6, 0x3, 0x7, 0x7fff, 0x8001, 0x95bc, 0x4, 0x4a, 0x3e, 0x800, 0x9, 0x7, 0x74bf, 0x8, 0x7, 0x0, 0x6, 0x2, 0x0, 0x2, 0xfd, 0x80000001, 0x9, 0x41, 0x8, 0x100000001, 0x6409, 0x0, 0xc4bd058, 0x3ff, 0x7, 0x6, 0x8, 0x7, 0x20, 0x8001, 0x499e, 0x5, 0x1, 0x0, 0x3, 0x8, 0x0, 0xff, 0x1ff], {0x0, 0x989680}}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x1) 03:33:28 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000e0000000001005307a33d6c390836be381b", 0x1f) 03:33:28 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'syzkaller0\x00', 0x100}) 03:33:28 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) pread64(r0, &(0x7f0000001480), 0x0, 0x0) [ 431.969021] FAULT_INJECTION: forcing a failure. [ 431.969021] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 432.006428] CPU: 1 PID: 21912 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 432.014955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.024326] Call Trace: [ 432.026959] dump_stack+0x1d3/0x2c4 [ 432.030608] ? dump_stack_print_info.cold.2+0x52/0x52 [ 432.035824] should_fail.cold.4+0xa/0x17 [ 432.039906] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 432.045026] ? save_stack+0xa9/0xd0 [ 432.048667] ? save_stack+0x43/0xd0 [ 432.052313] ? kasan_kmalloc+0xc7/0xe0 [ 432.056203] ? __kmalloc+0x14e/0x760 [ 432.059921] ? sock_kmalloc+0x15a/0x1f0 [ 432.063899] ? af_alg_sendmsg+0xa1b/0x1260 [ 432.068131] ? aead_sendmsg+0x103/0x150 [ 432.072110] ? sock_sendmsg+0xd5/0x120 [ 432.076001] ? sock_write_iter+0x35e/0x5c0 [ 432.080234] ? __vfs_write+0x6b8/0x9f0 [ 432.084142] ? vfs_write+0x1fc/0x560 [ 432.087874] ? ksys_write+0x101/0x260 [ 432.091682] ? do_syscall_64+0x1b9/0x820 [ 432.095757] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.101140] ? fs_reclaim_acquire+0x20/0x20 [ 432.105490] ? lock_downgrade+0x900/0x900 [ 432.109648] ? lock_release+0x970/0x970 [ 432.113629] ? check_same_owner+0x330/0x330 [ 432.117956] ? trace_hardirqs_on+0xbd/0x310 [ 432.122283] ? lock_downgrade+0x900/0x900 [ 432.126432] ? sock_kmalloc+0x15a/0x1f0 [ 432.130410] ? __might_sleep+0x95/0x190 [ 432.134396] __alloc_pages_nodemask+0x34b/0xdd0 [ 432.139069] ? lock_downgrade+0x900/0x900 [ 432.143223] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 432.148254] ? check_same_owner+0x330/0x330 [ 432.152584] ? sock_kmalloc+0x18a/0x1f0 [ 432.156563] ? iov_iter_npages+0xdd0/0xdd0 [ 432.160820] ? _copy_from_iter_full+0x2b8/0xc20 [ 432.165490] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 432.171463] ? af_alg_register_type+0x3f0/0x3f0 [ 432.176136] ? check_preemption_disabled+0x48/0x200 [ 432.181154] ? lock_sock_nested+0x9a/0x120 [ 432.185395] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 432.190940] alloc_pages_current+0x10c/0x210 [ 432.195353] af_alg_sendmsg+0xb08/0x1260 [ 432.199425] ? af_alg_pull_tsgl+0xd70/0xd70 [ 432.203765] aead_sendmsg+0x103/0x150 [ 432.207589] ? crypto_aead_copy_sgl+0x350/0x350 [ 432.212314] sock_sendmsg+0xd5/0x120 [ 432.216044] sock_write_iter+0x35e/0x5c0 [ 432.220111] ? sock_sendmsg+0x120/0x120 [ 432.224097] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.229644] ? iov_iter_init+0xc2/0x1e0 [ 432.233623] __vfs_write+0x6b8/0x9f0 [ 432.237355] ? kernel_read+0x120/0x120 [ 432.241256] ? apparmor_path_rmdir+0x30/0x30 [ 432.245674] ? lock_release+0x970/0x970 [ 432.249656] ? check_preemption_disabled+0x48/0x200 [ 432.254677] ? apparmor_file_permission+0x24/0x30 [ 432.259522] ? rw_verify_area+0x118/0x360 [ 432.263679] vfs_write+0x1fc/0x560 [ 432.267226] ksys_write+0x101/0x260 [ 432.270854] ? __ia32_sys_read+0xb0/0xb0 [ 432.274919] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 432.280381] __x64_sys_write+0x73/0xb0 [ 432.284301] do_syscall_64+0x1b9/0x820 [ 432.288220] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 432.293586] ? syscall_return_slowpath+0x5e0/0x5e0 [ 432.298526] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.303374] ? trace_hardirqs_on_caller+0x310/0x310 [ 432.308393] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 432.313433] ? prepare_exit_to_usermode+0x291/0x3b0 [ 432.318464] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.323315] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.328506] RIP: 0033:0x457579 [ 432.331725] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 432.350669] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 432.358375] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 03:33:28 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02c00e0000000001005307a33d6c390836be381b", 0x1f) 03:33:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="153fe201000000d40e0e246070") r1 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x1, 0x2, 0x6, 0x20, 0x4, "b459c2542f7822b28963f6e2d3b8a9ee0659e9585b4840dcd31b26a92effd66cdea92a77195e06196cbdedf1972152a4aeb29ed87bfcb8b414ea864ba3b199", 0x2a}, 0x60) write$evdev(r1, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000140)) sendfile(r2, r1, &(0x7f0000000000), 0x100000001) [ 432.365645] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 432.372923] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 432.380193] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 432.387456] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:29 executing program 5: r0 = socket$inet6(0xa, 0x80000, 0xfffffffe) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='cgroup.max.descendants\x00', 0x2, 0x0) r3 = dup(r1) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x27, 0x16, 0x17, 0xb, 0x4, 0x8, 0x1, 0xb5}}) write$cgroup_int(r2, &(0x7f0000000000), 0x12) 03:33:29 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0207000000000001005307a33d6c390836be381b", 0x1f) 03:33:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x30}, 0x45c) tee(r0, r0, 0x9, 0x2) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xb8be, 0x200) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f00000012c0)=""/4096) write$uinput_user_dev(r0, &(0x7f0000000e40)={'syz1\x00', {}, 0x15}, 0x45c) [ 432.510671] input: syz1 as /devices/virtual/input/input255 03:33:29 executing program 3 (fault-call:9 fault-nth:9): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:29 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x88002, 0x0) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f00000001c0)=0xc) listen(r0, 0xfc0004) r2 = accept4(r0, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) getpeername$netlink(r2, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 03:33:29 executing program 5: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',\a\x00dno\b', @ANYRESHEX=r1, @ANYBLOB=',smackfsfloor=,smackfshat=wfdno,\x00']) 03:33:29 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000002000001005307a33d6c390836be381b", 0x1f) 03:33:29 executing program 2: r0 = socket(0x10, 0x80002, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0x600000000000000, 0x342) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000340)=@getlink={0x20}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="ef3ae611b08b726764a3a590908a5aa8962e69121d6a0588f22a6cef55d853349d3ed18853fe5da33dbedbd80529e72586f8ab63a974228caf4729873e3bc64b3432de400d420a384709538df44db2b79be43ff2437fd5329c425b6236edda851c615e6ded80005fd87dfd3b533dad648d7ebef780990059426697c43e77b6eed69ac29b14790167e7757999ab7f3eebd5c65e"], 0x1}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 432.601337] 9pnet: Insufficient options for proto=fd 03:33:29 executing program 0: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800480000280000000000009073f1ae27e11732b0bb0e0290780000080000000000000000000000000011518c5afa47b47ea9cf0459efdc14c1bd66efdd352f29f3f1fbe09233c184a0eb7e9810eda2a6efabba006bf6e6575d719dbd4eba2ecf82f9c42f47c2a4dfb19fd80bdb6b9c"], &(0x7f0000000080)={0x0, 0x0, [0x0, 0xb3a, 0x0, 0x3]}) 03:33:29 executing program 4: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$intptr(0x200000002f, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) [ 432.636728] FAULT_INJECTION: forcing a failure. [ 432.636728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 432.649820] 9pnet: Insufficient options for proto=fd [ 432.674228] CPU: 1 PID: 21958 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 432.682762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.692137] Call Trace: [ 432.694804] dump_stack+0x1d3/0x2c4 [ 432.698491] ? dump_stack_print_info.cold.2+0x52/0x52 [ 432.703711] should_fail.cold.4+0xa/0x17 [ 432.707796] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 432.712910] ? save_stack+0xa9/0xd0 [ 432.716547] ? save_stack+0x43/0xd0 [ 432.720191] ? kasan_kmalloc+0xc7/0xe0 [ 432.724079] ? __kmalloc+0x14e/0x760 [ 432.724095] ? sock_kmalloc+0x15a/0x1f0 [ 432.724111] ? af_alg_sendmsg+0xa1b/0x1260 [ 432.724132] ? aead_sendmsg+0x103/0x150 [ 432.731830] ? sock_sendmsg+0xd5/0x120 [ 432.731850] ? sock_write_iter+0x35e/0x5c0 [ 432.731864] ? __vfs_write+0x6b8/0x9f0 [ 432.731883] ? vfs_write+0x1fc/0x560 [ 432.755799] ? ksys_write+0x101/0x260 [ 432.759601] ? do_syscall_64+0x1b9/0x820 [ 432.763663] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.769049] ? cache_grow_end+0xa8/0x190 [ 432.773115] ? fs_reclaim_acquire+0x20/0x20 [ 432.777437] ? lock_downgrade+0x900/0x900 [ 432.781600] ? lock_release+0x970/0x970 [ 432.785576] ? check_same_owner+0x330/0x330 [ 432.789906] ? trace_hardirqs_on+0xbd/0x310 [ 432.794229] ? kasan_check_write+0x14/0x20 [ 432.798470] ? sock_kmalloc+0x15a/0x1f0 [ 432.802453] ? __might_sleep+0x95/0x190 [ 432.806429] __alloc_pages_nodemask+0x34b/0xdd0 [ 432.811118] ? lock_downgrade+0x900/0x900 [ 432.815275] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 432.820299] ? check_same_owner+0x330/0x330 [ 432.824629] ? sock_kmalloc+0x18a/0x1f0 [ 432.828703] ? iov_iter_npages+0xdd0/0xdd0 [ 432.832961] ? _copy_from_iter_full+0x2b8/0xc20 [ 432.837664] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 432.843652] ? af_alg_register_type+0x3f0/0x3f0 [ 432.848337] ? check_preemption_disabled+0x48/0x200 [ 432.853358] ? lock_sock_nested+0x9a/0x120 [ 432.857598] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 432.863141] alloc_pages_current+0x10c/0x210 [ 432.867556] af_alg_sendmsg+0xb08/0x1260 [ 432.871634] ? af_alg_pull_tsgl+0xd70/0xd70 [ 432.875979] aead_sendmsg+0x103/0x150 [ 432.879780] ? crypto_aead_copy_sgl+0x350/0x350 [ 432.884453] sock_sendmsg+0xd5/0x120 [ 432.888184] sock_write_iter+0x35e/0x5c0 [ 432.892266] ? sock_sendmsg+0x120/0x120 [ 432.896255] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.901802] ? iov_iter_init+0xc2/0x1e0 [ 432.905788] __vfs_write+0x6b8/0x9f0 [ 432.909515] ? kernel_read+0x120/0x120 [ 432.913408] ? apparmor_path_rmdir+0x30/0x30 [ 432.917841] ? lock_release+0x970/0x970 [ 432.921857] ? check_preemption_disabled+0x48/0x200 [ 432.926894] ? apparmor_file_permission+0x24/0x30 [ 432.931773] ? rw_verify_area+0x118/0x360 [ 432.935928] vfs_write+0x1fc/0x560 [ 432.939477] ksys_write+0x101/0x260 [ 432.943108] ? __ia32_sys_read+0xb0/0xb0 [ 432.947176] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 432.952681] __x64_sys_write+0x73/0xb0 [ 432.956575] do_syscall_64+0x1b9/0x820 [ 432.960508] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 432.965885] ? syscall_return_slowpath+0x5e0/0x5e0 [ 432.970818] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.975665] ? trace_hardirqs_on_caller+0x310/0x310 [ 432.980691] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 432.985709] ? prepare_exit_to_usermode+0x291/0x3b0 [ 432.990750] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.995622] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.000814] RIP: 0033:0x457579 [ 433.004007] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 433.022912] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 433.030622] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 03:33:29 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020f000000000001005307a33d6c390836be381b", 0x1f) 03:33:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="6601669b0f35c4e1fe16846ba49e0000b9940200000f32c4c23dad78e0b9670900000f32660f38827f95b0040f01d10fc71a"}], 0x392, 0x0, &(0x7f00000000c0), 0x0) r3 = semget(0x1, 0x3, 0x70) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000100)=""/209) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, &(0x7f0000000200)="360f32410f32c744240069000000c7442402ae6b0000ff2c24c4823546b700000000b9000100c0b8605e0000ba000000000f30440f20c03508000000440f22c066baf80cb8483ab081ef66bafc0cedf3d3ae7c000000b8010000000f01c1c402fd4187acfe0000", 0x67}], 0x1, 0x0, &(0x7f00000000c0), 0x0) r4 = dup3(r1, r1, 0x80000) dup3(r2, r2, 0x80000) write$P9_RREMOVE(r4, &(0x7f00000000c0)={0x7, 0x7b, 0x2}, 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:33:29 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0204000000000001005307a33d6c390836be381b", 0x1f) 03:33:29 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000000a000001005307a33d6c390836be381b", 0x1f) [ 433.037911] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 433.045194] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 433.052459] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 433.059729] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:29 executing program 4: socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, r1, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000005c0)={{0xffffffffffffffff, 0x0, 0xe35, 0x1, 0x4}, 0x7, 0x3ff, 'id0\x00', 'timer0\x00', 0x0, 0x2bf202f9, 0x8, 0x100000001, 0x100000000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x22000, 0xa) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000400)="66b8010000000f01c1baf80c66b8f8a2e28366efbafc0c66b8dd52aa7966ef6436f2a40f30dbd07c800f2169650f019d64d90f214d0f01df", 0x38}], 0x1, 0x0, &(0x7f0000000200), 0x10000000000000e2) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000300), 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000480)={{0x4000, 0x0, 0xf, 0x8001, 0x4, 0x0, 0x545, 0x5, 0xdf9, 0x4, 0x3, 0x5}, {0xd004, 0xf000, 0x18, 0x5, 0x4, 0x0, 0x9, 0x5, 0x7, 0x9}, {0x2000, 0xf000, 0x0, 0x6, 0x6, 0x7fffffff, 0x2, 0x3, 0xfffffffffffffc00, 0x2225, 0x8, 0x2}, {0x6000, 0x5000, 0xd, 0x2, 0x4, 0xa400000000000, 0x80, 0x700000000000000, 0xb4, 0xdf1, 0x7, 0xffffffffffffff85}, {0xb6012b6a06814110, 0xf001, 0xf, 0x1, 0x1, 0x5, 0x2, 0x1, 0x1f, 0x4, 0x0, 0x6}, {0x6000, 0x1002, 0xd, 0x9, 0xbd, 0xcf, 0xfff, 0x7, 0xa0, 0x80000000, 0x2, 0x2}, {0x2000, 0x10000, 0x8, 0x0, 0x2, 0x7, 0x8, 0x6, 0xad2, 0x8, 0x40, 0x100000001}, {0x3000, 0x1000, 0x4, 0x9, 0xff0e, 0x4, 0x5, 0x3, 0x3a2, 0x8, 0x20, 0x1a7}, {0x4, 0x2}, {0xd000, 0x6000}, 0x0, 0x0, 0x100000, 0x4, 0xe, 0x100, 0x1004, [0x7, 0x7, 0x100, 0x4]}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000200)={0x3}) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, [0x6, 0x401, 0x4, 0x7f]}) 03:33:29 executing program 0: getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000640)=""/101, &(0x7f00000006c0)=0x65) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)="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", 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xffff, 0x1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000ac0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) flistxattr(r2, &(0x7f0000000500)=""/186, 0xba) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000b00)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000480)={r0, r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x4, &(0x7f0000000780)=@raw=[@jmp={0x5, 0xfff, 0x6, 0x2, 0x7, 0x0, 0x4}, @ldst={0x0, 0x3, 0x3, 0x0, 0xa, 0xffffffffffffffff, 0xffffffffffffffff}], &(0x7f00000007c0)='syzkaller\x00', 0x7, 0x77, &(0x7f00000009c0)=""/119, 0x0, 0x1, [], 0x0, 0x5}, 0x48) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)=0x0) r4 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x80000000, 0x7fff, 0xf4f, 0x7fffffff, 0x0, 0xeb59, 0x100, 0x8, 0xde05, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x7f, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x1, 0x800, 0x10001, 0x4, 0x7, 0x39b4, 0x100, 0x5, 0x0, 0x4, 0x80, 0x9, 0x72d, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000180), 0xe}, 0x40, 0x8001, 0x73ce, 0x7, 0x5, 0x9, 0x50f}, r3, 0x0, r1, 0x9) connect$vsock_stream(r2, &(0x7f0000000300)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000400)='fou\x00') statfs(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000200)=""/229) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x6, 0xfa00, {0x0, &(0x7f00000003c0), 0x0, 0xb}}, 0x20) perf_event_open(&(0x7f0000000700)={0x5, 0x70, 0x1, 0x7, 0x870, 0x7, 0x0, 0x7, 0x80, 0x4, 0x401, 0x7fff, 0x10001, 0x7, 0x1, 0x9, 0x0, 0x8, 0x9, 0x0, 0x68ca, 0x7fffffff, 0x63, 0x1, 0x2094959a, 0x7, 0xff, 0x1, 0x3, 0x0, 0x5, 0x3b5e, 0x2, 0x1, 0x9, 0x0, 0x7ff, 0x76, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000005c0)}, 0x2020, 0x0, 0x0, 0x7, 0x3, 0x400, 0x1}, r3, 0xc, r4, 0x2) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000040), &(0x7f0000000140)=0x4) 03:33:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r1 = gettid() clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000080)={0x0, r2+10000000}, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x1000000000012, 0x0, @thr={&(0x7f0000000040), &(0x7f00000003c0)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) r3 = creat(&(0x7f0000000380)='./file0\x00', 0x108) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="330000002bbb77f3d7502338dbe0d3ca55ff00527540abbe24418ed09f7244d2a64b53b04af5b37f159f21edbc1dadb31a1d8ae3e99a6c"], &(0x7f0000000400)=0x3b) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000440)={r4, 0x7}, &(0x7f0000000480)=0x8) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=""/246, &(0x7f00000002c0)=0xf6) tkill(r1, 0x1004000000016) r5 = socket$inet6(0xa, 0x2000000001, 0x0) r6 = add_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="360b4301bc26521fe056a74ee9de05f7d46a2fe69e1cd47435c500f0a716f4043f296033ef65", 0x26, 0xfffffffffffffffb) r7 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r6, r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup2(r5, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 03:33:29 executing program 3 (fault-call:9 fault-nth:10): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:30 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0206140000000001005307a33d6c390836be381b", 0x1f) 03:33:30 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0202000000000001005307a33d6c390836be381b", 0x1f) [ 433.231353] FAULT_INJECTION: forcing a failure. [ 433.231353] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 433.275716] CPU: 0 PID: 21995 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 433.284269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.293639] Call Trace: [ 433.296255] dump_stack+0x1d3/0x2c4 [ 433.299910] ? dump_stack_print_info.cold.2+0x52/0x52 [ 433.305117] should_fail.cold.4+0xa/0x17 [ 433.309196] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 433.314306] ? save_stack+0xa9/0xd0 [ 433.317942] ? save_stack+0x43/0xd0 [ 433.321571] ? kasan_kmalloc+0xc7/0xe0 [ 433.325461] ? __kmalloc+0x14e/0x760 [ 433.329182] ? sock_kmalloc+0x15a/0x1f0 [ 433.333163] ? af_alg_sendmsg+0xa1b/0x1260 [ 433.337404] ? aead_sendmsg+0x103/0x150 [ 433.341378] ? sock_sendmsg+0xd5/0x120 [ 433.345267] ? sock_write_iter+0x35e/0x5c0 [ 433.349502] ? __vfs_write+0x6b8/0x9f0 [ 433.353388] ? vfs_write+0x1fc/0x560 [ 433.357100] ? ksys_write+0x101/0x260 [ 433.360903] ? do_syscall_64+0x1b9/0x820 [ 433.364968] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.370340] ? cache_grow_end+0xa8/0x190 [ 433.374409] ? fs_reclaim_acquire+0x20/0x20 [ 433.378745] ? lock_downgrade+0x900/0x900 [ 433.382908] ? lock_release+0x970/0x970 [ 433.386884] ? check_same_owner+0x330/0x330 [ 433.391211] ? trace_hardirqs_on+0xbd/0x310 [ 433.395538] ? kasan_check_write+0x14/0x20 [ 433.399794] ? sock_kmalloc+0x15a/0x1f0 [ 433.403787] ? __might_sleep+0x95/0x190 [ 433.407784] __alloc_pages_nodemask+0x34b/0xdd0 [ 433.412458] ? lock_downgrade+0x900/0x900 [ 433.416613] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 433.421628] ? check_same_owner+0x330/0x330 [ 433.425955] ? sock_kmalloc+0x18a/0x1f0 [ 433.429937] ? iov_iter_npages+0xdd0/0xdd0 [ 433.434179] ? _copy_from_iter_full+0x2b8/0xc20 [ 433.438852] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 433.444825] ? af_alg_register_type+0x3f0/0x3f0 [ 433.449495] ? check_preemption_disabled+0x48/0x200 [ 433.454531] ? lock_sock_nested+0x9a/0x120 [ 433.458783] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 433.465558] alloc_pages_current+0x10c/0x210 [ 433.469974] af_alg_sendmsg+0xb08/0x1260 [ 433.474043] ? af_alg_pull_tsgl+0xd70/0xd70 [ 433.478371] aead_sendmsg+0x103/0x150 [ 433.482182] ? crypto_aead_copy_sgl+0x350/0x350 [ 433.486857] sock_sendmsg+0xd5/0x120 [ 433.490589] sock_write_iter+0x35e/0x5c0 [ 433.494658] ? sock_sendmsg+0x120/0x120 [ 433.498660] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 433.504371] ? iov_iter_init+0xc2/0x1e0 [ 433.508352] __vfs_write+0x6b8/0x9f0 [ 433.512069] ? kernel_read+0x120/0x120 [ 433.515966] ? apparmor_path_rmdir+0x30/0x30 [ 433.520380] ? lock_release+0x970/0x970 [ 433.524373] ? check_preemption_disabled+0x48/0x200 [ 433.529408] ? apparmor_file_permission+0x24/0x30 [ 433.534278] ? rw_verify_area+0x118/0x360 [ 433.538439] vfs_write+0x1fc/0x560 [ 433.541994] ksys_write+0x101/0x260 [ 433.545656] ? __ia32_sys_read+0xb0/0xb0 [ 433.549726] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 433.555197] __x64_sys_write+0x73/0xb0 [ 433.559099] do_syscall_64+0x1b9/0x820 [ 433.562993] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 433.569323] ? syscall_return_slowpath+0x5e0/0x5e0 [ 433.574253] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.579101] ? trace_hardirqs_on_caller+0x310/0x310 [ 433.584138] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 433.589156] ? prepare_exit_to_usermode+0x291/0x3b0 [ 433.594191] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.599066] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.604257] RIP: 0033:0x457579 [ 433.607456] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 433.626369] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 433.634079] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 433.641345] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 433.648610] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 433.655877] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 433.663144] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:30 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000004000001005307a33d6c390836be381b", 0x1f) 03:33:30 executing program 0: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000560], 0x7, &(0x7f0000000080), &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000153600000000000000000000e975000000000000000000000000000000000000000000000000000000000000001b000000000014000000000000fd000000000000000000000000000000000000000000000000000000"]}, 0xeb) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x7}, 0x7) 03:33:30 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200050000000001005307a33d6c390836be381b", 0x1f) 03:33:30 executing program 2: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x80200) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0xffffffff]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000340)={r3, @in={{0x2, 0x4e21}}, 0x3, 0x8}, 0x90) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x2a}, &(0x7f0000000200)={0x0, r6+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 03:33:30 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000614000001005307a33d6c390836be381b", 0x1f) 03:33:30 executing program 3 (fault-call:9 fault-nth:11): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) [ 433.927130] FAULT_INJECTION: forcing a failure. [ 433.927130] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 433.935013] kernel msg: ebtables bug: please report to author: Wrong len argument [ 433.949206] CPU: 1 PID: 22025 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 433.957713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.967086] Call Trace: [ 433.969697] dump_stack+0x1d3/0x2c4 [ 433.973364] ? dump_stack_print_info.cold.2+0x52/0x52 [ 433.978586] should_fail.cold.4+0xa/0x17 [ 433.982668] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 433.987792] ? save_stack+0xa9/0xd0 [ 433.991442] ? save_stack+0x43/0xd0 [ 433.995073] ? kasan_kmalloc+0xc7/0xe0 [ 433.998968] ? __kmalloc+0x14e/0x760 [ 434.002700] ? sock_kmalloc+0x15a/0x1f0 [ 434.006700] ? af_alg_sendmsg+0xa1b/0x1260 [ 434.010951] ? aead_sendmsg+0x103/0x150 [ 434.014934] ? sock_sendmsg+0xd5/0x120 [ 434.018827] ? sock_write_iter+0x35e/0x5c0 [ 434.023069] ? __vfs_write+0x6b8/0x9f0 [ 434.026968] ? vfs_write+0x1fc/0x560 [ 434.030690] ? ksys_write+0x101/0x260 [ 434.034496] ? do_syscall_64+0x1b9/0x820 [ 434.034516] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.034544] ? fs_reclaim_acquire+0x20/0x20 [ 434.048278] ? lock_downgrade+0x900/0x900 [ 434.052462] ? lock_release+0x970/0x970 [ 434.057147] ? check_same_owner+0x330/0x330 [ 434.060622] kernel msg: ebtables bug: please report to author: Wrong len argument [ 434.061924] ? trace_hardirqs_on+0xbd/0x310 [ 434.061949] ? lock_downgrade+0x900/0x900 [ 434.073888] ? sock_kmalloc+0x15a/0x1f0 [ 434.073916] ? __might_sleep+0x95/0x190 [ 434.085987] __alloc_pages_nodemask+0x34b/0xdd0 [ 434.090669] ? lock_downgrade+0x900/0x900 [ 434.094838] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 434.099870] ? check_same_owner+0x330/0x330 [ 434.104205] ? sock_kmalloc+0x18a/0x1f0 [ 434.104226] ? iov_iter_npages+0xdd0/0xdd0 [ 434.104249] ? _copy_from_iter_full+0x2b8/0xc20 [ 434.117168] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 434.123155] ? af_alg_register_type+0x3f0/0x3f0 [ 434.127842] ? check_preemption_disabled+0x48/0x200 [ 434.132874] ? lock_sock_nested+0x9a/0x120 [ 434.137125] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 434.137160] alloc_pages_current+0x10c/0x210 [ 434.147106] af_alg_sendmsg+0xb08/0x1260 [ 434.151197] ? af_alg_pull_tsgl+0xd70/0xd70 [ 434.155560] aead_sendmsg+0x103/0x150 [ 434.159366] ? crypto_aead_copy_sgl+0x350/0x350 [ 434.159384] sock_sendmsg+0xd5/0x120 [ 434.159403] sock_write_iter+0x35e/0x5c0 [ 434.167789] ? sock_sendmsg+0x120/0x120 [ 434.167815] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 434.167838] ? iov_iter_init+0xc2/0x1e0 [ 434.181384] __vfs_write+0x6b8/0x9f0 [ 434.189067] ? kernel_read+0x120/0x120 [ 434.189085] ? apparmor_path_rmdir+0x30/0x30 [ 434.189107] ? lock_release+0x970/0x970 [ 434.201821] ? check_preemption_disabled+0x48/0x200 [ 434.206860] ? apparmor_file_permission+0x24/0x30 [ 434.211730] ? rw_verify_area+0x118/0x360 [ 434.215904] vfs_write+0x1fc/0x560 [ 434.219468] ksys_write+0x101/0x260 [ 434.223105] ? __ia32_sys_read+0xb0/0xb0 [ 434.227184] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 434.232650] __x64_sys_write+0x73/0xb0 [ 434.236565] do_syscall_64+0x1b9/0x820 [ 434.240496] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 434.245879] ? syscall_return_slowpath+0x5e0/0x5e0 [ 434.251431] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.256309] ? trace_hardirqs_on_caller+0x310/0x310 [ 434.261341] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 434.266369] ? prepare_exit_to_usermode+0x291/0x3b0 [ 434.271417] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.276299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.281793] RIP: 0033:0x457579 [ 434.285335] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 434.309619] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 434.317341] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 03:33:31 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) setrlimit(0x7, &(0x7f0000000000)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xe0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x100}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x8, 0x4, 0x6, r2}, &(0x7f0000000140)=0x10) dup(r0) 03:33:31 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200090000000001005307a33d6c390836be381b", 0x1f) 03:33:31 executing program 0: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200050000000001005307a33d6c390836be381b", 0x1f) [ 434.324617] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 434.332224] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 434.339496] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 434.346770] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000006600), 0x4) 03:33:31 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace$peek(0x3, r1, &(0x7f0000000140)) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x801) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00001afff8)={0x0, 0x2000000001}, 0x3d7) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000c60000)={0x3}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x800}}, 0x18) write(r0, &(0x7f0000000040)="c6", 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x4}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000112000)={0x0, 0x0, 0xa}, 0x8) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) 03:33:31 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000000e000001005307a33d6c390836be381b", 0x1f) 03:33:31 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10010, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x100, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x1c) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2482f4fe2222ffff00008b029857aece88a4de6e39900f0001000000000000000008fffa00000000000800080026baeb7bc7f76eafdda1f9", @ANYRES32=0x0], 0x24}}, 0x0) r2 = dup3(r0, r0, 0x80000) ioctl$TIOCSTI(r2, 0x5412, 0x6) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x8}) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000040)=""/58) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000140)={r3, r4}) socket$packet(0x11, 0xc9a92827fabd0f41, 0x300) 03:33:31 executing program 3 (fault-call:9 fault-nth:12): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:31 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200034000000001005307a33d6c390836be381b", 0x1f) [ 434.495107] FAULT_INJECTION: forcing a failure. [ 434.495107] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 434.545822] CPU: 1 PID: 22057 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 434.554347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.563708] Call Trace: [ 434.566595] dump_stack+0x1d3/0x2c4 [ 434.571170] ? dump_stack_print_info.cold.2+0x52/0x52 [ 434.577345] should_fail.cold.4+0xa/0x17 [ 434.581422] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 434.586561] ? save_stack+0xa9/0xd0 [ 434.590185] ? save_stack+0x43/0xd0 [ 434.593853] ? kasan_kmalloc+0xc7/0xe0 [ 434.597760] ? __kmalloc+0x14e/0x760 [ 434.601757] ? sock_kmalloc+0x15a/0x1f0 [ 434.605743] ? af_alg_sendmsg+0xa1b/0x1260 [ 434.610085] ? aead_sendmsg+0x103/0x150 [ 434.614074] ? sock_sendmsg+0xd5/0x120 [ 434.617973] ? sock_write_iter+0x35e/0x5c0 [ 434.622205] ? __vfs_write+0x6b8/0x9f0 [ 434.626088] ? vfs_write+0x1fc/0x560 [ 434.629804] ? ksys_write+0x101/0x260 [ 434.633631] ? do_syscall_64+0x1b9/0x820 [ 434.637720] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.643139] ? cache_grow_end+0xa8/0x190 [ 434.647206] ? fs_reclaim_acquire+0x20/0x20 [ 434.651530] ? lock_downgrade+0x900/0x900 [ 434.655702] ? lock_release+0x970/0x970 [ 434.659688] ? check_same_owner+0x330/0x330 [ 434.664024] ? trace_hardirqs_on+0xbd/0x310 [ 434.668712] ? kasan_check_write+0x14/0x20 [ 434.673094] ? sock_kmalloc+0x15a/0x1f0 [ 434.677095] ? __might_sleep+0x95/0x190 [ 434.681075] __alloc_pages_nodemask+0x34b/0xdd0 [ 434.685759] ? lock_downgrade+0x900/0x900 [ 434.689916] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 434.694931] ? check_same_owner+0x330/0x330 [ 434.699254] ? sock_kmalloc+0x18a/0x1f0 [ 434.703237] ? iov_iter_npages+0xdd0/0xdd0 [ 434.707487] ? _copy_from_iter_full+0x2b8/0xc20 [ 434.712161] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 434.718146] ? af_alg_register_type+0x3f0/0x3f0 [ 434.722828] ? check_preemption_disabled+0x48/0x200 [ 434.727844] ? lock_sock_nested+0x9a/0x120 [ 434.732095] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 434.737637] alloc_pages_current+0x10c/0x210 [ 434.742051] af_alg_sendmsg+0xb08/0x1260 [ 434.746168] ? af_alg_pull_tsgl+0xd70/0xd70 [ 434.750512] aead_sendmsg+0x103/0x150 [ 434.754310] ? crypto_aead_copy_sgl+0x350/0x350 [ 434.758984] sock_sendmsg+0xd5/0x120 [ 434.762701] sock_write_iter+0x35e/0x5c0 [ 434.766788] ? sock_sendmsg+0x120/0x120 [ 434.770781] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 434.776341] ? iov_iter_init+0xc2/0x1e0 [ 434.780317] __vfs_write+0x6b8/0x9f0 [ 434.784032] ? kernel_read+0x120/0x120 [ 434.787935] ? apparmor_path_rmdir+0x30/0x30 [ 434.792340] ? lock_release+0x970/0x970 [ 434.796315] ? check_preemption_disabled+0x48/0x200 [ 434.801335] ? apparmor_file_permission+0x24/0x30 [ 434.806184] ? rw_verify_area+0x118/0x360 [ 434.810348] vfs_write+0x1fc/0x560 [ 434.813894] ksys_write+0x101/0x260 [ 434.817521] ? __ia32_sys_read+0xb0/0xb0 [ 434.821602] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 434.827060] __x64_sys_write+0x73/0xb0 [ 434.830950] do_syscall_64+0x1b9/0x820 [ 434.834841] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 434.840303] ? syscall_return_slowpath+0x5e0/0x5e0 [ 434.845236] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.850345] ? trace_hardirqs_on_caller+0x310/0x310 [ 434.855364] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 434.860383] ? prepare_exit_to_usermode+0x291/0x3b0 [ 434.865408] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.870267] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.875464] RIP: 0033:0x457579 [ 434.878656] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 434.897553] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 434.905271] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 434.912547] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 434.919831] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 434.927100] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 434.934376] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xe6070000}, &(0x7f0000000100)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:33:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my}, 0x10) gettid() perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:33:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = gettid() syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) readv(0xffffffffffffffff, &(0x7f0000001940), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) connect(r1, &(0x7f0000000400)=@nfc, 0x80) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1004000000016) 03:33:31 executing program 0: inotify_init() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:33:31 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200f00000000001005307a33d6c390836be381b", 0x1f) 03:33:31 executing program 3 (fault-call:9 fault-nth:13): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:31 executing program 5: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x31}, 0x2c) mount(&(0x7f00000002c0), &(0x7f0000000080)='./file0/\x00', &(0x7f0000000240)="70726f63009b6a2c823f92ab1d5b2f50155c21b4ddadd9060079216becc16f47afb3aec6b4d757eac0a6344afd1ce9d561075c31c4142aa5bf61c3ae458640c0ec61baa4c00d684cd95e0be68153c4adca5e45190c3a26a50c41d793a4a983e9", 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x20, &(0x7f0000000140)) mount(&(0x7f0000000240), &(0x7f0000000000)='.', &(0x7f0000000040)='proc\x00', 0x0, 0x0) [ 435.113162] FAULT_INJECTION: forcing a failure. [ 435.113162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 435.143630] CPU: 1 PID: 22092 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 435.152144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.161503] Call Trace: [ 435.164108] dump_stack+0x1d3/0x2c4 [ 435.167774] ? dump_stack_print_info.cold.2+0x52/0x52 [ 435.173000] should_fail.cold.4+0xa/0x17 [ 435.177087] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 435.182397] ? save_stack+0xa9/0xd0 [ 435.186136] ? save_stack+0x43/0xd0 [ 435.189780] ? kasan_kmalloc+0xc7/0xe0 [ 435.193675] ? __kmalloc+0x14e/0x760 [ 435.197396] ? sock_kmalloc+0x15a/0x1f0 [ 435.201390] ? af_alg_sendmsg+0xa1b/0x1260 [ 435.205631] ? aead_sendmsg+0x103/0x150 [ 435.209612] ? sock_sendmsg+0xd5/0x120 [ 435.213506] ? sock_write_iter+0x35e/0x5c0 [ 435.217758] ? __vfs_write+0x6b8/0x9f0 [ 435.221660] ? vfs_write+0x1fc/0x560 [ 435.225386] ? ksys_write+0x101/0x260 [ 435.229197] ? do_syscall_64+0x1b9/0x820 [ 435.233294] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.238678] ? fs_reclaim_acquire+0x20/0x20 [ 435.243016] ? lock_downgrade+0x900/0x900 [ 435.247184] ? lock_release+0x970/0x970 [ 435.251183] ? check_same_owner+0x330/0x330 [ 435.255532] ? trace_hardirqs_on+0xbd/0x310 [ 435.259864] ? lock_downgrade+0x900/0x900 [ 435.264021] ? sock_kmalloc+0x15a/0x1f0 [ 435.268007] ? __might_sleep+0x95/0x190 [ 435.271996] __alloc_pages_nodemask+0x34b/0xdd0 [ 435.276799] ? lock_downgrade+0x900/0x900 [ 435.280974] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 435.285998] ? check_same_owner+0x330/0x330 [ 435.286017] ? sock_kmalloc+0x18a/0x1f0 [ 435.286036] ? iov_iter_npages+0xdd0/0xdd0 [ 435.286062] ? _copy_from_iter_full+0x2b8/0xc20 [ 435.295134] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 435.295164] ? af_alg_register_type+0x3f0/0x3f0 [ 435.295186] ? check_preemption_disabled+0x48/0x200 [ 435.321406] ? lock_sock_nested+0x9a/0x120 [ 435.325662] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 435.331211] alloc_pages_current+0x10c/0x210 [ 435.335640] af_alg_sendmsg+0xb08/0x1260 [ 435.339755] ? af_alg_pull_tsgl+0xd70/0xd70 [ 435.344105] aead_sendmsg+0x103/0x150 [ 435.347917] ? crypto_aead_copy_sgl+0x350/0x350 [ 435.352595] sock_sendmsg+0xd5/0x120 [ 435.356326] sock_write_iter+0x35e/0x5c0 [ 435.360424] ? sock_sendmsg+0x120/0x120 [ 435.364442] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 435.369986] ? iov_iter_init+0xc2/0x1e0 [ 435.373976] __vfs_write+0x6b8/0x9f0 [ 435.377698] ? kernel_read+0x120/0x120 [ 435.381618] ? apparmor_path_rmdir+0x30/0x30 [ 435.386039] ? lock_release+0x970/0x970 [ 435.390022] ? check_preemption_disabled+0x48/0x200 [ 435.395054] ? apparmor_file_permission+0x24/0x30 [ 435.399913] ? rw_verify_area+0x118/0x360 [ 435.404074] vfs_write+0x1fc/0x560 [ 435.407625] ksys_write+0x101/0x260 03:33:32 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000a0000000001005307a33d6c390836be381b", 0x1f) 03:33:32 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02f0ffffff000001005307a33d6c390836be381b", 0x1f) 03:33:32 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000001a0000001005307a33d6c390836be381b", 0x1f) 03:33:32 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020b000000000001005307a33d6c390836be381b", 0x1f) 03:33:32 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000081000001005307a33d6c390836be381b", 0x1f) [ 435.411269] ? __ia32_sys_read+0xb0/0xb0 [ 435.415353] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 435.420812] __x64_sys_write+0x73/0xb0 [ 435.424713] do_syscall_64+0x1b9/0x820 [ 435.428657] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 435.434037] ? syscall_return_slowpath+0x5e0/0x5e0 [ 435.438968] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.443805] ? trace_hardirqs_on_caller+0x310/0x310 [ 435.448809] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 435.453813] ? prepare_exit_to_usermode+0x291/0x3b0 [ 435.458822] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.463901] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.469075] RIP: 0033:0x457579 [ 435.472252] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 435.491141] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 435.498834] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 435.506089] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 435.513340] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 435.520592] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 435.527844] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:32 executing program 2: 03:33:32 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000000000035307a33d6c390836be381b", 0x1f) 03:33:34 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) write$binfmt_elf32(r0, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x18, 0x8001, 0x3, 0x1, 0x3, 0x0, 0x8, 0x2f5, 0x38, 0xd9, 0x5, 0x20, 0x20, 0x1, 0x9, 0x3}, [{0x0, 0x0, 0x2, 0x1e7, 0x0, 0x3ff, 0x0, 0x5}], "c47791730ac4f6461ce7211227dc77453a1b3da1279b02a391d47d68e639d6bfc6021953d4203237ea905ca6514cc8c5a22dd4f4a0151e770d526d36cd3c54460b601167d56d5ea5db3d6cbffdb8d992eee595f2a6112a52a015258a89dc22a877f4a74050aabcb3877e0c6d0148ce2516569577344b1b47b934241bec", [[], []]}, 0x2d5) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:33:34 executing program 4: 03:33:34 executing program 3 (fault-call:9 fault-nth:14): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:34 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000140)={0xffffffffffffffff}, 0x1, {0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x11}, 0x7}}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r4}}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r3}}, 0x18) shutdown(r1, 0x0) lseek(r0, 0x0, 0x4) write$UHID_CREATE2(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e797a3100000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f00ffffde050000eeaadc2107000000020000008ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e74696dabe6a54261b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28d4e005ace7d6bfe46f51f79257d7c7751974c41ecaf0fd84d2b1e8785c399cd81231"], 0x1) ioprio_set$uid(0x3, 0x0, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)=ANY=[@ANYBLOB="a700000060b6a8b35e742d1bce7fda122cea0713c562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3ae702e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b1057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"], &(0x7f000000a740)=0x1) 03:33:34 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0203000000000001005307a33d6c390836be381b", 0x1f) 03:33:34 executing program 2: 03:33:34 executing program 2: 03:33:34 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0209000000000001005307a33d6c390836be381b", 0x1f) [ 438.065488] FAULT_INJECTION: forcing a failure. [ 438.065488] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 438.100584] CPU: 0 PID: 22126 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 438.109105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.109111] Call Trace: [ 438.109138] dump_stack+0x1d3/0x2c4 [ 438.109162] ? dump_stack_print_info.cold.2+0x52/0x52 [ 438.109194] should_fail.cold.4+0xa/0x17 [ 438.109218] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 438.109247] ? save_stack+0xa9/0xd0 [ 438.142768] ? save_stack+0x43/0xd0 [ 438.146401] ? kasan_kmalloc+0xc7/0xe0 [ 438.146415] ? __kmalloc+0x14e/0x760 [ 438.146428] ? sock_kmalloc+0x15a/0x1f0 [ 438.146448] ? af_alg_sendmsg+0xa1b/0x1260 [ 438.154046] ? aead_sendmsg+0x103/0x150 [ 438.166214] ? sock_sendmsg+0xd5/0x120 [ 438.170123] ? sock_write_iter+0x35e/0x5c0 [ 438.170139] ? __vfs_write+0x6b8/0x9f0 [ 438.170152] ? vfs_write+0x1fc/0x560 [ 438.170164] ? ksys_write+0x101/0x260 [ 438.170210] ? do_syscall_64+0x1b9/0x820 [ 438.170254] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.170295] ? fs_reclaim_acquire+0x20/0x20 [ 438.170313] ? lock_downgrade+0x900/0x900 [ 438.170331] ? lock_release+0x970/0x970 [ 438.170350] ? check_same_owner+0x330/0x330 [ 438.195369] ? trace_hardirqs_on+0xbd/0x310 [ 438.195386] ? lock_downgrade+0x900/0x900 [ 438.195400] ? sock_kmalloc+0x15a/0x1f0 [ 438.195419] ? __might_sleep+0x95/0x190 [ 438.195437] __alloc_pages_nodemask+0x34b/0xdd0 [ 438.212178] ? lock_downgrade+0x900/0x900 [ 438.212211] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 438.212237] ? check_same_owner+0x330/0x330 [ 438.212262] ? iov_iter_npages+0xdd0/0xdd0 [ 438.224758] ? _copy_from_iter_full+0x2b8/0xc20 [ 438.224800] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 438.233441] alloc_pages_current+0x10c/0x210 [ 438.233461] af_alg_sendmsg+0xb08/0x1260 [ 438.233490] ? af_alg_pull_tsgl+0xd70/0xd70 [ 438.242650] aead_sendmsg+0x103/0x150 [ 438.242665] ? crypto_aead_copy_sgl+0x350/0x350 [ 438.242682] sock_sendmsg+0xd5/0x120 [ 438.242700] sock_write_iter+0x35e/0x5c0 [ 438.251239] ? sock_sendmsg+0x120/0x120 [ 438.251265] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 438.251286] ? iov_iter_init+0xc2/0x1e0 [ 438.261494] __vfs_write+0x6b8/0x9f0 [ 438.261512] ? kernel_read+0x120/0x120 [ 438.261532] ? apparmor_path_rmdir+0x30/0x30 03:33:35 executing program 2: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4}, 0x6) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @link_local, [], {@ipv4={0x700, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8100}}}}}}, &(0x7f0000000000)) 03:33:35 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x0) [ 438.278078] ? lock_release+0x970/0x970 [ 438.278099] ? check_preemption_disabled+0x48/0x200 [ 438.278120] ? apparmor_file_permission+0x24/0x30 [ 438.278146] ? rw_verify_area+0x118/0x360 [ 438.300061] vfs_write+0x1fc/0x560 [ 438.300081] ksys_write+0x101/0x260 [ 438.300099] ? __ia32_sys_read+0xb0/0xb0 [ 438.300119] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 438.300138] __x64_sys_write+0x73/0xb0 [ 438.307812] do_syscall_64+0x1b9/0x820 [ 438.307832] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 03:33:35 executing program 3 (fault-call:9 fault-nth:15): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) [ 438.307850] ? syscall_return_slowpath+0x5e0/0x5e0 [ 438.307865] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 438.307886] ? trace_hardirqs_on_caller+0x310/0x310 [ 438.325139] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 438.325158] ? prepare_exit_to_usermode+0x291/0x3b0 [ 438.325177] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 438.325222] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.334189] RIP: 0033:0x457579 03:33:35 executing program 2: prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet(0x2, 0x0, 0x0) seccomp(0x1, 0x1, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6}]}) [ 438.334206] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 438.334214] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 438.334229] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 438.334238] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 438.334256] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 438.341400] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 438.341409] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 [ 438.515941] FAULT_INJECTION: forcing a failure. [ 438.515941] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 438.604523] audit: type=1326 audit(2000000015.390:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22152 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 438.610496] CPU: 0 PID: 22154 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 438.634056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.643411] Call Trace: [ 438.646011] dump_stack+0x1d3/0x2c4 [ 438.646941] audit: type=1326 audit(2000000015.400:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22152 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 [ 438.649651] ? dump_stack_print_info.cold.2+0x52/0x52 [ 438.649676] should_fail.cold.4+0xa/0x17 [ 438.680838] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 438.686276] ? save_stack+0xa9/0xd0 [ 438.689892] ? save_stack+0x43/0xd0 [ 438.693504] ? kasan_kmalloc+0xc7/0xe0 [ 438.697376] ? __kmalloc+0x14e/0x760 [ 438.701520] ? sock_kmalloc+0x15a/0x1f0 [ 438.706559] ? af_alg_sendmsg+0xa1b/0x1260 [ 438.711039] ? aead_sendmsg+0x103/0x150 [ 438.714997] ? sock_sendmsg+0xd5/0x120 [ 438.718870] ? sock_write_iter+0x35e/0x5c0 [ 438.723091] ? __vfs_write+0x6b8/0x9f0 [ 438.726964] ? vfs_write+0x1fc/0x560 [ 438.730663] ? ksys_write+0x101/0x260 [ 438.734450] ? do_syscall_64+0x1b9/0x820 [ 438.738501] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.743860] ? fs_reclaim_acquire+0x20/0x20 [ 438.748171] ? lock_downgrade+0x900/0x900 [ 438.752306] ? lock_release+0x970/0x970 [ 438.756464] ? check_same_owner+0x330/0x330 [ 438.761082] ? trace_hardirqs_on+0xbd/0x310 [ 438.765477] ? lock_downgrade+0x900/0x900 [ 438.769614] ? sock_kmalloc+0x15a/0x1f0 [ 438.773581] ? __might_sleep+0x95/0x190 [ 438.777566] __alloc_pages_nodemask+0x34b/0xdd0 [ 438.782226] ? lock_downgrade+0x900/0x900 [ 438.786366] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 438.791386] ? check_same_owner+0x330/0x330 [ 438.795706] ? sock_kmalloc+0x18a/0x1f0 [ 438.799683] ? iov_iter_npages+0xdd0/0xdd0 [ 438.803915] ? _copy_from_iter_full+0x2b8/0xc20 [ 438.808572] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 438.814529] ? af_alg_register_type+0x3f0/0x3f0 [ 438.819184] ? check_preemption_disabled+0x48/0x200 [ 438.824187] ? lock_sock_nested+0x9a/0x120 [ 438.828410] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 438.833939] alloc_pages_current+0x10c/0x210 [ 438.838340] af_alg_sendmsg+0xb08/0x1260 [ 438.842403] ? af_alg_pull_tsgl+0xd70/0xd70 [ 438.846737] aead_sendmsg+0x103/0x150 [ 438.850717] ? crypto_aead_copy_sgl+0x350/0x350 [ 438.855376] sock_sendmsg+0xd5/0x120 [ 438.859077] sock_write_iter+0x35e/0x5c0 [ 438.863125] ? sock_sendmsg+0x120/0x120 [ 438.867090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 438.872640] ? iov_iter_init+0xc2/0x1e0 [ 438.876617] __vfs_write+0x6b8/0x9f0 [ 438.880341] ? kernel_read+0x120/0x120 [ 438.884220] ? apparmor_path_rmdir+0x30/0x30 [ 438.888616] ? lock_release+0x970/0x970 [ 438.892579] ? check_preemption_disabled+0x48/0x200 [ 438.897583] ? apparmor_file_permission+0x24/0x30 [ 438.902431] ? rw_verify_area+0x118/0x360 [ 438.906590] vfs_write+0x1fc/0x560 [ 438.910134] ksys_write+0x101/0x260 [ 438.913769] ? __ia32_sys_read+0xb0/0xb0 [ 438.917831] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 438.923289] __x64_sys_write+0x73/0xb0 [ 438.927167] do_syscall_64+0x1b9/0x820 [ 438.931044] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 438.936746] ? syscall_return_slowpath+0x5e0/0x5e0 [ 438.942627] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 438.948252] ? trace_hardirqs_on_caller+0x310/0x310 [ 438.953267] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 438.958318] ? prepare_exit_to_usermode+0x291/0x3b0 [ 438.963327] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 438.968180] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.973366] RIP: 0033:0x457579 [ 438.976544] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:33:35 executing program 5: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02f0ffffff000001005307a33d6c390836be381b", 0x1f) 03:33:35 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000007000001005307a33d6c390836be381b", 0x1f) 03:33:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg(r1, &(0x7f00000004c0)={&(0x7f00000002c0)=@can, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000440)=""/57, 0x39}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000680)={'vcan0\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x40000000023, &(0x7f00000001c0)=0xe63, 0x4) connect$can_bcm(r1, &(0x7f0000000500)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={&(0x7f0000000000), 0x10, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f0000000200), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 03:33:35 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000300)) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my}, 0x10) [ 438.998682] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.007165] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 439.014434] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 439.021691] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 439.028947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 439.036200] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:35 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02a0010000000001005307a33d6c390836be381b", 0x1f) 03:33:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x8, 0x80) ioctl$KDSKBLED(r3, 0x4b65, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="dac466b8e7000f00d0f2e10d0fc7980000000066baa000ed0f20c035000001000f22c03ef436f3406cc402d137363e2e3e0f01d1", 0x34}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x480]}) [ 439.092606] audit: type=1326 audit(2000000015.880:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22152 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 03:33:35 executing program 3 (fault-call:9 fault-nth:16): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x80) socketpair(0x1, 0x80f, 0x9, &(0x7f0000000080)={0xffffffffffffffff}) r2 = accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000001640)={@mcast2, 0x0}, &(0x7f0000001680)=0x14) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000016c0)={r3, @multicast1, @multicast2}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r4 = socket(0x400020000000010, 0x2, 0x0) write(r4, &(0x7f0000a1cf6c)="1f00000054000d0000000000fc07ff1b070404390000000007000100010039", 0x1f) 03:33:36 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfffffffffffffff8, 0x101) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0x3f) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x20000) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000180)={0x42b1, 0xf000}) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f00000001c0)={0x4d94, 0x5, "2c2e8831b0"}) r3 = socket$inet(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000050107031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba01000000009c5362467a5019774bbfa22bf71409b356da5a80d18be34c8546", 0x4c}], 0x1}, 0x0) 03:33:36 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020ec00000000001005307a33d6c390836be381b", 0x1f) [ 439.210658] FAULT_INJECTION: forcing a failure. [ 439.210658] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 439.260717] PF_BRIDGE: br_mdb_parse() with invalid ifindex [ 439.264162] CPU: 0 PID: 22187 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 439.274877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.284238] Call Trace: [ 439.284260] dump_stack+0x1d3/0x2c4 [ 439.284281] ? dump_stack_print_info.cold.2+0x52/0x52 [ 439.284305] should_fail.cold.4+0xa/0x17 [ 439.299754] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 439.304884] ? save_stack+0xa9/0xd0 [ 439.304900] ? save_stack+0x43/0xd0 [ 439.304922] ? kasan_kmalloc+0xc7/0xe0 [ 439.316035] ? __kmalloc+0x14e/0x760 [ 439.319753] ? sock_kmalloc+0x15a/0x1f0 [ 439.323735] ? af_alg_sendmsg+0xa1b/0x1260 [ 439.327974] ? aead_sendmsg+0x103/0x150 [ 439.331945] ? sock_sendmsg+0xd5/0x120 [ 439.335830] ? sock_write_iter+0x35e/0x5c0 [ 439.340062] ? __vfs_write+0x6b8/0x9f0 [ 439.343945] ? vfs_write+0x1fc/0x560 [ 439.347655] ? ksys_write+0x101/0x260 [ 439.351458] ? do_syscall_64+0x1b9/0x820 [ 439.355520] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.360891] ? cache_grow_end+0xa8/0x190 [ 439.364955] ? fs_reclaim_acquire+0x20/0x20 [ 439.369277] ? lock_downgrade+0x900/0x900 [ 439.373438] ? lock_release+0x970/0x970 [ 439.377411] ? check_same_owner+0x330/0x330 [ 439.381732] ? trace_hardirqs_on+0xbd/0x310 [ 439.386061] ? kasan_check_write+0x14/0x20 [ 439.390296] ? sock_kmalloc+0x15a/0x1f0 [ 439.394271] ? __might_sleep+0x95/0x190 [ 439.398273] __alloc_pages_nodemask+0x34b/0xdd0 [ 439.402944] ? lock_downgrade+0x900/0x900 [ 439.407099] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 439.412115] ? check_same_owner+0x330/0x330 [ 439.416436] ? sock_kmalloc+0x18a/0x1f0 [ 439.420413] ? iov_iter_npages+0xdd0/0xdd0 [ 439.424652] ? _copy_from_iter_full+0x2b8/0xc20 [ 439.429324] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 439.435299] ? af_alg_register_type+0x3f0/0x3f0 [ 439.439971] ? check_preemption_disabled+0x48/0x200 [ 439.444987] ? lock_sock_nested+0x9a/0x120 [ 439.449579] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 439.455122] alloc_pages_current+0x10c/0x210 [ 439.459532] af_alg_sendmsg+0xb08/0x1260 [ 439.464100] ? af_alg_pull_tsgl+0xd70/0xd70 [ 439.468428] aead_sendmsg+0x103/0x150 [ 439.472231] ? crypto_aead_copy_sgl+0x350/0x350 [ 439.476905] sock_sendmsg+0xd5/0x120 [ 439.480622] sock_write_iter+0x35e/0x5c0 [ 439.484684] ? sock_sendmsg+0x120/0x120 [ 439.488668] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 439.494209] ? iov_iter_init+0xc2/0x1e0 [ 439.498185] __vfs_write+0x6b8/0x9f0 [ 439.501902] ? kernel_read+0x120/0x120 [ 439.505800] ? apparmor_path_rmdir+0x30/0x30 [ 439.510212] ? lock_release+0x970/0x970 [ 439.514197] ? check_preemption_disabled+0x48/0x200 [ 439.519220] ? apparmor_file_permission+0x24/0x30 [ 439.524070] ? rw_verify_area+0x118/0x360 [ 439.528219] vfs_write+0x1fc/0x560 [ 439.531771] ksys_write+0x101/0x260 [ 439.535575] ? __ia32_sys_read+0xb0/0xb0 [ 439.539647] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 439.545100] __x64_sys_write+0x73/0xb0 [ 439.548991] do_syscall_64+0x1b9/0x820 [ 439.552884] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 439.558249] ? syscall_return_slowpath+0x5e0/0x5e0 [ 439.563180] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 439.568024] ? trace_hardirqs_on_caller+0x310/0x310 [ 439.573045] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 439.578064] ? prepare_exit_to_usermode+0x291/0x3b0 [ 439.583087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 439.587940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.593126] RIP: 0033:0x457579 03:33:36 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x0) ioctl$sock_bt(r0, 0x541b, &(0x7f00000002c0)) r1 = dup3(r0, r0, 0x80000) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e22, @multicast2}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="2d6d65696f727920864e6eb340a033a22dbfc000e696e1ab9b8a67b488eb15ba5fb8e33241844e64b9063e84b6725eeb8c8ef5bc23860246d2db777b6b4fbdb59f8e565ae1942d2d9444e5a83d7d51dcd1f9b05c202064da7b5fccf36f314bd166f913564794830bbead0fa2fa2fbc397bb49c0b84fe1dd2c0ee91bbb346a1c512bad80177cb0f56b2d5cc89f4a8f6e22fb8109a358fc93ab495cde5b988d6d8d9c6232ce81b6ea881a2ef08b4f85ef1d5d13495f5c47c958bb799c435ce16345b82cc4266ae6f7ced79ad312914cf4384"], 0x8) [ 439.596321] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 439.615233] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.622967] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 439.630230] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 439.637510] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 439.644775] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 439.652044] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:36 executing program 4: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) sendfile(r2, r1, &(0x7f0000000480), 0x100000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat(r2, &(0x7f0000000040)='./bus\x00', 0x501001, 0x24) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x8000c) 03:33:36 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200f0ffff000001005307a33d6c390836be381b", 0x1f) 03:33:36 executing program 0: ptrace$peek(0xffffffffffffffff, 0x0, &(0x7f0000000080)) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) perf_event_open(&(0x7f00000000c0)={0x800000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x40046103, &(0x7f0000000300)={{0x2, 0x0, @remote, [0xfe, 0x60000000]}, {0x0, @local}, 0x0, {0x2, 0x0, @loopback}}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x16) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)=0x157a, 0x4) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0) [ 439.676616] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. [ 439.711583] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. 03:33:36 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000005000001005307a33d6c390836be381b", 0x1f) 03:33:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="6070000000000003810000") r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xce3, 0x1) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x4) sendto$inet(r2, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0), 0x10) recvmsg(r2, &(0x7f0000edffc8)={0x0, 0x0, &(0x7f00000024c0), 0x3bf, &(0x7f0000603000)=""/81, 0x51}, 0x0) 03:33:36 executing program 2: setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000500)=0x6, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980)='/dev/sequencer2\x00', 0x240, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={r0, 0x5, 0x2c, 0x3ff, 0x6}, &(0x7f00000004c0)=0x18) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r1, 0x0, &(0x7f00000002c0)=0x237, 0x80000) bind$vsock_dgram(r2, &(0x7f0000000380)={0x28, 0x0, 0x2710, @hyper}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b40)={0x0}, &(0x7f0000000300)=0xc) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_int(r4, 0x21, 0x11, &(0x7f0000000280)=0x200, 0x4) r5 = syz_open_procfs(r3, &(0x7f00000003c0)='net/sockstat6\x00') mq_notify(r5, &(0x7f0000000140)={0x0, 0x10000004, 0x4, @tid=r3}) inotify_init() r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) bind(0xffffffffffffffff, &(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x22e) sysfs$1(0x1, &(0x7f0000000b00)='eth0\x00') setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000080)={0xfffffffffffffffd}, 0x4) mq_notify(r6, &(0x7f00000001c0)={0x0, 0x14, 0x0, @tid=r3}) ftruncate(r6, 0x3fe) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x100, 0x0) r7 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r7, 0xe, &(0x7f00000009c0)=""/60) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'bond0\x00', @random="ce71fe5357b7"}) mq_timedsend(r6, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) 03:33:36 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000c0000000001005307a33d6c390836be381b", 0x1f) 03:33:36 executing program 3 (fault-call:9 fault-nth:17): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:36 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x3, {0x5, 0x3, "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", 0x16, 0x9, 0x6, 0x3ff, 0x0, 0x1, 0x8}, r1}}, 0x128) prlimit64(0x0, 0x7, &(0x7f00000002c0), &(0x7f0000000440)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000b80), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) r3 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000040)) socket$rds(0x15, 0x5, 0x0) r4 = memfd_create(&(0x7f0000000000)='vmnet1wlan1\x00', 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000001c0)) fcntl$notify(r0, 0x402, 0x11) 03:33:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndctrl(&(0x7f0000000440)='/dev/snd/controlC#\x00', 0x4000007, 0x0) perf_event_open(&(0x7f0000001000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0xf47283a335973a7c) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={r4, 0x1000000000080000, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000100)={r3, r5, 0x1}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc4c85512, &(0x7f0000000000)) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000140)) 03:33:36 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x804441, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000005c0)={0x0, {{0xa, 0x4e23, 0x0, @mcast2}}}, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af14, &(0x7f0000000200)) geteuid() ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x800}) 03:33:36 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000b0000000001005307a33d6c390836be381b", 0x1f) 03:33:36 executing program 5: r0 = memfd_create(&(0x7f0000000100)="0b656d31c1f8a68d4ec0a35ce2cba2bae5f497ac232aff", 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x40000, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000140)) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ftruncate(r0, 0x8000) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1ff, {0x0, 0x3, 0x79f1, 0x3, 0x8, 0x9}, 0x401, 0x10001}, 0xe) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x146, &(0x7f0000000000)=[{}]}, 0x10) 03:33:36 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200070000000001005307a33d6c390836be381b", 0x1f) [ 440.023624] FAULT_INJECTION: forcing a failure. [ 440.023624] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 440.035891] CPU: 1 PID: 22249 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 440.044394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.053783] Call Trace: [ 440.053814] dump_stack+0x1d3/0x2c4 [ 440.053841] ? dump_stack_print_info.cold.2+0x52/0x52 [ 440.053865] ? debug_smp_processor_id+0x1c/0x20 [ 440.053885] ? perf_trace_lock_acquire+0x15b/0x800 [ 440.053913] should_fail.cold.4+0xa/0x17 [ 440.053937] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 440.053955] ? save_stack+0xa9/0xd0 [ 440.053985] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.087928] ? check_preemption_disabled+0x48/0x200 [ 440.087951] ? debug_smp_processor_id+0x1c/0x20 [ 440.087970] ? perf_trace_lock_acquire+0x15b/0x800 [ 440.087989] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.088011] ? perf_trace_lock+0x7a0/0x7a0 [ 440.103217] ? fs_reclaim_acquire+0x20/0x20 03:33:36 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000000000a0001005307a33d6c390836be381b", 0x1f) [ 440.103243] ? lock_downgrade+0x900/0x900 [ 440.126283] ? lock_release+0x970/0x970 [ 440.130285] ? check_same_owner+0x330/0x330 [ 440.134627] ? trace_hardirqs_on+0xbd/0x310 [ 440.138964] ? sock_kmalloc+0x15a/0x1f0 [ 440.142957] ? __might_sleep+0x95/0x190 [ 440.146948] __alloc_pages_nodemask+0x34b/0xdd0 [ 440.151657] ? lock_downgrade+0x900/0x900 [ 440.155826] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 440.160859] ? check_same_owner+0x330/0x330 [ 440.165203] ? sock_kmalloc+0x18a/0x1f0 [ 440.169207] ? iov_iter_npages+0xdd0/0xdd0 03:33:36 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000006140001005307a33d6c390836be381b", 0x1f) [ 440.174439] ? _copy_from_iter_full+0x2b8/0xc20 [ 440.179125] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 440.185113] ? af_alg_register_type+0x3f0/0x3f0 [ 440.185131] ? check_preemption_disabled+0x48/0x200 [ 440.185150] ? lock_sock_nested+0x9a/0x120 [ 440.194839] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 440.204616] alloc_pages_current+0x10c/0x210 [ 440.209051] af_alg_sendmsg+0xb08/0x1260 [ 440.213144] ? af_alg_pull_tsgl+0xd70/0xd70 [ 440.217491] aead_sendmsg+0x103/0x150 [ 440.221304] ? crypto_aead_copy_sgl+0x350/0x350 [ 440.225997] sock_sendmsg+0xd5/0x120 [ 440.229740] sock_write_iter+0x35e/0x5c0 [ 440.233821] ? sock_sendmsg+0x120/0x120 [ 440.237824] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 440.243370] ? iov_iter_init+0xc2/0x1e0 [ 440.247371] __vfs_write+0x6b8/0x9f0 [ 440.251103] ? kernel_read+0x120/0x120 [ 440.255013] ? apparmor_path_rmdir+0x30/0x30 [ 440.259436] ? lock_release+0x970/0x970 [ 440.263428] ? check_preemption_disabled+0x48/0x200 [ 440.268465] ? apparmor_file_permission+0x24/0x30 [ 440.273328] ? rw_verify_area+0x118/0x360 [ 440.277655] vfs_write+0x1fc/0x560 [ 440.281202] ksys_write+0x101/0x260 [ 440.284936] ? __ia32_sys_read+0xb0/0xb0 [ 440.289008] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 440.294468] __x64_sys_write+0x73/0xb0 [ 440.298364] do_syscall_64+0x1b9/0x820 [ 440.302265] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 440.308771] ? syscall_return_slowpath+0x5e0/0x5e0 [ 440.314408] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 440.319257] ? trace_hardirqs_on_caller+0x310/0x310 [ 440.324293] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 440.329313] ? prepare_exit_to_usermode+0x291/0x3b0 [ 440.334333] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 440.339186] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.344373] RIP: 0033:0x457579 [ 440.347580] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 440.366480] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 03:33:37 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000000000f0001005307a33d6c390836be381b", 0x1f) [ 440.374189] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 440.381454] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 440.388740] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 440.396013] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 440.403283] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:39 executing program 2: msgget$private(0x0, 0x114) syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x2, 0x0) syz_open_dev$binder(0xfffffffffffffffe, 0xffffffffffffffff, 0x0) 03:33:39 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200a00100000001005307a33d6c390836be381b", 0x1f) 03:33:39 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4008550c, &(0x7f00000000c0)={0x0, 0x5f5e0ff}) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000200)="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") ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r1, 0x1000000000013) 03:33:39 executing program 3 (fault-call:9 fault-nth:18): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:39 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2d0000002200010000000000000000000400000008000c00", @ANYRES32=0x0], 0x1c}}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x2011, r0, 0x0) 03:33:39 executing program 5: setresuid(0x0, 0xee01, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) 03:33:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x4000000000034, {0x90000008, 0x0, 0x8001, 0xfffffffffffffffd, 0x0, 0x4}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000180)) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r0, &(0x7f00000007c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 442.941640] FAULT_INJECTION: forcing a failure. [ 442.941640] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 442.976395] CPU: 1 PID: 22290 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 442.984915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.994275] Call Trace: [ 442.994303] dump_stack+0x1d3/0x2c4 [ 442.994327] ? dump_stack_print_info.cold.2+0x52/0x52 [ 442.994354] ? perf_trace_lock+0x14d/0x7a0 [ 443.009965] should_fail.cold.4+0xa/0x17 [ 443.014040] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 443.019174] ? save_stack+0xa9/0xd0 [ 443.022816] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.028371] ? check_preemption_disabled+0x48/0x200 [ 443.033396] ? __kmalloc+0x14e/0x760 [ 443.033418] ? debug_smp_processor_id+0x1c/0x20 [ 443.033440] ? do_syscall_64+0x1b9/0x820 [ 443.045872] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 443.051251] ? zap_class+0x640/0x640 [ 443.054982] ? zap_class+0x640/0x640 [ 443.058704] ? fs_reclaim_acquire+0x20/0x20 [ 443.063035] ? lock_downgrade+0x900/0x900 [ 443.067195] ? lock_release+0x970/0x970 [ 443.071179] ? check_same_owner+0x330/0x330 [ 443.075510] ? trace_hardirqs_on+0xbd/0x310 [ 443.079850] ? __might_sleep+0x95/0x190 [ 443.083835] __alloc_pages_nodemask+0x34b/0xdd0 [ 443.088510] ? lock_downgrade+0x900/0x900 [ 443.092666] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 443.097691] ? check_same_owner+0x330/0x330 [ 443.102019] ? sock_kmalloc+0x18a/0x1f0 [ 443.106007] ? iov_iter_npages+0xdd0/0xdd0 [ 443.110286] ? _copy_from_iter_full+0x2b8/0xc20 [ 443.114985] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 443.120969] ? af_alg_register_type+0x3f0/0x3f0 [ 443.125645] ? check_preemption_disabled+0x48/0x200 [ 443.130688] ? lock_sock_nested+0x9a/0x120 [ 443.134931] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 443.140484] alloc_pages_current+0x10c/0x210 [ 443.144903] af_alg_sendmsg+0xb08/0x1260 [ 443.148983] ? af_alg_pull_tsgl+0xd70/0xd70 [ 443.153320] aead_sendmsg+0x103/0x150 [ 443.157125] ? crypto_aead_copy_sgl+0x350/0x350 [ 443.161843] sock_sendmsg+0xd5/0x120 [ 443.165570] sock_write_iter+0x35e/0x5c0 [ 443.169654] ? sock_sendmsg+0x120/0x120 [ 443.173646] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 443.179189] ? iov_iter_init+0xc2/0x1e0 [ 443.183180] __vfs_write+0x6b8/0x9f0 [ 443.186907] ? kernel_read+0x120/0x120 [ 443.190831] ? apparmor_path_rmdir+0x30/0x30 [ 443.195249] ? lock_release+0x970/0x970 [ 443.199248] ? check_preemption_disabled+0x48/0x200 [ 443.204716] ? apparmor_file_permission+0x24/0x30 [ 443.210439] ? rw_verify_area+0x118/0x360 [ 443.215207] vfs_write+0x1fc/0x560 [ 443.218757] ksys_write+0x101/0x260 [ 443.222391] ? __ia32_sys_read+0xb0/0xb0 [ 443.226461] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 443.231944] __x64_sys_write+0x73/0xb0 [ 443.236365] do_syscall_64+0x1b9/0x820 [ 443.241137] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 443.247635] ? syscall_return_slowpath+0x5e0/0x5e0 [ 443.253618] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 443.259597] ? trace_hardirqs_on_caller+0x310/0x310 [ 443.265582] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 443.271647] ? prepare_exit_to_usermode+0x291/0x3b0 [ 443.278017] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 443.283658] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 443.290324] RIP: 0033:0x457579 [ 443.294302] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 443.313374] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 443.321086] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 443.328353] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 443.335622] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 03:33:40 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200f00000000001005307a33d6c390836be381b", 0x1f) [ 443.342891] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 443.350160] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:40 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x7, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0x10001, 0x7fff, 0xde3, 0x10001, 0xb7}, 0x14) listen(r0, 0x4) r2 = socket$inet6_sctp(0xa, 0x2001, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000400)=0x3, 0x4) r3 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x81, 0x2200) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000001c0)={0x20000000}) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x9, 0x1ff, 0x9, 0x1, 0xafd3}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r4, 0x10000}, 0x8) 03:33:40 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200050000000001005307a33d6c390836be381b", 0x1f) [ 443.400839] QAT: Invalid ioctl [ 443.416935] input: syz1 as /devices/virtual/input/input256 [ 443.434483] QAT: Invalid ioctl 03:33:40 executing program 2: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200f00000000001005307a33d6c390836be381b", 0x1f) [ 443.452977] input: syz1 as /devices/virtual/input/input257 03:33:40 executing program 0: socket$inet6(0xa, 0x800, 0x8) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1000000008912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = dup2(r0, r0) r2 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f00000001c0)=0xe8) write$P9_RSTATu(r1, &(0x7f0000000500)=ANY=[@ANYRES64=r2, @ANYBLOB="32fab48e0645ff13b4f75859b95ac3b4675b266a3741856ca790ada446578026ce56f9732ea4803bca45b0892ccb6c8257c56e09cfdb6d9659410370a41f95e37cf6a3edc0d12acbab701fe91b", @ANYRES32=r3, @ANYRES32=r4], 0x5d) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) userfaultfd(0x800) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="643d0061626c655fd86f6c6c5fffffffff58a30d2c99932a658d9770a03e79a1e160650964145971016e703790d45de44a8e75b83e40c28303238f077d0d24418a3be6ff24964a34"]) 03:33:40 executing program 4: r0 = socket$inet6(0xa, 0x10, 0x1ffffdff) ioctl(r0, 0x80000001, &(0x7f0000000080)="227059f1abd3f345e667ab3ae2dbbd4fad3a05cc474d43b7d1fdcb73e4c88bb3095edacf21903d9c8a6e30539483c52660a7f83e385b7ec9a05b53b4ec79bb43e7a678698f95619acc9af8fbe44ac192627fa9d21a0ba55671e6a812776c17741767b0bad6e67d8994a8f59b8a58962cb0c321108975554bd79f2cb48c0deb") r1 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYPTR, @ANYRES32=r0, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES64=r0], @ANYRES64=r0], 0x57) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200000, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000100)="6067d4392e7102717c2dbfff5deeabb2e7ea1621ff984056cf88d521c6b24d3214438c271ba275a7aac546418a455899ff583820a2111abe57dd0a52b362490e11af7cd3cddb72d2402e4cb382dfc2bb62b1ece75ee02ab9b6729d9ec00e601bbeda42a593a841da513d21f9591cb7641dfa279b9f9ecd564a3d70a6191266551ce2312bbf399cf9505a23b00f41d941a1541d918ba8ba6e42aa307eb7c9ffa7d8e28dded63bed1ac29e3d5ed9fb4a12b8e623c7d8817d77b2b2", &(0x7f0000000040)}, 0x18) write(r1, &(0x7f0000000340)="2300000014000707030e0000120f0a080112ff00000007a715077508003ce2bcb3826b", 0x23) 03:33:40 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000050001005307a33d6c390836be381b", 0x1f) 03:33:40 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x20000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000700)) socket$bt_bnep(0x1f, 0x3, 0x4) accept4$packet(0xffffffffffffff9c, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x7, 0x800) r1 = dup(0xffffffffffffffff) accept4$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000680)=0x14, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={"3b91727cffdf6e00", r2}) connect$unix(0xffffffffffffffff, &(0x7f00000005c0)=@file={0x0, './file2\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f00000006c0)='./file0/file0\x00'}, 0x10) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L+', 0x6}, 0x28, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L+', 0x3}, 0x28, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) futimesat(r1, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={{0x0, 0x2710}}) request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000340), &(0x7f0000000380)=']/[eth0lo#md5sum:trusted\x00', 0xffffffffffffffff) gettid() getdents(0xffffffffffffffff, &(0x7f0000000480)=""/164, 0xa4) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8eaf5f126d4cd8ec8666d1c953e39351715bc548f02a29361a524e61465b276401"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000140)=""/201, &(0x7f0000000000)=0xc9) 03:33:40 executing program 3 (fault-call:9 fault-nth:19): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:40 executing program 5: fstat(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$f2fs(&(0x7f0000000300)='f2fs\x00', &(0x7f0000002ac0)='./file0\x00', 0x80, 0x8, &(0x7f0000002800)=[{&(0x7f0000000380)="529228d57614872080df99219c89ca12cf70b694fb0a7c236fbcb2b4597b47eeaacc4ec9449dfc4ffb8e9fae34e40c7f9c0712d41487faa3c5fd6969122058ead954633f98469d202e21c5af7a4fea1c4f5e2aaf04c74113dda0779486c99a47473e3929add5de1d77d0a675d7cd2c1da096320e8858db12a7df85a97e0bd965e5638319072cab518884ef5e25239d9d9c1288002c5f9847039239b32186b4fed1fe3c4278cced8f22b41ce90c5b788dcb2197c772c9fd138b1c8cb676d6c65f77f44565fc210c4e3b983ae58b44e230056e2094ff28abcb91fa54a7", 0xdc, 0x76e}, {&(0x7f0000000480)="bc0b63ab60a3b399af00429ceeae0d652a2d74a6b9ec4d5243b967a13ef8aa0ebf170ca3ca137078f209d85c58dab9c68cc8b8ee8350ccbc03235fa2f9686cc863669ffc77707625dfddf8f812649d23be8fcaf7085afb02c7797fc6b80ef038d2224b242cb8d502b8d678a81a2adc66df10a4d6189a941e64ffb7e968849c41cb15d2228d08a98ae4381d9866b7846518c6f52e427760b055744fe07ef80954835273fe13f2f3420d3cf62e9c4d8809509d2db83a246093c3ffb92b92db7fd48849", 0xc2, 0x81}, {&(0x7f0000000580)="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", 0x1000, 0x6}, {&(0x7f0000001580)="c3a1f02cb3046b2ae74685ec49bee9f8a74ad62a50b9256965a8ce0b7a856cf0818c8f23566fdb60e6d5e9d4940f1d69202e9e6dfac0ad3385c6b501a807316b7d16ead2fc62b71e", 0x48, 0x9}, {&(0x7f0000001600)="e5eb61f5fec74258accc7087a6711e6137423debe74980518f1ab28a4a085e3c3f1c5be0ebef462eaf7f009a596dd9b5546c18d05792fc8bbd12fcbea960e4c771a3d095907c90", 0x47, 0x8000}, {&(0x7f0000001680)="1cf56e93ac4ad44f977046c6c82ffc09db20fd8a7f9646cd5e7a5c8c7ceb60c1ca49be7aa318df4f9added82c62e2e03ac1de1c19461808d38c596479e86841671e127df8b3cdeff44e02c61280786ad813a48b45233577ffd2b731b960a1ba1508d853b489b4f83ad08f9dd8a6fcbfb8eb2c1d79c64ff55ffdc72d58350bd3f04d71b60c78447ecb08c4c8e89262743a66ffdee692825", 0x97, 0x9}, {&(0x7f0000001740)="24c74b648557d7c90c21cfede1931c6322319f7e59aebc978e7bf665891d2dec8df1b0b911828c879827a9b38ede92a2aa9cfdc9603f5dde7479fc048b1504ffbb578d81a43cc6735bd7a466834242d568bb1a328cbf8727d384ed335824d9180ab8d24745359f834b43c1a0ac1eb4eed2be18056402084afccf017b539be221199cf9bc4961523c71208e04be929520c8484db439a0f37a20d840505f1e899c563fad1c54b0d3", 0xa7, 0x36}, {&(0x7f0000001800)="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", 0x1000, 0xd4}], 0x10000, &(0x7f00000029c0)={[{@noacl='noacl'}, {@inline_xattr_size={'inline_xattr_size', 0x3d, 0x19}}, {@nouser_xattr='nouser_xattr'}, {@four_active_logs='active_logs=4'}, {@grpquota={'grpquota', 0x3d, '/dev/amidi#\x00'}}], [{@fsname={'fsname', 0x3d, '{#^vmnet1{em1-[trustedGPL'}}, {@appraise_type='appraise_type=imasig'}, {@smackfshat={'smackfshat', 0x3d, '/dev/amidi#\x00'}}, {@smackfshat={'smackfshat', 0x3d, '-\\'}}, {@dont_measure='dont_measure'}]}) r2 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x0, 0x400001) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x0) chown(&(0x7f0000000040)='./file0\x00', r0, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 443.612933] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 03:33:40 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02009effffff0001005307a33d6c390836be381b", 0x1f) [ 443.667075] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 443.680211] FAULT_INJECTION: forcing a failure. [ 443.680211] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 443.695793] F2FS-fs (loop0): Unrecognized mount option "d=" or missing value 03:33:40 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x1000000000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1502000000000000000200000200000000000000005783ec36"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x41}], &(0x7f0000000140)='GPL\x00', 0x41, 0xa7, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0xdc, &(0x7f0000000280)="0494c16d15656fc30b46585fde1e", &(0x7f0000000380)=""/220, 0xf000}, 0x28) socket$kcm(0x2, 0x0, 0x0) [ 443.716479] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 443.726147] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 443.733709] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x9d6dcee1) [ 443.753219] CPU: 1 PID: 22342 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 03:33:40 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000810001005307a33d6c390836be381b", 0x1f) 03:33:40 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') pwritev(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x2000000) [ 443.761739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.771189] Call Trace: [ 443.773797] dump_stack+0x1d3/0x2c4 [ 443.777449] ? dump_stack_print_info.cold.2+0x52/0x52 [ 443.777491] should_fail.cold.4+0xa/0x17 [ 443.786731] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 443.791861] ? save_stack+0xa9/0xd0 [ 443.791883] ? save_stack+0x43/0xd0 [ 443.799122] ? kasan_kmalloc+0xc7/0xe0 [ 443.803015] ? __kmalloc+0x14e/0x760 [ 443.806736] ? sock_kmalloc+0x15a/0x1f0 [ 443.810756] ? af_alg_sendmsg+0xa1b/0x1260 03:33:40 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000b0000000001005307a33d6c390836be381b", 0x1f) [ 443.815183] ? aead_sendmsg+0x103/0x150 [ 443.815200] ? sock_sendmsg+0xd5/0x120 [ 443.815219] ? sock_write_iter+0x35e/0x5c0 [ 443.828355] ? __vfs_write+0x6b8/0x9f0 [ 443.832252] ? vfs_write+0x1fc/0x560 [ 443.835984] ? ksys_write+0x101/0x260 [ 443.839794] ? do_syscall_64+0x1b9/0x820 [ 443.839814] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 443.839843] ? fs_reclaim_acquire+0x20/0x20 [ 443.853574] ? lock_downgrade+0x900/0x900 [ 443.857740] ? lock_release+0x970/0x970 [ 443.861728] ? check_same_owner+0x330/0x330 03:33:40 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200061400000001005307a33d6c390836be381b", 0x1f) [ 443.866083] ? trace_hardirqs_on+0xbd/0x310 [ 443.870416] ? lock_downgrade+0x900/0x900 [ 443.874576] ? sock_kmalloc+0x15a/0x1f0 [ 443.878593] ? __might_sleep+0x95/0x190 [ 443.882583] __alloc_pages_nodemask+0x34b/0xdd0 [ 443.887269] ? lock_downgrade+0x900/0x900 [ 443.891426] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 443.896465] ? check_same_owner+0x330/0x330 [ 443.900798] ? sock_kmalloc+0x18a/0x1f0 [ 443.904795] ? iov_iter_npages+0xdd0/0xdd0 [ 443.909053] ? _copy_from_iter_full+0x2b8/0xc20 [ 443.913738] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 443.919726] ? af_alg_register_type+0x3f0/0x3f0 [ 443.924410] ? check_preemption_disabled+0x48/0x200 [ 443.929439] ? lock_sock_nested+0x9a/0x120 [ 443.933689] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 443.939240] alloc_pages_current+0x10c/0x210 [ 443.943665] af_alg_sendmsg+0xb08/0x1260 [ 443.947747] ? af_alg_pull_tsgl+0xd70/0xd70 [ 443.947782] aead_sendmsg+0x103/0x150 [ 443.956234] ? crypto_aead_copy_sgl+0x350/0x350 [ 443.961400] sock_sendmsg+0xd5/0x120 [ 443.965553] sock_write_iter+0x35e/0x5c0 [ 443.969440] F2FS-fs (loop0): Unrecognized mount option "d=" or missing value [ 443.970339] ? sock_sendmsg+0x120/0x120 [ 443.970365] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 443.970387] ? iov_iter_init+0xc2/0x1e0 [ 443.977868] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 443.981545] __vfs_write+0x6b8/0x9f0 [ 444.002212] ? kernel_read+0x120/0x120 [ 444.006136] ? apparmor_path_rmdir+0x30/0x30 [ 444.006155] ? lock_release+0x970/0x970 [ 444.006173] ? check_preemption_disabled+0x48/0x200 [ 444.006194] ? apparmor_file_permission+0x24/0x30 [ 444.014565] ? rw_verify_area+0x118/0x360 [ 444.022068] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 444.024529] vfs_write+0x1fc/0x560 [ 444.024550] ksys_write+0x101/0x260 [ 444.024569] ? __ia32_sys_read+0xb0/0xb0 [ 444.040816] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 444.042893] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 444.042913] __x64_sys_write+0x73/0xb0 [ 444.042934] do_syscall_64+0x1b9/0x820 [ 444.050190] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x9d6dcee1) [ 444.054535] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 444.054555] ? syscall_return_slowpath+0x5e0/0x5e0 [ 444.054576] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 444.060402] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 444.064051] ? trace_hardirqs_on_caller+0x310/0x310 [ 444.064068] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 444.064089] ? prepare_exit_to_usermode+0x291/0x3b0 [ 444.068302] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 444.075729] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 444.075752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.075764] RIP: 0033:0x457579 [ 444.075780] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 444.075794] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 [ 444.081477] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 444.086061] ORIG_RAX: 0000000000000001 [ 444.086071] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 444.086080] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 444.086089] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 444.086098] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 444.086106] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 [ 444.237550] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x9d6dcee1) [ 444.248470] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 444.257380] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 444.264436] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 444.272576] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x9d6dcee1) [ 444.281561] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 444.290149] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 444.306200] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 444.308486] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 444.322674] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 444.336502] F2FS-fs (loop0): Unrecognized mount option "d=" or missing value [ 444.343933] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 444.351205] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 444.358817] F2FS-fs (loop0): Unrecognized mount option "d=" or missing value 03:33:41 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@ipv6_delrule={0x34, 0x21, 0x11, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10015}, [@FRA_SRC={0x14, 0x2, @ipv4={[], [], @loopback}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc080}, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = geteuid() sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="c00000002000000128bd7000fddbdf250a1080f0ff000000060000000c00010014000200ff0200000000000000000000000020001400030073797e6b616c6c6572310000000000000c001400", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="140001000000000000000000000000000000000114000200ff02000000000000000000000000000114000200ff02000000000000000000000000000108000a000800000014000200ff0200000000000000000000000000011400020000000000000000000000ffffac1414aa"], 0xc0}}, 0x8000) 03:33:41 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000400)="2f65786500000000000409004bddd9de91be10ee9ed554fa07424adee9cbc699ec2ca576e50000bcd7a071fb35331ce39c5ad0cf73770bd4246847a1914e4fb0aa9b15eaa94bcd0e700ed60600000084ad4ec2f11f6f2adb8dc2fdb18231446f43142ebe700b2231e8fceed6b22a373c9409675ac8d0b53033123fb3037d66241aafe0f880e7a51d1b036ade31d2544d2581fee553d0cff54369df8c2fce21dcb1cb965669f9a75345ac3479cd51dc7de364c9c272c83ed9e666ca25aad2e7a26e3d6ce2d433936ee1ddc68346de1440b262d0f8b9065cfcdf2d758dd4952043baa4a311c06d0744db265aa0e486707c51fd108c0c6ccae6ff") mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x40086607, 0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0x7) 03:33:41 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000700000001005307a33d6c390836be381b", 0x1f) 03:33:41 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000010000006a0a00fe00000000850000000d00000004000000000000009500000000000000e8ba9ba9e462ac647a53c709f8fd7cc9dae091b1c4067b"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x200000000000002, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000008c0)={{0x3, 0x80000001, 0x4, 0x1, 0x7, 0x3ff}, 0x68, 0xfffffffffffff000, 0x101, 0x4995, 0x6, "8093b194865f92732655cacd34a760075d5f0d0b971c01820ee2061b1e0b36aca496ca3e8fcfc533d8e7f58e6833cb4aaaa8e24c0c84a0cc35ebf7b81b7499a2586285af1403937fbd81414ee948f675b0e58728805d799c48aca06d732c6ff6ff655a786b70866524841b0e449e105969473c34b2ac1708a3845937c869e3bf"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x1c, 0xe8, &(0x7f0000000100)="9294e117975b722b01bf626d94ec61cf76ee1065a189a750d0cc8241", &(0x7f0000000400)=""/232, 0x889}, 0x28) 03:33:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = socket$alg(0x26, 0x5, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), 0x4) socket$alg(0x26, 0x5, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000140)) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f0000000080)='hash\x00', 0x5, 0x1) accept4(r1, 0x0, &(0x7f0000000100), 0x0) 03:33:41 executing program 3 (fault-call:9 fault-nth:20): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:41 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000f0000000001005307a33d6c390836be381b", 0x1f) 03:33:41 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000480)) r1 = open(&(0x7f0000000400)='./file0\x00', 0x4000, 0xbd) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000500)={0x0, @local, @remote}, &(0x7f0000000540)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000580)={@loopback, 0x35, r2}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0) accept$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000d000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x180000000000000a, 0xe, 0x29, &(0x7f0000000000)="b90703e69ebf08bb64879e106558", &(0x7f0000000140)=""/41, 0x69}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4001}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newrule={0x20, 0x20, 0x0, 0x0, 0x80000000, {0x2, 0x80, 0x0, 0x8, 0xae, 0x0, 0x0, 0x6, 0x1}}, 0x20}}, 0x10) [ 444.497733] FAULT_INJECTION: forcing a failure. [ 444.497733] name fail_page_alloc, interval 1, probability 0, space 0, times 0 03:33:41 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200030000000001005307a33d6c390836be381b", 0x1f) [ 444.601528] CPU: 1 PID: 22396 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 444.610088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.619467] Call Trace: [ 444.622093] dump_stack+0x1d3/0x2c4 [ 444.625748] ? dump_stack_print_info.cold.2+0x52/0x52 [ 444.630973] should_fail.cold.4+0xa/0x17 [ 444.635057] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 444.640183] ? save_stack+0xa9/0xd0 [ 444.643836] ? save_stack+0x43/0xd0 [ 444.647487] ? kasan_kmalloc+0xc7/0xe0 [ 444.651389] ? __kmalloc+0x14e/0x760 [ 444.655109] ? sock_kmalloc+0x15a/0x1f0 [ 444.659095] ? af_alg_sendmsg+0xa1b/0x1260 [ 444.663335] ? aead_sendmsg+0x103/0x150 [ 444.667332] ? sock_sendmsg+0xd5/0x120 [ 444.671224] ? sock_write_iter+0x35e/0x5c0 [ 444.675468] ? __vfs_write+0x6b8/0x9f0 [ 444.679361] ? vfs_write+0x1fc/0x560 [ 444.683081] ? ksys_write+0x101/0x260 [ 444.686888] ? do_syscall_64+0x1b9/0x820 [ 444.690966] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.696341] ? cache_grow_end+0xa8/0x190 [ 444.700410] ? fs_reclaim_acquire+0x20/0x20 [ 444.704746] ? lock_downgrade+0x900/0x900 [ 444.708907] ? lock_release+0x970/0x970 [ 444.712889] ? check_same_owner+0x330/0x330 [ 444.717221] ? trace_hardirqs_on+0xbd/0x310 [ 444.721554] ? kasan_check_write+0x14/0x20 [ 444.725794] ? sock_kmalloc+0x15a/0x1f0 [ 444.729790] ? __might_sleep+0x95/0x190 [ 444.733773] __alloc_pages_nodemask+0x34b/0xdd0 [ 444.738454] ? lock_downgrade+0x900/0x900 [ 444.742614] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 444.747636] ? check_same_owner+0x330/0x330 [ 444.751968] ? sock_kmalloc+0x18a/0x1f0 [ 444.755955] ? iov_iter_npages+0xdd0/0xdd0 [ 444.760206] ? _copy_from_iter_full+0x2b8/0xc20 [ 444.764885] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 444.770872] ? af_alg_register_type+0x3f0/0x3f0 [ 444.775554] ? check_preemption_disabled+0x48/0x200 [ 444.780577] ? lock_sock_nested+0x9a/0x120 [ 444.784827] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 444.790379] alloc_pages_current+0x10c/0x210 [ 444.794827] af_alg_sendmsg+0xb08/0x1260 [ 444.798910] ? af_alg_pull_tsgl+0xd70/0xd70 [ 444.803251] aead_sendmsg+0x103/0x150 [ 444.807062] ? crypto_aead_copy_sgl+0x350/0x350 [ 444.811746] sock_sendmsg+0xd5/0x120 [ 444.815491] sock_write_iter+0x35e/0x5c0 [ 444.819560] ? sock_sendmsg+0x120/0x120 [ 444.823577] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 444.829125] ? iov_iter_init+0xc2/0x1e0 [ 444.833127] __vfs_write+0x6b8/0x9f0 [ 444.836863] ? kernel_read+0x120/0x120 [ 444.840764] ? apparmor_path_rmdir+0x30/0x30 [ 444.845181] ? lock_release+0x970/0x970 [ 444.849181] ? check_preemption_disabled+0x48/0x200 [ 444.854210] ? apparmor_file_permission+0x24/0x30 [ 444.859062] ? rw_verify_area+0x118/0x360 [ 444.863222] vfs_write+0x1fc/0x560 [ 444.866781] ksys_write+0x101/0x260 [ 444.870419] ? __ia32_sys_read+0xb0/0xb0 [ 444.874493] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 444.879960] __x64_sys_write+0x73/0xb0 [ 444.883858] do_syscall_64+0x1b9/0x820 [ 444.887765] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 444.893144] ? syscall_return_slowpath+0x5e0/0x5e0 [ 444.898079] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 444.902945] ? trace_hardirqs_on_caller+0x310/0x310 [ 444.907995] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 444.913019] ? prepare_exit_to_usermode+0x291/0x3b0 [ 444.918053] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 444.922910] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.928146] RIP: 0033:0x457579 [ 444.931353] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:33:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3e) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x80000, 0x0) accept4$alg(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000030005000000080014aa"], 0x28}}, 0x0) 03:33:41 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$PROG_LOAD(0x2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)=@raw, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xbf, &(0x7f0000000540)=""/191}, 0x48) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x0, 0x4, 0x9, 0xffffffff7fffffff, 'syz0\x00', 0xffffffffffffffe0}, 0x5, 0x440, 0x800, r0, 0x7, 0x0, 'syz0\x00', &(0x7f0000000040)=['\x00', 'syzkaller\x00', '\x00', '-ppp0)[GPL:\x00', 'syzkaller\x00', 'syzkaller\x00', 'syzkaller\x00'], 0x36, [], [0x2, 0x400, 0xf800000000, 0xdc]}) [ 444.950265] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 444.957983] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 444.965274] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 444.972543] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 444.979817] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 444.987087] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:41 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200008100000001005307a33d6c390836be381b", 0x1f) 03:33:41 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200004003000001005307a33d6c390836be381b", 0x1f) 03:33:41 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x4, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000100)={"66696c5765720000008d6dafdef63a063c00"}, &(0x7f0000000200)=0x54) r2 = socket$packet(0x11, 0x8000000000000003, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000080)) dup3(r0, r2, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000280)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)={@mcast2}, &(0x7f0000000380)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f00000002c0), 0xc, &(0x7f0000001d40)={&(0x7f0000001b00)={0x14}, 0x14}}, 0x0) write$input_event(r3, &(0x7f0000000240)={{0x0, 0x2710}, 0x5, 0x8, 0x100000}, 0x18) 03:33:42 executing program 3 (fault-call:9 fault-nth:21): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:42 executing program 5: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)=""/246) creat(&(0x7f0000000280)='./file0\x00', 0x40) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vhci\x00', 0x10000, 0x0) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000000380)=""/174) 03:33:42 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x0, [0x40000021]}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x50202, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x0, &(0x7f00000000c0)={@multicast1, @multicast1, @loopback}, 0xc) 03:33:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000001"], 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x2, 0xde}) 03:33:42 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000a00000001005307a33d6c390836be381b", 0x1f) [ 445.241650] QAT: Invalid ioctl 03:33:42 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000010001005307a33d6c390836be381b", 0x1f) 03:33:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000908000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014005400626f6e643bdd8f909ad419c9dd8ac25f736c6176655f300000000008000a0000000000863552729484fc7cf28d54f1b6e3936117e2eda867e1ac0e8d35af"], 0x3c}}, 0x0) [ 445.291259] FAULT_INJECTION: forcing a failure. [ 445.291259] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 445.324029] CPU: 0 PID: 22450 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 445.332538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.332545] Call Trace: [ 445.332574] dump_stack+0x1d3/0x2c4 [ 445.332599] ? dump_stack_print_info.cold.2+0x52/0x52 [ 445.332621] ? debug_smp_processor_id+0x1c/0x20 [ 445.332651] ? perf_trace_lock_acquire+0x15b/0x800 [ 445.343453] QAT: Invalid ioctl [ 445.344606] should_fail.cold.4+0xa/0x17 [ 445.344629] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 445.375334] ? save_stack+0xa9/0xd0 [ 445.378974] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.384532] ? check_preemption_disabled+0x48/0x200 [ 445.389559] ? debug_smp_processor_id+0x1c/0x20 [ 445.394250] ? perf_trace_lock_acquire+0x15b/0x800 [ 445.399207] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.404611] ? perf_trace_lock+0x7a0/0x7a0 [ 445.408860] ? fs_reclaim_acquire+0x20/0x20 [ 445.413195] ? lock_downgrade+0x900/0x900 [ 445.417363] ? lock_release+0x970/0x970 [ 445.421339] ? check_same_owner+0x330/0x330 [ 445.425693] ? trace_hardirqs_on+0xbd/0x310 [ 445.430016] ? kasan_check_write+0x14/0x20 [ 445.434257] ? sock_kmalloc+0x15a/0x1f0 [ 445.438242] ? __might_sleep+0x95/0x190 [ 445.442222] __alloc_pages_nodemask+0x34b/0xdd0 [ 445.446924] ? lock_downgrade+0x900/0x900 [ 445.451077] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 445.456101] ? check_same_owner+0x330/0x330 [ 445.460427] ? sock_kmalloc+0x18a/0x1f0 [ 445.464888] ? iov_iter_npages+0xdd0/0xdd0 [ 445.469156] ? _copy_from_iter_full+0x2b8/0xc20 [ 445.473837] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 445.479818] ? af_alg_register_type+0x3f0/0x3f0 [ 445.484493] ? check_preemption_disabled+0x48/0x200 [ 445.489510] ? lock_sock_nested+0x9a/0x120 [ 445.493765] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 445.499337] alloc_pages_current+0x10c/0x210 [ 445.503762] af_alg_sendmsg+0xb08/0x1260 [ 445.507846] ? af_alg_pull_tsgl+0xd70/0xd70 [ 445.512184] aead_sendmsg+0x103/0x150 [ 445.515991] ? crypto_aead_copy_sgl+0x350/0x350 [ 445.520666] sock_sendmsg+0xd5/0x120 [ 445.524409] sock_write_iter+0x35e/0x5c0 [ 445.528486] ? sock_sendmsg+0x120/0x120 [ 445.532475] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 445.538016] ? iov_iter_init+0xc2/0x1e0 [ 445.541998] __vfs_write+0x6b8/0x9f0 [ 445.545723] ? kernel_read+0x120/0x120 [ 445.549633] ? apparmor_path_rmdir+0x30/0x30 [ 445.554047] ? lock_release+0x970/0x970 [ 445.558027] ? check_preemption_disabled+0x48/0x200 [ 445.563773] ? apparmor_file_permission+0x24/0x30 [ 445.568633] ? rw_verify_area+0x118/0x360 [ 445.572794] vfs_write+0x1fc/0x560 [ 445.576346] ksys_write+0x101/0x260 [ 445.579983] ? __ia32_sys_read+0xb0/0xb0 [ 445.584054] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 445.589535] __x64_sys_write+0x73/0xb0 [ 445.593427] do_syscall_64+0x1b9/0x820 [ 445.597333] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 445.602702] ? syscall_return_slowpath+0x5e0/0x5e0 [ 445.607640] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.612488] ? trace_hardirqs_on_caller+0x310/0x310 [ 445.617528] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 445.622545] ? prepare_exit_to_usermode+0x291/0x3b0 [ 445.627577] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.632430] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.637630] RIP: 0033:0x457579 [ 445.640826] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 445.659730] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.667482] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 445.674754] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 445.682042] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 445.689313] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 445.696592] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:42 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000001a00001005307a33d6c390836be381b", 0x1f) [ 445.740711] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:33:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x70000000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={r2, 0x6b2}, &(0x7f0000000180)=0x8) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000080)=0x7fffffff, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x15, 0x0, 'sh\x00', 0xfffffffffffffffe}, 0x2c) 03:33:42 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000c0000000001005307a33d6c390836be381b", 0x1f) 03:33:42 executing program 0: execve(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680), &(0x7f0000000880)=[&(0x7f0000000740)='\x00']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x40, 0x842) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ff1000/0xe000)=nil, 0x5, 0x3, 0x8, &(0x7f0000007000/0x4000)=nil, 0xf4}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ec0)={"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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 445.782696] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:33:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x2, 0x401, 0x200, 0xfff}, &(0x7f0000000100)=0x14) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2400000003031f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 03:33:42 executing program 3 (fault-call:9 fault-nth:22): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:42 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000600000001005307a33d6c390836be381b", 0x1f) 03:33:42 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) listen(r0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) [ 445.921847] FAULT_INJECTION: forcing a failure. [ 445.921847] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 445.951837] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 03:33:42 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200ffffff9e0001005307a33d6c390836be381b", 0x1f) [ 445.982094] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x1b25/0x1d70 [ 446.016627] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 446.022225] CPU: 0 PID: 22476 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 446.033562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.042911] Call Trace: [ 446.045504] dump_stack+0x1d3/0x2c4 [ 446.049166] ? dump_stack_print_info.cold.2+0x52/0x52 [ 446.054370] should_fail.cold.4+0xa/0x17 [ 446.058441] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 446.063547] ? save_stack+0xa9/0xd0 [ 446.067176] ? save_stack+0x43/0xd0 [ 446.070805] ? kasan_kmalloc+0xc7/0xe0 [ 446.074697] ? __kmalloc+0x14e/0x760 [ 446.078417] ? sock_kmalloc+0x15a/0x1f0 [ 446.082398] ? af_alg_sendmsg+0xa1b/0x1260 [ 446.086638] ? aead_sendmsg+0x103/0x150 [ 446.090635] ? sock_sendmsg+0xd5/0x120 [ 446.094525] ? sock_write_iter+0x35e/0x5c0 [ 446.098768] ? __vfs_write+0x6b8/0x9f0 [ 446.102661] ? vfs_write+0x1fc/0x560 [ 446.106389] ? ksys_write+0x101/0x260 [ 446.110197] ? do_syscall_64+0x1b9/0x820 [ 446.114264] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.119652] ? fs_reclaim_acquire+0x20/0x20 [ 446.123983] ? lock_downgrade+0x900/0x900 [ 446.128141] ? lock_release+0x970/0x970 [ 446.132124] ? check_same_owner+0x330/0x330 [ 446.136454] ? trace_hardirqs_on+0xbd/0x310 [ 446.140801] ? lock_downgrade+0x900/0x900 [ 446.144953] ? sock_kmalloc+0x15a/0x1f0 [ 446.148936] ? __might_sleep+0x95/0x190 [ 446.152921] __alloc_pages_nodemask+0x34b/0xdd0 [ 446.157594] ? lock_downgrade+0x900/0x900 [ 446.161746] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 446.166774] ? check_same_owner+0x330/0x330 [ 446.171101] ? sock_kmalloc+0x18a/0x1f0 [ 446.175083] ? iov_iter_npages+0xdd0/0xdd0 [ 446.179331] ? _copy_from_iter_full+0x2b8/0xc20 [ 446.184004] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 446.190005] ? af_alg_register_type+0x3f0/0x3f0 [ 446.194678] ? check_preemption_disabled+0x48/0x200 [ 446.199696] ? lock_sock_nested+0x9a/0x120 [ 446.203940] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 446.209485] alloc_pages_current+0x10c/0x210 [ 446.213900] af_alg_sendmsg+0xb08/0x1260 [ 446.217980] ? af_alg_pull_tsgl+0xd70/0xd70 [ 446.222317] aead_sendmsg+0x103/0x150 [ 446.226124] ? crypto_aead_copy_sgl+0x350/0x350 [ 446.230799] sock_sendmsg+0xd5/0x120 [ 446.234518] sock_write_iter+0x35e/0x5c0 [ 446.238586] ? sock_sendmsg+0x120/0x120 [ 446.242573] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.248118] ? iov_iter_init+0xc2/0x1e0 [ 446.252121] __vfs_write+0x6b8/0x9f0 [ 446.255843] ? kernel_read+0x120/0x120 [ 446.259740] ? apparmor_path_rmdir+0x30/0x30 [ 446.264157] ? lock_release+0x970/0x970 [ 446.268157] ? check_preemption_disabled+0x48/0x200 [ 446.273184] ? apparmor_file_permission+0x24/0x30 [ 446.278038] ? rw_verify_area+0x118/0x360 [ 446.282196] vfs_write+0x1fc/0x560 [ 446.285747] ksys_write+0x101/0x260 [ 446.289393] ? __ia32_sys_read+0xb0/0xb0 [ 446.293466] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 446.298924] __x64_sys_write+0x73/0xb0 [ 446.302818] do_syscall_64+0x1b9/0x820 [ 446.306714] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 446.312087] ? syscall_return_slowpath+0x5e0/0x5e0 [ 446.317022] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.321870] ? trace_hardirqs_on_caller+0x310/0x310 [ 446.326892] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 446.331912] ? prepare_exit_to_usermode+0x291/0x3b0 [ 446.336939] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.341799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.346988] RIP: 0033:0x457579 [ 446.350219] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 446.369123] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 446.376861] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 03:33:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={'rose0\x00', {0x2, 0x4e23, @loopback}}) r1 = socket$netlink(0x10, 0x3, 0xd267b1c7a8254e57) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') r3 = open(&(0x7f0000000380)='./file0\x00', 0x8010, 0xcf) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='reno\x00', 0x5) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x42880, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000080)={0x17, 0xf8, &(0x7f0000000200)="7edafa385d338a601809bf9a802c93f342a54a4fc2fb7633540d67c716a01e6b4a6f347511f75e292816aa76418df45dc7ef376ebd11c340680ca18ac2a26d8ecf8a5e4da50695dfdd4e01bc3c4496a649896c67644c09c56191cfd7e24c620189a3754dd1ad7c3c5768470b749c2e97efa318898ed13b30046250ee5b9031661ad8824a0af0768d3cc70226964abda8d32fdb36621510d9c7eb831fd4ee054d4eb7cf61f00355c4e1c6386d4e44ca96bec73546c03f45d0534b2d8b9d0447d733b2449f8d2a0597ec3b1285c72be6ef7db35954d7d601ae1b4ce6c2077ef8de3177873f61e7670d640ed9f15a90ce69c79c700fd42066d8"}) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='2\a \x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000080002000000000008000400000000000800040002000000080002000a000000"], 0x34}}, 0x44) 03:33:43 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) fsync(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) fallocate(r0, 0x30, 0x3, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) read(r3, &(0x7f0000000000)=""/11, 0xb) tkill(r2, 0x15) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000200)={0x1, 0x986c, 0x69, 'queue1\x00', 0x80000000}) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) ioctl(r0, 0x1, &(0x7f0000000100)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'veth1_to_team\x00', 0x5000}) [ 446.384128] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 446.391398] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 446.398669] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 446.405936] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:43 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000c00000001005307a33d6c390836be381b", 0x1f) 03:33:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000140)=""/186) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000002c0)={{0xa, 0x4e20, 0x0, @empty, 0x8000}, {0xa, 0x4e20, 0x7ff, @mcast2, 0x31}, 0x8, [0xfff, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x3]}, 0x5c) epoll_create1(0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x39, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setfsuid(r0) open$dir(&(0x7f0000000240)='./control\x00', 0x0, 0x20) umount2(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[]}, 0x1, 0x0, 0x0, 0x40}, 0x8000) getpgid(0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') 03:33:43 executing program 5: r0 = getpgrp(0x0) sched_getattr(r0, &(0x7f00000002c0), 0x30, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x10, 0x0, 0x0, 0x0, 0x1}, 0xfffffe4a) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0xa0a01) r3 = syz_open_dev$sg(&(0x7f00000004c0)='/dev/sg#\x00', 0xf7fffffffffffffd, 0x244005) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000300)={0x8b, 0xfffffffffffffff8, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'bpq0\x00'}) write(r3, &(0x7f0000000040)="b63d794100010400000000000000000036f0011dcc606aed69d2bc7037cebc9bc2b3e8e0e3ff00000000", 0x2a) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000080)=0x7) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000100)="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") perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x8, 0x5, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f00000000c0)='GPL\x00', 0xffffffff80000000, 0xd1, &(0x7f0000000340)=""/209}, 0x48) 03:33:43 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000f00000001005307a33d6c390836be381b", 0x1f) 03:33:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0xfffffffffffffff3) r3 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x1, 0x101000) connect$bt_sco(r3, &(0x7f0000000340)={0x1f, {0xfffffffffffffff7, 0x3, 0x7, 0x6, 0xa2, 0x9}}, 0x8) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0xfffffffffffffffd, 0x4) clock_gettime(0x0, &(0x7f00000066c0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000006500), 0x2c7, 0x40010000, &(0x7f0000006700)={0x0, r4+30000000}) 03:33:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x80004002, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x4068, 0x0, 0xd, 0x400000003, 0x20000000000000, r1, &(0x7f0000000040)}]) 03:33:43 executing program 3 (fault-call:9 fault-nth:23): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:43 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200090000000001005307a33d6c390836be381b", 0x1f) 03:33:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ppoll(&(0x7f0000000180)=[{r2}], 0x1, &(0x7f00000000c0), &(0x7f0000000200), 0x8) write$P9_RMKNOD(r2, &(0x7f0000000080)={0x1c4}, 0xfffffea1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000000040)) close(r2) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) tkill(r1, 0x15) 03:33:43 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000000000d0001005307a33d6c390836be381b", 0x1f) [ 446.803682] FAULT_INJECTION: forcing a failure. [ 446.803682] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 446.858043] CPU: 0 PID: 22545 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 446.866586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.875939] Call Trace: [ 446.878539] dump_stack+0x1d3/0x2c4 [ 446.882182] ? dump_stack_print_info.cold.2+0x52/0x52 [ 446.887378] ? debug_smp_processor_id+0x1c/0x20 [ 446.892049] ? perf_trace_lock_acquire+0x15b/0x800 [ 446.896987] should_fail.cold.4+0xa/0x17 [ 446.901053] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 446.906159] ? save_stack+0xa9/0xd0 [ 446.909812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.915354] ? check_preemption_disabled+0x48/0x200 [ 446.920375] ? debug_smp_processor_id+0x1c/0x20 [ 446.925044] ? perf_trace_lock_acquire+0x15b/0x800 [ 446.929980] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.935354] ? perf_trace_lock+0x7a0/0x7a0 [ 446.939607] ? fs_reclaim_acquire+0x20/0x20 [ 446.943934] ? lock_downgrade+0x900/0x900 [ 446.948085] ? lock_release+0x970/0x970 [ 446.952060] ? check_same_owner+0x330/0x330 [ 446.956383] ? trace_hardirqs_on+0xbd/0x310 [ 446.960707] ? perf_trace_lock+0x7a0/0x7a0 [ 446.964942] ? sock_kmalloc+0x15a/0x1f0 [ 446.968924] ? __might_sleep+0x95/0x190 [ 446.972905] __alloc_pages_nodemask+0x34b/0xdd0 [ 446.977580] ? lock_downgrade+0x900/0x900 [ 446.981732] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 446.986756] ? check_same_owner+0x330/0x330 [ 446.991090] ? sock_kmalloc+0x18a/0x1f0 [ 446.995068] ? iov_iter_npages+0xdd0/0xdd0 [ 446.999316] ? _copy_from_iter_full+0x2b8/0xc20 [ 447.003987] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 447.009959] ? af_alg_register_type+0x3f0/0x3f0 [ 447.014627] ? check_preemption_disabled+0x48/0x200 [ 447.019644] ? lock_sock_nested+0x9a/0x120 [ 447.023882] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 447.029423] alloc_pages_current+0x10c/0x210 [ 447.033833] af_alg_sendmsg+0xb08/0x1260 [ 447.037907] ? af_alg_pull_tsgl+0xd70/0xd70 [ 447.042235] aead_sendmsg+0x103/0x150 [ 447.046035] ? crypto_aead_copy_sgl+0x350/0x350 [ 447.050705] sock_sendmsg+0xd5/0x120 [ 447.054425] sock_write_iter+0x35e/0x5c0 [ 447.058489] ? sock_sendmsg+0x120/0x120 [ 447.062471] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 447.068009] ? iov_iter_init+0xc2/0x1e0 [ 447.071986] __vfs_write+0x6b8/0x9f0 [ 447.075702] ? kernel_read+0x120/0x120 [ 447.079594] ? apparmor_path_rmdir+0x30/0x30 [ 447.084004] ? lock_release+0x970/0x970 [ 447.087983] ? check_preemption_disabled+0x48/0x200 [ 447.093005] ? apparmor_file_permission+0x24/0x30 [ 447.097852] ? rw_verify_area+0x118/0x360 [ 447.102004] vfs_write+0x1fc/0x560 [ 447.105551] ksys_write+0x101/0x260 [ 447.109180] ? __ia32_sys_read+0xb0/0xb0 [ 447.113246] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 447.118707] __x64_sys_write+0x73/0xb0 [ 447.122596] do_syscall_64+0x1b9/0x820 [ 447.126487] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 447.131855] ? syscall_return_slowpath+0x5e0/0x5e0 [ 447.136789] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 447.141633] ? trace_hardirqs_on_caller+0x310/0x310 [ 447.146652] ? prepare_exit_to_usermode+0x291/0x3b0 [ 447.151675] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 447.156527] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.161713] RIP: 0033:0x457579 [ 447.164907] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 447.183807] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 447.191515] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 447.198790] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 03:33:44 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000080001005307a33d6c390836be381b", 0x1f) [ 447.206055] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 447.213335] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 447.220601] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx2\x00'}, 0x58) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x20000000047fd) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)='\x00', 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000100)={0x44000000, 0x400, 0x24}) 03:33:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x10000) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r2], 0x0, 0x0, &(0x7f0000000240)}) 03:33:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x400, 0x6, 0x4, 0x20, 0xffffffffffffff9c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000140)="2317ac8c54861035f15c864e4669e70c", 0x10) get_thread_area(&(0x7f0000000000)={0x7fffffff, 0x20000800, 0x1fff, 0x7d3, 0x1, 0x61, 0x1f, 0x5, 0x4, 0x9}) 03:33:44 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000000000c0001005307a33d6c390836be381b", 0x1f) [ 447.307026] binder: 22558:22559 transaction failed 29189/-22, size 0-0 line 2834 [ 447.332820] binder: 22558:22564 transaction failed 29189/-22, size 0-0 line 2834 03:33:44 executing program 3 (fault-call:9 fault-nth:24): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:44 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000060001005307a33d6c390836be381b", 0x1f) [ 447.367003] binder: undelivered TRANSACTION_ERROR: 29189 03:33:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0xfffffffffffffffd) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f0000000040)) 03:33:44 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000280)=0x1923, 0x4) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = creat(&(0x7f0000000100)='./file0/bus\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000080)=[{r2}], 0x1, 0x0) 03:33:44 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, 0x18, 0xfffffffffffffffd, 0x0, 0x0, {0x1, 0x3000000}}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xb4, r1, 0x703, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x22}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}]}, 0xb4}}, 0x4000) 03:33:44 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000f000000001005307a33d6c390836be381b", 0x1f) [ 447.420729] binder: undelivered TRANSACTION_ERROR: 29189 [ 447.454339] FAULT_INJECTION: forcing a failure. [ 447.454339] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 447.506117] CPU: 1 PID: 22583 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 447.514644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.524010] Call Trace: [ 447.526624] dump_stack+0x1d3/0x2c4 [ 447.530284] ? dump_stack_print_info.cold.2+0x52/0x52 [ 447.535503] should_fail.cold.4+0xa/0x17 [ 447.539593] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 447.544704] ? save_stack+0xa9/0xd0 [ 447.548337] ? save_stack+0x43/0xd0 [ 447.551969] ? kasan_kmalloc+0xc7/0xe0 [ 447.555859] ? __kmalloc+0x14e/0x760 [ 447.559572] ? sock_kmalloc+0x15a/0x1f0 [ 447.563548] ? af_alg_sendmsg+0xa1b/0x1260 [ 447.567787] ? aead_sendmsg+0x103/0x150 [ 447.571768] ? sock_sendmsg+0xd5/0x120 [ 447.575659] ? sock_write_iter+0x35e/0x5c0 [ 447.579896] ? __vfs_write+0x6b8/0x9f0 [ 447.583810] ? vfs_write+0x1fc/0x560 [ 447.587528] ? ksys_write+0x101/0x260 [ 447.591332] ? do_syscall_64+0x1b9/0x820 [ 447.595401] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.600786] ? fs_reclaim_acquire+0x20/0x20 [ 447.605115] ? lock_downgrade+0x900/0x900 [ 447.609277] ? lock_release+0x970/0x970 [ 447.613278] ? check_same_owner+0x330/0x330 [ 447.617606] ? trace_hardirqs_on+0xbd/0x310 [ 447.621954] ? lock_downgrade+0x900/0x900 [ 447.626106] ? sock_kmalloc+0x15a/0x1f0 [ 447.630090] ? __might_sleep+0x95/0x190 [ 447.634072] __alloc_pages_nodemask+0x34b/0xdd0 [ 447.638746] ? lock_downgrade+0x900/0x900 [ 447.642904] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 447.647923] ? check_same_owner+0x330/0x330 [ 447.652251] ? sock_kmalloc+0x18a/0x1f0 [ 447.656236] ? iov_iter_npages+0xdd0/0xdd0 [ 447.660489] ? _copy_from_iter_full+0x2b8/0xc20 [ 447.665173] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 447.671151] ? af_alg_register_type+0x3f0/0x3f0 [ 447.675852] ? check_preemption_disabled+0x48/0x200 [ 447.680873] ? lock_sock_nested+0x9a/0x120 [ 447.685114] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 447.690660] alloc_pages_current+0x10c/0x210 [ 447.695077] af_alg_sendmsg+0xb08/0x1260 [ 447.699163] ? af_alg_pull_tsgl+0xd70/0xd70 [ 447.703501] aead_sendmsg+0x103/0x150 [ 447.707304] ? crypto_aead_copy_sgl+0x350/0x350 [ 447.711999] sock_sendmsg+0xd5/0x120 [ 447.715718] sock_write_iter+0x35e/0x5c0 [ 447.719784] ? sock_sendmsg+0x120/0x120 [ 447.723772] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 447.729314] ? iov_iter_init+0xc2/0x1e0 [ 447.733299] __vfs_write+0x6b8/0x9f0 [ 447.737020] ? kernel_read+0x120/0x120 [ 447.740912] ? apparmor_path_rmdir+0x30/0x30 [ 447.745322] ? lock_release+0x970/0x970 [ 447.749301] ? check_preemption_disabled+0x48/0x200 [ 447.754330] ? apparmor_file_permission+0x24/0x30 [ 447.759184] ? rw_verify_area+0x118/0x360 [ 447.763337] vfs_write+0x1fc/0x560 [ 447.766887] ksys_write+0x101/0x260 [ 447.770520] ? __ia32_sys_read+0xb0/0xb0 [ 447.774589] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 447.780044] __x64_sys_write+0x73/0xb0 [ 447.783942] do_syscall_64+0x1b9/0x820 [ 447.787835] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 447.793205] ? syscall_return_slowpath+0x5e0/0x5e0 [ 447.798139] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 447.802986] ? trace_hardirqs_on_caller+0x310/0x310 [ 447.808010] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 447.813028] ? prepare_exit_to_usermode+0x291/0x3b0 [ 447.818056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 447.822928] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.828118] RIP: 0033:0x457579 [ 447.831319] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:33:44 executing program 4: clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x22000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000680)="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", &(0x7f0000000040)="fb7b2d193ead2991f9b20431484b6010b5e312640abf2afd899eee7a76bfb2dc117c203b62a9068008190d5d373e7712a3e16eee15243bd62955c0f32993ce0effd43dec31e5a95831cc"}, 0x20) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) setsockopt$inet_mreqsrc(r0, 0x0, 0x2a, &(0x7f0000001840)={@local, @broadcast, @rand_addr}, 0x1ac) [ 447.850219] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 447.857937] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 447.865205] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 447.872474] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 447.879742] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 447.887037] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:44 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000f0ffff0001005307a33d6c390836be381b", 0x1f) [ 447.902334] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:33:44 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000e0000000001005307a33d6c390836be381b", 0x1f) 03:33:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffd49, 0x28, 0xb01, 0x0, 0x1000000000000, {0x7}}, 0x14}}, 0x0) 03:33:44 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000000000b0001005307a33d6c390836be381b", 0x1f) 03:33:44 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @local}}, 0x68, 0x0, 0x0, 0xe3f, 0x1}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r1, 0x7f}, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r3, &(0x7f0000000100), 0xfffffffffffffffa, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r3, 0x0) splice(r3, 0x0, r2, 0x0, 0xab11, 0x0) 03:33:44 executing program 3 (fault-call:9 fault-nth:25): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:44 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x3a) getsockopt$packet_buf(r0, 0x111, 0x0, &(0x7f0000000300)=""/162, &(0x7f0000000000)=0xa2) 03:33:44 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000000000e0001005307a33d6c390836be381b", 0x1f) [ 448.102284] FAULT_INJECTION: forcing a failure. [ 448.102284] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 448.126121] CPU: 1 PID: 22627 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 448.134652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.144005] Call Trace: [ 448.144033] dump_stack+0x1d3/0x2c4 [ 448.144056] ? dump_stack_print_info.cold.2+0x52/0x52 [ 448.144089] should_fail.cold.4+0xa/0x17 [ 448.150285] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 448.150302] ? save_stack+0xa9/0xd0 [ 448.150322] ? save_stack+0x43/0xd0 [ 448.172028] ? kasan_kmalloc+0xc7/0xe0 [ 448.175925] ? __kmalloc+0x14e/0x760 [ 448.179651] ? sock_kmalloc+0x15a/0x1f0 [ 448.183640] ? af_alg_sendmsg+0xa1b/0x1260 [ 448.187877] ? aead_sendmsg+0x103/0x150 [ 448.191838] ? sock_sendmsg+0xd5/0x120 [ 448.195725] ? sock_write_iter+0x35e/0x5c0 [ 448.199945] ? __vfs_write+0x6b8/0x9f0 [ 448.203817] ? vfs_write+0x1fc/0x560 [ 448.207528] ? ksys_write+0x101/0x260 [ 448.211316] ? do_syscall_64+0x1b9/0x820 [ 448.215364] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.220733] ? fs_reclaim_acquire+0x20/0x20 [ 448.225057] ? lock_downgrade+0x900/0x900 [ 448.229191] ? lock_release+0x970/0x970 [ 448.233153] ? check_same_owner+0x330/0x330 [ 448.237465] ? trace_hardirqs_on+0xbd/0x310 [ 448.241785] ? lock_downgrade+0x900/0x900 [ 448.245929] ? sock_kmalloc+0x15a/0x1f0 [ 448.249923] ? __might_sleep+0x95/0x190 [ 448.253894] __alloc_pages_nodemask+0x34b/0xdd0 [ 448.258574] ? lock_downgrade+0x900/0x900 [ 448.262721] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 448.267742] ? check_same_owner+0x330/0x330 [ 448.272075] ? sock_kmalloc+0x18a/0x1f0 [ 448.276038] ? iov_iter_npages+0xdd0/0xdd0 [ 448.280268] ? _copy_from_iter_full+0x2b8/0xc20 [ 448.284926] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 448.290886] ? af_alg_register_type+0x3f0/0x3f0 [ 448.295546] ? check_preemption_disabled+0x48/0x200 [ 448.300559] ? lock_sock_nested+0x9a/0x120 [ 448.304804] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 448.310347] alloc_pages_current+0x10c/0x210 [ 448.314743] af_alg_sendmsg+0xb08/0x1260 [ 448.318805] ? af_alg_pull_tsgl+0xd70/0xd70 [ 448.323118] aead_sendmsg+0x103/0x150 [ 448.326904] ? crypto_aead_copy_sgl+0x350/0x350 [ 448.331562] sock_sendmsg+0xd5/0x120 [ 448.335269] sock_write_iter+0x35e/0x5c0 [ 448.339320] ? sock_sendmsg+0x120/0x120 [ 448.343288] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 448.348814] ? iov_iter_init+0xc2/0x1e0 [ 448.352781] __vfs_write+0x6b8/0x9f0 [ 448.356495] ? kernel_read+0x120/0x120 [ 448.360388] ? apparmor_path_rmdir+0x30/0x30 [ 448.364783] ? lock_release+0x970/0x970 [ 448.368755] ? check_preemption_disabled+0x48/0x200 [ 448.373776] ? apparmor_file_permission+0x24/0x30 [ 448.378619] ? rw_verify_area+0x118/0x360 [ 448.382768] vfs_write+0x1fc/0x560 [ 448.386320] ksys_write+0x101/0x260 [ 448.389937] ? __ia32_sys_read+0xb0/0xb0 [ 448.393986] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 448.399423] __x64_sys_write+0x73/0xb0 [ 448.403298] do_syscall_64+0x1b9/0x820 [ 448.407214] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 448.412591] ? syscall_return_slowpath+0x5e0/0x5e0 [ 448.417522] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 448.422361] ? trace_hardirqs_on_caller+0x310/0x310 [ 448.427389] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 448.432406] ? prepare_exit_to_usermode+0x291/0x3b0 [ 448.437413] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 448.442246] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.447425] RIP: 0033:0x457579 [ 448.450603] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 448.469511] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 448.477229] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 448.484481] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 448.491733] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 03:33:45 executing program 5: getresuid(&(0x7f0000000380)=0x0, &(0x7f0000000700), &(0x7f0000000740)) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x6, &(0x7f0000000640)=[{&(0x7f0000000080)="abc416fed7a2319e80292deec1c96389a8cef65b83e888ebd8fd249d50e246be90ed8606a8b0ce86e955736bcfb71727e0f1760d046c51efc8cc7f093fca4a3d86e1e209c441149e0ea2", 0x4a, 0xabf}, {&(0x7f0000000100)="05d5e246042fe8b73a03e75ebd56b6306830b144b36cdbe7c0bf7fd7b64afa9730861a65e7506d1f82e697f0a5eca7fa4a6dc859715152d687fd62c9c43baeaf0d00c55cd339c0bec0c50987c866db78ce0e46ac49bb6c913bef528a79036588bbf3eded665f480f887282f3eb4cc76b7209081daa46b6646a6c99a907e8ada3b3f5509db9c440807cb43a1b372de2ca98f62d3443e9766266b74f376d8efda7c2d9251965ea218b2161085652d2ec67e3a896e4a94defef944c175c0b6f7ac180226962ba", 0xc5, 0x4a9a}, {&(0x7f0000000200)="55fce254df9056a5d0a430b09c86ecb6020c5df540d249b11fdea5c3cd5ddc1ff2c2f6dfa3d0386f0c267a49e1722bd0cc87d2dc17e9698616ea4775ac95d97c17dbd4d6ec2d67c12ac1e75f202eff06e1fa92a34a420ff1b542ac2a1a2c628ad6a79fe33afa1e2599b371", 0x6b, 0xfffffffffffffffe}, {&(0x7f0000000280)="067ece34c68bd750b1e0827475153a18836d3d832aeb04e6e5c97e9ebf47e6f8faf583ce2d6c1c7f3cc433add72e0faa37d97afee9350207a64da2023b3a7772c22a571b65bef3a74ed4f155c0b1964a7b06d0081094b2441d6b35badc5daa2222c6bb4b54c594a721b38f5721b3d091f59a3f538fb9235c3c1afd13ad1cceb13f168aa6d6f585aae6ed6f5c3c92ed1db0d5bf399c4013fb3da389412b222729c870abd11d77", 0xa6, 0x797077a8}, {&(0x7f0000000440)="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", 0xfe, 0x401}, {&(0x7f0000000540)="f88b8fe17d508aeb3ce9b43a94ca8d6c2bb2c4a236465a0c8a1b8290f83f451d7c9589b9f125dc61e02c9cc764a82c5962de730d465947f5a63d2ab69b5cd5221cff3a5e37b414a4c14d436fcebc4e9136eaf8b12d29ee073a38e92910836a2dd26adfaf4ac73e74569e1332a757247d4ecdb2e65f5520cd6d4a1a18207f163283d23b858f01829d76ee77c221d099160f63e949a284fd2cae8ca66c3334419fef200f1e21ee4f094fb24943b879b3d39deefef8b79ddafb605b38f17acdbc83038a2306f56fe39e4cefab60baa3c454e354d1ef4622bfd8967252cc84de09e264ea8c1da4fc29e716b3a132ad04eade03a3", 0xf2, 0x100}], 0x1040000, &(0x7f0000000780)={[{@nodiscard='nodiscard'}, {@noquota='noquota'}, {@errors_continue='errors=continue'}, {@noload='noload'}, {@data_err_ignore='data_err=ignore'}, {@usrquota='usrquota'}, {@data_ordered='data=ordered'}], [{@dont_appraise='dont_appraise'}, {@uid_eq={'uid', 0x3d, r0}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x0, 0x32, 0x0, 0x35, 0x36, 0x62, 0x73], 0x2d, [0x36, 0x79, 0x76, 0x7f], 0x2d, [0x31, 0x33, 0x30, 0x34], 0x2d, [0x7d, 0x77, 0x63, 0x34], 0x2d, [0x73, 0x77, 0x30, 0x77, 0x77, 0x77, 0x36, 0x67]}}}, {@permit_directio='permit_directio'}, {@measure='measure'}, {@subj_user={'subj_user', 0x3d, 'bdev:@wlan0+:'}}, {@context={'context', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, 'cgroup'}}]}) socket$alg(0x26, 0x5, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000340)=[{r1}, {r1}], 0x2, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400), 0x8) 03:33:45 executing program 4: r0 = socket$inet6(0xa, 0x100000007, 0x80000000000003) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:33:45 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000070001005307a33d6c390836be381b", 0x1f) 03:33:45 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(sha1-avx,ctr-camellia-asm)\x00'}, 0x58) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x101100, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[{0x8, 0x9}], 0x1) r2 = timerfd_create(0x4, 0x800) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000200)=0x6, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e23, @rand_addr=0x3}}, 0x401, 0x0, 0xa6ff, "2b2d3537f93287e577de8a81a04cfa63c2d6e10e8df3af9911c6439d156a389865bd266ed12113abcc6fe67c0242c7dd9e456a50ebd9c6bc46baeb25e085d9367432a696f0ac4f005726c2153809e0e8"}, 0xd8) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setsig(0x4203, r3, 0x1ff, &(0x7f0000000140)={0x29, 0xf9, 0x2d5b, 0x3}) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) 03:33:45 executing program 3 (fault-call:9 fault-nth:26): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) [ 448.498986] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 448.506283] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:45 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000030001005307a33d6c390836be381b", 0x1f) [ 448.623283] FAULT_INJECTION: forcing a failure. [ 448.623283] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 448.636856] CPU: 1 PID: 22652 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 448.645381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.654744] Call Trace: [ 448.654775] dump_stack+0x1d3/0x2c4 [ 448.654802] ? dump_stack_print_info.cold.2+0x52/0x52 [ 448.666195] should_fail.cold.4+0xa/0x17 [ 448.670290] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 448.675401] ? save_stack+0xa9/0xd0 [ 448.679038] ? save_stack+0x43/0xd0 [ 448.682669] ? kasan_kmalloc+0xc7/0xe0 [ 448.686562] ? __kmalloc+0x14e/0x760 [ 448.690278] ? sock_kmalloc+0x15a/0x1f0 [ 448.694254] ? af_alg_sendmsg+0xa1b/0x1260 [ 448.698496] ? aead_sendmsg+0x103/0x150 [ 448.702469] ? sock_sendmsg+0xd5/0x120 [ 448.706365] ? sock_write_iter+0x35e/0x5c0 [ 448.710597] ? __vfs_write+0x6b8/0x9f0 [ 448.714475] ? vfs_write+0x1fc/0x560 [ 448.718185] ? ksys_write+0x101/0x260 [ 448.721990] ? do_syscall_64+0x1b9/0x820 [ 448.726082] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.731544] ? fs_reclaim_acquire+0x20/0x20 [ 448.735869] ? lock_downgrade+0x900/0x900 [ 448.740020] ? lock_release+0x970/0x970 [ 448.744023] ? check_same_owner+0x330/0x330 [ 448.748348] ? trace_hardirqs_on+0xbd/0x310 [ 448.752691] ? sock_kmalloc+0x15a/0x1f0 [ 448.756683] ? __might_sleep+0x95/0x190 [ 448.760678] __alloc_pages_nodemask+0x34b/0xdd0 [ 448.765355] ? lock_downgrade+0x900/0x900 [ 448.769507] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 448.774521] ? check_same_owner+0x330/0x330 [ 448.778855] ? sock_kmalloc+0x18a/0x1f0 [ 448.782837] ? iov_iter_npages+0xdd0/0xdd0 [ 448.787081] ? _copy_from_iter_full+0x2b8/0xc20 [ 448.791759] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 448.797742] ? af_alg_register_type+0x3f0/0x3f0 [ 448.802412] ? check_preemption_disabled+0x48/0x200 [ 448.807430] ? lock_sock_nested+0x9a/0x120 [ 448.811670] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 448.817211] alloc_pages_current+0x10c/0x210 [ 448.821620] af_alg_sendmsg+0xb08/0x1260 [ 448.825688] ? af_alg_pull_tsgl+0xd70/0xd70 [ 448.830021] aead_sendmsg+0x103/0x150 [ 448.833825] ? crypto_aead_copy_sgl+0x350/0x350 [ 448.838497] sock_sendmsg+0xd5/0x120 [ 448.842210] sock_write_iter+0x35e/0x5c0 [ 448.846278] ? sock_sendmsg+0x120/0x120 [ 448.850283] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 448.855838] ? iov_iter_init+0xc2/0x1e0 [ 448.859821] __vfs_write+0x6b8/0x9f0 [ 448.863551] ? kernel_read+0x120/0x120 [ 448.867445] ? apparmor_path_rmdir+0x30/0x30 [ 448.871855] ? lock_release+0x970/0x970 [ 448.875832] ? check_preemption_disabled+0x48/0x200 [ 448.880858] ? apparmor_file_permission+0x24/0x30 [ 448.885707] ? rw_verify_area+0x118/0x360 [ 448.889866] vfs_write+0x1fc/0x560 [ 448.893413] ksys_write+0x101/0x260 [ 448.897043] ? __ia32_sys_read+0xb0/0xb0 [ 448.901107] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 448.906561] __x64_sys_write+0x73/0xb0 [ 448.910452] do_syscall_64+0x1b9/0x820 [ 448.914339] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 448.919701] ? syscall_return_slowpath+0x5e0/0x5e0 [ 448.924634] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 448.929477] ? trace_hardirqs_on_caller+0x310/0x310 [ 448.934493] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 448.939514] ? prepare_exit_to_usermode+0x291/0x3b0 [ 448.944533] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 448.949386] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.954573] RIP: 0033:0x457579 03:33:45 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f00000001c0)=0xb9) keyctl$get_persistent(0x3, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000280)={0x4fb, 0x2, 0x200, 0x8, &(0x7f0000000200)=[{}, {}]}) 03:33:45 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000ec000000001005307a33d6c390836be381b", 0x1f) [ 448.957768] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 448.976669] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 448.984376] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 448.991652] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 448.998920] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 449.006184] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 449.013450] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:45 executing program 0: ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x6, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000160, 0x10102, &(0x7f0000001540)={r1}) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0) getsockname$packet(r0, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b00)=0x11a) sendto$packet(r0, &(0x7f0000000a80)="2a11f1b5bd5a7b46ea129772e358a020f8ddb29fbd596167713878030a3f46ac45f2cbd24b4c0306fbf7397578535d5c", 0x30, 0xc5, &(0x7f0000000b40)={0x11, 0xa, r2, 0x1, 0xf5e3, 0x6, @broadcast}, 0x14) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/self/net/pfkey\x00', 0x10400, 0x0) rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x48, &(0x7f0000000140)=[@in={0x2, 0x4e22, @rand_addr=0x1ff}, @in6={0xa, 0x4e23, 0x4, @loopback, 0x100000000}, @in6={0xa, 0x4e21, 0x7, @ipv4={[], [], @multicast2}, 0x4}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e24, 0x1000, @mcast1, 0x2cbb23a}}, 0x0, 0x3d6f, 0x8000, 0x2, 0x4}, &(0x7f0000000340)=0x98) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000640)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000680)={0x1, r6}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000780)='/dev/mixer\x00', 0x0, 0x0) r7 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000100)={'bond0\x00', 0x7f}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000a40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x28c4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)=ANY=[@ANYBLOB="b37be34c", @ANYRES16=r8, @ANYBLOB="040c2bbd7000fedbdf25090000000c00010008000200b70000002800030008000500ac14141208000500ac14141d14000200697064647030000000000000000000000c000300080007004e23000008000500000800000800060005000000080004000500000024000100080008000100008008000200000000000800010002000000080001000a0000000c000100080005000100000038000300080007004e200000080007004e200000080004005a00000014000200626f6e645f736c6176655f30000000000800030001000000"], 0xd4}, 0x1, 0x0, 0x0, 0xc010}, 0x20000800) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'bond0\x00', 0x1000}) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)="4c5e7070703126152b407070703000", 0xffffffffffffff9c}, 0x10) connect$l2tp(r9, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x4e22, @broadcast}, 0x1, 0x1, 0x4, 0x2}}, 0x2e) ioctl$KDDELIO(r9, 0x4b35, 0x36bf) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f00000004c0)={{0x2, 0x3, 0x6, 0x3, 0x1}, 0x703, 0x6, 'id0\x00', 'timer0\x00', 0x0, 0x3f80000, 0x4, 0x4, 0x100000001}) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f00000008c0)={0x6, 0xa, 0x4}) 03:33:45 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200f0ffffff0001005307a33d6c390836be381b", 0x1f) 03:33:45 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)}) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x18c) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) 03:33:45 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000002c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}) r1 = gettid() r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x88, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000080) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r1, 0x1000000000013) sched_setscheduler(r1, 0x7, &(0x7f0000000080)=0x4) 03:33:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x13, 0xb, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000000c0)) io_setup(0x1, &(0x7f0000000080)=0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) close(r3) socket$unix(0x1, 0x5, 0x0) io_submit(r2, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) 03:33:46 executing program 3 (fault-call:9 fault-nth:27): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:46 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000d0000000001005307a33d6c390836be381b", 0x1f) 03:33:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000004880)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0fc79d57000000660f11446ffe3e0fc71d00380000440f20c03503000000440f22c00f06660fd6110f359a060000007100660fd9b500000000c4c172517d0f"}], 0x1, 0x2000000000000, &(0x7f0000000040), 0x10000000000000db) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:33:46 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9, 0x400000) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000000c0)) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x84, "e6f8e96ff6ad10171957291bd40ef39fd1cbfa4fc9f5ee0718a0eeba87dadfd09875a165ee7095507b88d941b42c3b267fb4343db275cccf533dae881f9acc7c83d2fe6639b370df8f689638190efd3de4ba64c073adf63aba8c90b9b0b916eacc3665389737c387706e68fa5a2eb292118a332c143b08adac15973c04ad06efacf294bd"}, &(0x7f00000001c0)=0x8c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000200)={r2, 0x63, 0x30, 0x1f, 0x1000}, &(0x7f0000000240)=0x18) [ 449.479251] FAULT_INJECTION: forcing a failure. [ 449.479251] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 449.505697] CPU: 0 PID: 22708 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 449.514231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.523602] Call Trace: [ 449.526218] dump_stack+0x1d3/0x2c4 [ 449.529879] ? dump_stack_print_info.cold.2+0x52/0x52 [ 449.535081] should_fail.cold.4+0xa/0x17 [ 449.539147] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 449.544281] ? save_stack+0xa9/0xd0 [ 449.547913] ? save_stack+0x43/0xd0 [ 449.551540] ? kasan_kmalloc+0xc7/0xe0 [ 449.555434] ? __kmalloc+0x14e/0x760 [ 449.559159] ? sock_kmalloc+0x15a/0x1f0 [ 449.563134] ? af_alg_sendmsg+0xa1b/0x1260 [ 449.567370] ? aead_sendmsg+0x103/0x150 [ 449.571345] ? sock_sendmsg+0xd5/0x120 [ 449.575230] ? sock_write_iter+0x35e/0x5c0 [ 449.579459] ? __vfs_write+0x6b8/0x9f0 [ 449.583340] ? vfs_write+0x1fc/0x560 [ 449.587051] ? ksys_write+0x101/0x260 [ 449.590850] ? do_syscall_64+0x1b9/0x820 [ 449.594915] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.600315] ? cache_grow_end+0xa8/0x190 [ 449.604381] ? fs_reclaim_acquire+0x20/0x20 [ 449.608703] ? lock_downgrade+0x900/0x900 [ 449.612862] ? lock_release+0x970/0x970 [ 449.616837] ? check_same_owner+0x330/0x330 [ 449.621157] ? trace_hardirqs_on+0xbd/0x310 [ 449.625473] ? kasan_check_write+0x14/0x20 [ 449.629715] ? sock_kmalloc+0x15a/0x1f0 [ 449.633694] ? __might_sleep+0x95/0x190 [ 449.637670] __alloc_pages_nodemask+0x34b/0xdd0 [ 449.642336] ? lock_downgrade+0x900/0x900 [ 449.646485] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 449.651497] ? check_same_owner+0x330/0x330 [ 449.655819] ? sock_kmalloc+0x18a/0x1f0 [ 449.659797] ? iov_iter_npages+0xdd0/0xdd0 [ 449.664039] ? _copy_from_iter_full+0x2b8/0xc20 [ 449.668721] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 449.674704] ? af_alg_register_type+0x3f0/0x3f0 [ 449.679379] ? check_preemption_disabled+0x48/0x200 [ 449.684397] ? lock_sock_nested+0x9a/0x120 [ 449.688634] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 449.694177] alloc_pages_current+0x10c/0x210 [ 449.698588] af_alg_sendmsg+0xb08/0x1260 [ 449.702667] ? af_alg_pull_tsgl+0xd70/0xd70 [ 449.707013] aead_sendmsg+0x103/0x150 [ 449.710814] ? crypto_aead_copy_sgl+0x350/0x350 [ 449.715481] sock_sendmsg+0xd5/0x120 [ 449.719200] sock_write_iter+0x35e/0x5c0 [ 449.723280] ? sock_sendmsg+0x120/0x120 [ 449.727274] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 449.732838] ? iov_iter_init+0xc2/0x1e0 [ 449.736814] __vfs_write+0x6b8/0x9f0 [ 449.740528] ? kernel_read+0x120/0x120 [ 449.744427] ? apparmor_path_rmdir+0x30/0x30 [ 449.748871] ? lock_release+0x970/0x970 [ 449.752845] ? check_preemption_disabled+0x48/0x200 [ 449.757899] ? apparmor_file_permission+0x24/0x30 [ 449.762771] ? rw_verify_area+0x118/0x360 [ 449.766934] vfs_write+0x1fc/0x560 [ 449.770475] ksys_write+0x101/0x260 [ 449.774105] ? __ia32_sys_read+0xb0/0xb0 [ 449.778184] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 449.783637] __x64_sys_write+0x73/0xb0 [ 449.787540] do_syscall_64+0x1b9/0x820 [ 449.791430] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 449.796799] ? syscall_return_slowpath+0x5e0/0x5e0 [ 449.801738] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 449.806592] ? trace_hardirqs_on_caller+0x310/0x310 [ 449.811610] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 449.816627] ? prepare_exit_to_usermode+0x291/0x3b0 [ 449.821645] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 449.826495] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.831676] RIP: 0033:0x457579 [ 449.834871] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 449.853772] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 449.861483] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 449.868752] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 03:33:46 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000e00000001005307a33d6c390836be381b", 0x1f) 03:33:46 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200fffff0000001005307a33d6c390836be381b", 0x1f) [ 449.876036] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 449.883302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 449.890570] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:46 executing program 3 (fault-call:9 fault-nth:28): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:46 executing program 4: r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg(r0, &(0x7f00000002c0)={&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0xffffff6a, &(0x7f0000000740)=[{&(0x7f0000000040)="3277b7a2617333a3be970515b8cd644ed9d27981edf70f271ee75fd3e09dda2c90b1972ac5012952143b3d0a8bc1e947a53a4c4d604ed38a007f306525d88b2052ded9c8df4394d6501dabecae9881"}, {&(0x7f00000000c0)="74e48aefbffc8d69752f39b94b7f7a311316f6d9dd92e4120fe2e3eaefebed72307555e4ff3ad16ca5e1315a4607eb5b2afa2d566433ab3c83851777ffff18a4e7dd01d8426cc780656f0df3c8cdc9cb32d7f4c3597a0a30706cf3fb4856a19b413d44908a7cc53199a6c535f2f822413876ded702d68a65987b15ee802f81ee044342ed39cd3f72c811714c549b4b0ed44355e9b9d7a31d124d"}, {&(0x7f0000000180)="d67389a27fc0f16ab10f133781f2daca6878d0af9ef1af71d7a368e8e8b813994ac00c76ce8d6c24d1fccc564a5187ff4cff2e8e4b2967667e132b46ed488a393d4575d376ae23400e0a1482f4cc15f01a73b0db31445667c7a5a18a9dc2f994cf3a5d97a8066ab1469c6aee96c14a4c3aea89ddeceb2ea5b32361012709ddc7515c7730f22d621e366c7e0fec7fd793da24a60e4bf347263e990770f0f60970604622ce1766d96e60c1f1b4076b10606ef6c5b5fff75802"}, {&(0x7f0000000380)="730541d9ee1796beb93aef94b21402e50f4004689dae45123192b9cc69cb30f26cbf257a6a30aa970e08ca1c858bf6243114ffe7ece669355fe3d3ab8372e64e6f06f62bb0150ef8040efee17a73885c34fc1936c1f06eaa4d2af02f59640b3ec6ca927d0df77db3d85c4b0646aedc516ed794aaa856695bf7323c1e605f97e0219e9ae42fc474fb1f976783c5d8ca8a3bc7988f8255b2bd06c82555b9e8013224400648b85dc3e8c52fa507c5d7d96076b3576d48c647f100f81c390e6fdda180a7642598260d640bcae4fa56c49b8234e2c5e40a"}, {&(0x7f0000000480)="a1f6f356b43372aa889bae691f391471f46e9ac6d127bdca6c95c98229c23e1febad5bfaafbf7e6dde63a0ed3695086aaa40efb65590c6b505adbf8c596848a9d4af14cd27962711c8f22bf4538b2075878676b8073b37d6d39e1a6c81568bd5923b5e2f4f31c779aa498cfee7048b501261bb15174bf24cbd7df9bff979e041d0f9d2585c84a3f8c927f8628d628cb0e891ba7aab1f95a5e48b0085762f39b62ab6344dddd11375cc84c515d929456d9e392076eb9fd160f292eaef7f7bd3493e7481205b69f6ddd83b235066f5df553dc7ba9006c9fb38b3171ad1b1302d7387b7de17df693fc1492ec7f0b708d3bdbf8d6441"}, {&(0x7f0000000240)="34ecd12f637197549baf34324a7969efe1707c6cff214fccd66b50193364bf47f59e55b09f8492e9f0a238c4018e77c948682f8e5d516320d5c8f118"}, {&(0x7f0000000580)="296c049faded28211fe657956e946a78f1c8dd0f8b86ddb6e0799b02123204941436fe47cabece77322fc17ace9cf7a143a8c6caa88accc77859ecf814cd8f11227c811659ed6ddeca404f"}, {&(0x7f0000000600)="7358206651ff57e7d68f389a7cbf8e846c5e69b239cd909610d374bd42a25e2345dc1102650a056ab520c747bef4d2b9d8d3f64589cb6cb2fb435fa55172e5a4e8d1ed4167e9be9a058e74d7583d56fb94e3c62bdaf271e441d4a02d7f2df614f41207c103469428c92ee406d0d2be25c5bcbaad99ded86f472063caf0fcabc5a0a3eb5dd286b55e28e592733316b7f82344f42ba9080cee55d40dd39e90a5d31c65f16c35a59d68fd487baf1f48408ad868d73ffcbf9cd624995520cee4"}, {&(0x7f00000006c0)="1eeda91468c4461336862ab13b8fc55905fb26aaa2f395dedfab81708f59c666763f9cd1adb0e9f8e3e8269e5b41a0c4b56baf3e8f4cd24d0ae7640748f3c48c0e7e01df21038f82754974803ec00f4e3a0e2614108bb1501f380d4a908db61b937031a565c1e3213148fc43b85a665f7db2e5a07f7686c041f65a82"}], 0x0, &(0x7f0000000000)=ANY=[]}, 0x2000c4ff) 03:33:46 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000d00000001005307a33d6c390836be381b", 0x1f) 03:33:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040), &(0x7f0000000080)=0x4) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) [ 450.015899] FAULT_INJECTION: forcing a failure. [ 450.015899] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 450.062850] CPU: 1 PID: 22728 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 450.071362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.080714] Call Trace: [ 450.083330] dump_stack+0x1d3/0x2c4 [ 450.086979] ? dump_stack_print_info.cold.2+0x52/0x52 [ 450.092191] should_fail.cold.4+0xa/0x17 [ 450.096272] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 450.101378] ? save_stack+0xa9/0xd0 [ 450.105008] ? save_stack+0x43/0xd0 [ 450.108636] ? kasan_kmalloc+0xc7/0xe0 [ 450.112518] ? __kmalloc+0x14e/0x760 [ 450.116235] ? sock_kmalloc+0x15a/0x1f0 [ 450.120216] ? af_alg_sendmsg+0xa1b/0x1260 [ 450.124449] ? aead_sendmsg+0x103/0x150 [ 450.128426] ? sock_sendmsg+0xd5/0x120 [ 450.132314] ? sock_write_iter+0x35e/0x5c0 [ 450.136550] ? __vfs_write+0x6b8/0x9f0 [ 450.140437] ? vfs_write+0x1fc/0x560 [ 450.144149] ? ksys_write+0x101/0x260 [ 450.147950] ? do_syscall_64+0x1b9/0x820 [ 450.152016] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.157417] ? fs_reclaim_acquire+0x20/0x20 [ 450.161743] ? lock_downgrade+0x900/0x900 [ 450.165902] ? lock_release+0x970/0x970 [ 450.169882] ? check_same_owner+0x330/0x330 [ 450.174204] ? trace_hardirqs_on+0xbd/0x310 [ 450.178525] ? sock_kmalloc+0x15a/0x1f0 [ 450.182505] ? __might_sleep+0x95/0x190 [ 450.186497] __alloc_pages_nodemask+0x34b/0xdd0 [ 450.191181] ? lock_downgrade+0x900/0x900 [ 450.195332] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 450.200356] ? check_same_owner+0x330/0x330 [ 450.204693] ? sock_kmalloc+0x18a/0x1f0 [ 450.208670] ? iov_iter_npages+0xdd0/0xdd0 [ 450.212913] ? _copy_from_iter_full+0x2b8/0xc20 [ 450.217611] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 450.223587] ? af_alg_register_type+0x3f0/0x3f0 [ 450.228295] ? check_preemption_disabled+0x48/0x200 [ 450.233309] ? lock_sock_nested+0x9a/0x120 [ 450.237549] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 450.243098] alloc_pages_current+0x10c/0x210 [ 450.247508] af_alg_sendmsg+0xb08/0x1260 [ 450.251578] ? af_alg_pull_tsgl+0xd70/0xd70 [ 450.255906] aead_sendmsg+0x103/0x150 [ 450.259704] ? crypto_aead_copy_sgl+0x350/0x350 [ 450.264376] sock_sendmsg+0xd5/0x120 [ 450.268091] sock_write_iter+0x35e/0x5c0 [ 450.272155] ? sock_sendmsg+0x120/0x120 [ 450.276139] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 450.281677] ? iov_iter_init+0xc2/0x1e0 [ 450.285654] __vfs_write+0x6b8/0x9f0 [ 450.289483] ? kernel_read+0x120/0x120 [ 450.293386] ? apparmor_path_rmdir+0x30/0x30 [ 450.297808] ? lock_release+0x970/0x970 [ 450.301789] ? check_preemption_disabled+0x48/0x200 [ 450.306828] ? apparmor_file_permission+0x24/0x30 [ 450.311676] ? rw_verify_area+0x118/0x360 [ 450.315830] vfs_write+0x1fc/0x560 [ 450.319372] ksys_write+0x101/0x260 [ 450.323004] ? __ia32_sys_read+0xb0/0xb0 [ 450.327093] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 450.332546] __x64_sys_write+0x73/0xb0 [ 450.336441] do_syscall_64+0x1b9/0x820 [ 450.340332] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 450.345699] ? syscall_return_slowpath+0x5e0/0x5e0 [ 450.350656] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 450.355499] ? trace_hardirqs_on_caller+0x310/0x310 [ 450.360521] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 450.365553] ? prepare_exit_to_usermode+0x291/0x3b0 [ 450.370574] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 450.375423] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.380608] RIP: 0033:0x457579 [ 450.383801] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 450.402697] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 03:33:47 executing program 2: syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000001180)=[{&(0x7f0000000300)="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", 0x1fa}], 0x0, &(0x7f0000000040)) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}, [0x80000001, 0x100000001, 0x1, 0x80, 0x10001, 0x80000000, 0x8, 0x400, 0x76ea, 0x95, 0x800, 0x6, 0xe46e, 0x8, 0x100000001]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r1, 0x8}, &(0x7f0000000280)=0xc) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x3) 03:33:47 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x41, 0x3) r1 = socket$inet6(0xa, 0x3, 0x800000000000008) ioctl(r1, 0x8912, &(0x7f00000000c0)="15bf6234488dd25d726070") bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x10000}, 0xfffffffffffffffd, 0x400}, 0xe) listen(r0, 0x0) 03:33:47 executing program 4: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x80002, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000000c0)=""/218, &(0x7f00000001c0)=0xda) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x2}, 0x1c) 03:33:47 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200020000000001005307a33d6c390836be381b", 0x1f) [ 450.410405] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 450.417673] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 450.424937] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 450.432213] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 450.439477] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:47 executing program 0: rt_sigtimedwait(&(0x7f0000000000)={0x7ffffffd}, &(0x7f0000000040), &(0x7f0000000100)={0x0, 0x989680}, 0x8) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x2000000) 03:33:47 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200040000000001005307a33d6c390836be381b", 0x1f) 03:33:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) inotify_init() dup3(r1, r0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="747261b0d7b454ffbc536664ee6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 03:33:47 executing program 3 (fault-call:9 fault-nth:29): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:47 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x80, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) lseek(r0, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") dup2(r1, r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa28300070002d418000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:33:47 executing program 5: setresuid(0x0, 0xee01, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2, 0x0, 0x910}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x101, 0x4, &(0x7f0000000340)=[{&(0x7f0000000100)="f0c24c61471df548df5e443738024cf4c8fdecab55778151c1e22e1474dccf6295d81d6a951c9cee7025c584cc07ffa9cebe1663dbe7af7a2df234fe056993f6c20ccb34b02f92b41c8eba893e9851e3434adaa46b12bb8070102b52cb7a2fd1559dc692a188c745f8a4347ee817c72e84a3c62deb0d443d69b85fec96cd647d8c42c8cf7176357fb433fb08c72b788b127e7ce07b0be6bda65ec3ebc2334abc45de084a3f07ddf0c1d68577a9c715b11dc045d798bc49a25e45657ffc23f837f8f54b48af14b9f6a5", 0xc9, 0xef28}, {&(0x7f0000000480)="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", 0x1000, 0x7}, {&(0x7f0000000200)="d5111aa63c2d568d0bb2a8277ae58defd234138f9971625ae7832fd4938051d8efc095c1089bad9b3a3e488a1ba13956a8d886e679ee4bcd8fb7fb3772ef76b9ab95edbe2f2ae2af7193549390e2c7e8b03f74d6a9c2f337aa2f629d0c8687b490730d2d6f4d4e09395edff8aaa4617563740787e75453727970a9f14f0d9eb23e56433de11ae50881a43f0a39a6434f14a345fcbc4308a090d44b5f19b8beff7085c488dcd0", 0xa6, 0x7ff}, {&(0x7f00000002c0)="19c18e124a54d5ece6e286bae61ff7d55948cc73ad3c530b3e3f2721e71ac8f0b8c2c2562a3afa7be0de49c66412c24adccb54bbe6e04f9ae3fb2b0fe868107d9fa5c6271f8a136a58237f5fadf9afcdfc5fee0b186c9595f9f3", 0x5a, 0x5e9468e8}], 0x842400, &(0x7f00000003c0)={[{@rodir='rodir'}, {@shortname_win95='shortname=win95'}, {@utf8no='utf8=0'}], [{@smackfsdef={'smackfsdef', 0x3d, 'selflo(eth0+'}}]}) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) setresuid(0x0, 0x0, 0x0) keyctl$chown(0x4, r1, 0x0, 0x0) 03:33:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x20000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000002c0)=0x7, 0x8) r1 = syz_open_pts(0xffffffffffffff9c, 0x400) ioctl$VT_WAITACTIVE(r1, 0x5607) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000280)={0xffffffff, 0x9, 0x4, 0x6, 0x11, 0x7ff}) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000240)={0x100000001, 0x10000401, 0x1}) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0105512, &(0x7f00000001c0)={0x0, 0x80805513, 0x705000}) fsync(r2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000880)) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) r5 = geteuid() setresuid(r3, r4, r5) 03:33:47 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000b00000001005307a33d6c390836be381b", 0x1f) [ 450.663588] XFS (loop2): Invalid superblock magic number [ 450.670155] FAULT_INJECTION: forcing a failure. [ 450.670155] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 450.701048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 450.728945] CPU: 1 PID: 22777 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 450.737452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.746827] Call Trace: [ 450.749435] dump_stack+0x1d3/0x2c4 [ 450.753081] ? dump_stack_print_info.cold.2+0x52/0x52 [ 450.758299] should_fail.cold.4+0xa/0x17 [ 450.762370] ? preempt_notifier_register+0x200/0x200 [ 450.767481] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 450.772600] ? __switch_to_asm+0x34/0x70 [ 450.776660] ? __switch_to_asm+0x40/0x70 [ 450.780723] ? __switch_to_asm+0x34/0x70 [ 450.780748] ? __switch_to_asm+0x34/0x70 [ 450.780774] ? __switch_to_asm+0x40/0x70 [ 450.788880] ? __switch_to_asm+0x34/0x70 [ 450.788895] ? __switch_to_asm+0x40/0x70 [ 450.788910] ? __switch_to_asm+0x34/0x70 [ 450.788932] ? do_syscall_64+0x1b9/0x820 [ 450.809221] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.814608] ? __sched_text_start+0x8/0x8 [ 450.818776] ? fs_reclaim_acquire+0x20/0x20 [ 450.819275] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 450.823109] ? lock_downgrade+0x900/0x900 [ 450.823134] ? lock_release+0x970/0x970 [ 450.839631] ? check_same_owner+0x330/0x330 [ 450.843963] ? trace_hardirqs_off+0x310/0x310 [ 450.848465] ? retint_kernel+0x1b/0x2d [ 450.852359] ? __might_sleep+0x95/0x190 [ 450.856345] __alloc_pages_nodemask+0x34b/0xdd0 [ 450.861018] ? lock_downgrade+0x900/0x900 [ 450.865152] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 450.870151] ? check_same_owner+0x330/0x330 [ 450.874458] ? __check_object_size+0x3fd/0x782 [ 450.879029] ? iov_iter_npages+0xdd0/0xdd0 [ 450.883259] ? _copy_from_iter_full+0x2b8/0xc20 [ 450.887940] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 450.893898] ? af_alg_register_type+0x3f0/0x3f0 [ 450.898554] ? check_preemption_disabled+0x48/0x200 [ 450.903567] ? lock_sock_nested+0x9a/0x120 [ 450.907809] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 450.913348] alloc_pages_current+0x10c/0x210 [ 450.917753] af_alg_sendmsg+0xb08/0x1260 [ 450.921813] ? af_alg_pull_tsgl+0xd70/0xd70 [ 450.926141] aead_sendmsg+0x103/0x150 [ 450.929924] ? crypto_aead_copy_sgl+0x350/0x350 [ 450.934577] sock_sendmsg+0xd5/0x120 [ 450.938278] sock_write_iter+0x35e/0x5c0 [ 450.942324] ? sock_sendmsg+0x120/0x120 [ 450.946291] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 450.951822] ? iov_iter_init+0xc2/0x1e0 [ 450.955805] __vfs_write+0x6b8/0x9f0 [ 450.959503] ? kernel_read+0x120/0x120 [ 450.963375] ? apparmor_path_rmdir+0x30/0x30 [ 450.967771] ? lock_release+0x970/0x970 [ 450.971735] ? check_preemption_disabled+0x48/0x200 [ 450.976736] ? apparmor_file_permission+0x24/0x30 [ 450.981578] ? rw_verify_area+0x118/0x360 [ 450.985710] vfs_write+0x1fc/0x560 [ 450.989236] ksys_write+0x101/0x260 [ 450.992861] ? __ia32_sys_read+0xb0/0xb0 [ 450.996909] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 451.002343] __x64_sys_write+0x73/0xb0 [ 451.006216] do_syscall_64+0x1b9/0x820 [ 451.010101] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 451.015468] ? syscall_return_slowpath+0x5e0/0x5e0 [ 451.020385] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 451.025211] ? trace_hardirqs_on_caller+0x310/0x310 [ 451.030215] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 451.035235] ? prepare_exit_to_usermode+0x291/0x3b0 [ 451.040269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 451.045102] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.050279] RIP: 0033:0x457579 [ 451.053457] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 451.072361] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 451.080057] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 451.087310] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 451.094559] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 451.101817] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 451.109069] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:48 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='self[selinux\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c20000000000000000000000000030006000000000000000000380000000000000000000000000020000200"], 0x2e) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 03:33:48 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200070000000001005307a33d6c390836be381b", 0x1f) 03:33:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x3, 0x7fff, 0x401, 0x100000001}, 0x10) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) dup3(r0, r1, 0x0) 03:33:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) fcntl$addseals(r0, 0x409, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f00000001c0)={@multicast1, @local, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@empty, 0x50, r1}) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000000c0)=0x99, 0x3e9) open_by_handle_at(r0, &(0x7f0000000140)={0x69, 0x7, "df8d1b2ba2735a5b87a343f01c81e0a157158dee9369aab94f94b9726094cad4f89cb7b1fb9941ef011b7c7d1d44a6d8a4b8483ded881adc006f1fe93d8bc257a8c2253bfa61510d1243640ec75eeb139bb2b9f5c5902f7afd037aec10723fc434"}, 0x301000) sendto$inet6(r0, &(0x7f0000000280)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e602721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a0e1d0607f57f626a5b8d476636ef1ee76307524009ae49be4db0ab2c8ea0c5ebd1e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408cc4c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669c24c206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb25c89074fcb1bba20c41bddd9ca5cd2f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2ebdfad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c5912a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe9bc88fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f400582bd95e5ad802050d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60be632697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20f4774d66c5ae0a0adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5b4967904daf833d91ae9461ef10036f8be000000", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @mcast2}, 0x1c) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000200)=""/80, 0x50}, 0x0) 03:33:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x20000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000002c0)=0x7, 0x8) r1 = syz_open_pts(0xffffffffffffff9c, 0x400) ioctl$VT_WAITACTIVE(r1, 0x5607) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000280)={0xffffffff, 0x9, 0x4, 0x6, 0x11, 0x7ff}) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000240)={0x100000001, 0x10000401, 0x1}) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0105512, &(0x7f00000001c0)={0x0, 0x80805513, 0x705000}) fsync(r2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000880)) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) r5 = geteuid() setresuid(r3, r4, r5) 03:33:48 executing program 3 (fault-call:9 fault-nth:30): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:48 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200c00e00000001005307a33d6c390836be381b", 0x1f) [ 451.241353] FAULT_INJECTION: forcing a failure. [ 451.241353] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 451.257473] CPU: 1 PID: 22817 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 451.266009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.275367] Call Trace: [ 451.277973] dump_stack+0x1d3/0x2c4 [ 451.281639] ? dump_stack_print_info.cold.2+0x52/0x52 [ 451.286836] ? perf_trace_lock+0x14d/0x7a0 [ 451.291083] should_fail.cold.4+0xa/0x17 [ 451.295165] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 451.300286] ? save_stack+0xa9/0xd0 [ 451.303917] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.309460] ? check_preemption_disabled+0x48/0x200 [ 451.314474] ? __kmalloc+0x14e/0x760 [ 451.318220] ? debug_smp_processor_id+0x1c/0x20 [ 451.322889] ? do_syscall_64+0x1b9/0x820 [ 451.326963] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.332333] ? zap_class+0x640/0x640 [ 451.336046] ? zap_class+0x640/0x640 [ 451.339781] ? zap_class+0x640/0x640 [ 451.343502] ? fs_reclaim_acquire+0x20/0x20 [ 451.347826] ? lock_downgrade+0x900/0x900 [ 451.351976] ? lock_release+0x970/0x970 [ 451.355951] ? check_same_owner+0x330/0x330 [ 451.360281] ? trace_hardirqs_on+0xbd/0x310 [ 451.364628] ? kasan_check_write+0x14/0x20 [ 451.368881] ? __might_sleep+0x95/0x190 [ 451.372857] __alloc_pages_nodemask+0x34b/0xdd0 [ 451.377526] ? lock_downgrade+0x900/0x900 [ 451.381677] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 451.386694] ? check_same_owner+0x330/0x330 [ 451.391017] ? sock_kmalloc+0x18a/0x1f0 [ 451.394998] ? iov_iter_npages+0xdd0/0xdd0 [ 451.399240] ? _copy_from_iter_full+0x2b8/0xc20 [ 451.403916] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 451.409892] ? af_alg_register_type+0x3f0/0x3f0 [ 451.414566] ? check_preemption_disabled+0x48/0x200 [ 451.419624] ? lock_sock_nested+0x9a/0x120 [ 451.423864] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 451.429404] alloc_pages_current+0x10c/0x210 [ 451.433815] af_alg_sendmsg+0xb08/0x1260 [ 451.437890] ? af_alg_pull_tsgl+0xd70/0xd70 [ 451.442223] aead_sendmsg+0x103/0x150 [ 451.446023] ? crypto_aead_copy_sgl+0x350/0x350 [ 451.450695] sock_sendmsg+0xd5/0x120 [ 451.454427] sock_write_iter+0x35e/0x5c0 [ 451.458493] ? sock_sendmsg+0x120/0x120 [ 451.462710] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 451.468286] ? iov_iter_init+0xc2/0x1e0 [ 451.472290] __vfs_write+0x6b8/0x9f0 [ 451.476005] ? kernel_read+0x120/0x120 [ 451.479897] ? apparmor_path_rmdir+0x30/0x30 [ 451.484309] ? lock_release+0x970/0x970 [ 451.488305] ? check_preemption_disabled+0x48/0x200 [ 451.493327] ? apparmor_file_permission+0x24/0x30 [ 451.498178] ? rw_verify_area+0x118/0x360 [ 451.502331] vfs_write+0x1fc/0x560 [ 451.505880] ksys_write+0x101/0x260 [ 451.509515] ? __ia32_sys_read+0xb0/0xb0 [ 451.513581] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 451.519039] __x64_sys_write+0x73/0xb0 [ 451.522934] do_syscall_64+0x1b9/0x820 [ 451.526829] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 451.532196] ? syscall_return_slowpath+0x5e0/0x5e0 [ 451.537127] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 451.541983] ? trace_hardirqs_on_caller+0x310/0x310 [ 451.547040] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 451.552062] ? prepare_exit_to_usermode+0x291/0x3b0 [ 451.557084] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 451.561938] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.567128] RIP: 0033:0x457579 [ 451.570327] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:33:48 executing program 4: r0 = memfd_create(&(0x7f00000000c0)="00000600000000004019aa30d8f6495801239e53784e080000", 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e000000000000000000000000004000000000000000000000000000000000000000000038000200"], 0x3a) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000340), 0xfff) 03:33:48 executing program 5: r0 = semget$private(0x0, 0x7, 0x0) unshare(0x8fe) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1) socket$alg(0x26, 0x5, 0x0) semget$private(0x0, 0x3, 0x8) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000000c0)={'vcan0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)) [ 451.589228] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 451.596952] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 451.604217] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 451.611487] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 451.618756] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 451.626027] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:48 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) recvfrom$inet6(r0, &(0x7f0000000c00)=""/4096, 0x1000, 0x21, &(0x7f0000000140)={0xa, 0x4e21, 0x6, @remote, 0x9}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x4000000000000a) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000005, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000005200)=[{{&(0x7f0000002700)=@can, 0x80, &(0x7f0000004b80)=[{&(0x7f0000002780)=""/152, 0x98}, {&(0x7f0000002840)=""/49, 0x31}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/34, 0x22}, {&(0x7f00000048c0)=""/150, 0x96}, {&(0x7f0000004980)=""/21, 0x15}], 0x7, &(0x7f0000004c40)=""/65, 0x41}}], 0x1, 0x0, &(0x7f0000005440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1f) r5 = dup2(r4, r1) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r0) syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x40, 0x800) sendmsg$netlink(r5, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x12b, &(0x7f0000000280)=ANY=[@ANYBLOB="010008008bc72b1e5ded7e448d1cf7526e812b1f4aa3028fbdf86eed1ecb529e10eff6f833df74e9b55a6852b46bc8af577bc34ed3870f3eb0cbf62845fbbfd8b19a478462a979916c15bea4d9a1ec1878407e7d318bd5252425dcaec5c3004633f87543c2471159f8c6d91c16255f31a1f41c70dc054c16dda94d23749173af06f7eaf27e54a7775dde23771aa1848feb497cf790f3d49fed3437efcdfa947ba311378b8eaf948046d153fd608e", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000440)={0x10000000}) r6 = getuid() fstat(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {0x1, 0x6}, [{0x2, 0x4, r6}], {0x4, 0x2}, [{0x8, 0x4, r7}], {0x10, 0x6}, {0x20, 0x3}}, 0x34, 0x1) recvmmsg(r3, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 03:33:48 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000020001005307a33d6c390836be381b", 0x1f) 03:33:48 executing program 0: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) socketpair$inet(0x2, 0x3, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x200000, 0x0) faccessat(r1, &(0x7f0000000280)='./file1\x00', 0x54, 0x1000) mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)="6578742dff", &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x820, &(0x7f0000000000)={[{@nolazytime='nolazytime'}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) getsockopt$inet_buf(r0, 0x0, 0xbd8d61d883346b2d, &(0x7f0000000300)=""/222, &(0x7f00000001c0)=0xde) 03:33:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x65, &(0x7f0000013e95), 0x4) setsockopt$inet6_opts(r3, 0x29, 0x3, &(0x7f0000000000)=@routing, 0x8) close(r3) close(r2) fcntl$dupfd(r0, 0x0, r0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x280, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x80000000003) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xe, 0x4, 0x4, 0x7}, 0x2c) memfd_create(&(0x7f0000000140)=')\x00', 0x3) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)=ANY=[@ANYBLOB="0024ade322744acf9bd1aa35bb6818218e5a08000000000004316d60d19a305cb2b7e22c4450a2abf495bba24bb577ba528dee229c49791a3d596e82526ce721eb8ff3fcd59d8377d8d200ec7f803fec8a2a8a754a9cd54600cd391970a29913db7c7b9d75dcf1fd2de85722f4e6ae7248e56ae831"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000280)={@loopback, 0x2c, r7}) setsockopt$inet6_int(r6, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3ac, 0x3ef, 0x5, 0x30c, 0x32b, 0x5, 0xe003, 0x33c, 0x0, 0x0, 0xf4, 0x15, 0x8]}, 0x75, r8}) 03:33:48 executing program 3 (fault-call:9 fault-nth:31): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:48 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000090001005307a33d6c390836be381b", 0x1f) 03:33:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001980)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"626f6e643000000000f98b00"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x0, 0x0, 0xff) recvfrom(0xffffffffffffffff, &(0x7f0000db5000), 0xfffffffffffffec1, 0x0, 0x0, 0x6a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000040)="0f425f69f20f38f10b650feda5000066b9800000c00f326635004000000f30b80d008ec86666de3c0f01cf260f01cb2665660f3a618c0060540fc76b39", 0x3d}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 451.843182] FAULT_INJECTION: forcing a failure. [ 451.843182] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 451.863397] EXT4-fs (sda1): re-mounted. Opts: nolazytime,,errors=continue [ 451.890103] CPU: 0 PID: 22855 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 451.898620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.907983] Call Trace: [ 451.910609] dump_stack+0x1d3/0x2c4 [ 451.914249] ? dump_stack_print_info.cold.2+0x52/0x52 [ 451.919459] should_fail.cold.4+0xa/0x17 [ 451.923528] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 451.928634] ? save_stack+0xa9/0xd0 [ 451.932262] ? save_stack+0x43/0xd0 [ 451.935890] ? kasan_kmalloc+0xc7/0xe0 [ 451.939778] ? __kmalloc+0x14e/0x760 [ 451.943491] ? sock_kmalloc+0x15a/0x1f0 [ 451.947471] ? af_alg_sendmsg+0xa1b/0x1260 [ 451.951709] ? aead_sendmsg+0x103/0x150 [ 451.955693] ? sock_sendmsg+0xd5/0x120 [ 451.959581] ? sock_write_iter+0x35e/0x5c0 [ 451.963815] ? __vfs_write+0x6b8/0x9f0 [ 451.967705] ? vfs_write+0x1fc/0x560 [ 451.971425] ? ksys_write+0x101/0x260 [ 451.975229] ? do_syscall_64+0x1b9/0x820 [ 451.979298] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.984676] ? fs_reclaim_acquire+0x20/0x20 [ 451.989003] ? lock_downgrade+0x900/0x900 [ 451.993157] ? lock_release+0x970/0x970 [ 451.997144] ? check_same_owner+0x330/0x330 [ 452.001480] ? trace_hardirqs_on+0xbd/0x310 [ 452.005805] ? sock_kmalloc+0x15a/0x1f0 [ 452.009790] ? __might_sleep+0x95/0x190 [ 452.013791] __alloc_pages_nodemask+0x34b/0xdd0 [ 452.018463] ? lock_downgrade+0x900/0x900 [ 452.022614] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 452.027631] ? check_same_owner+0x330/0x330 [ 452.031958] ? sock_kmalloc+0x18a/0x1f0 [ 452.035937] ? iov_iter_npages+0xdd0/0xdd0 [ 452.040192] ? _copy_from_iter_full+0x2b8/0xc20 [ 452.044866] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 452.050840] ? af_alg_register_type+0x3f0/0x3f0 [ 452.055512] ? check_preemption_disabled+0x48/0x200 [ 452.060530] ? lock_sock_nested+0x9a/0x120 [ 452.064776] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 452.070323] alloc_pages_current+0x10c/0x210 [ 452.074744] af_alg_sendmsg+0xb08/0x1260 [ 452.078832] ? af_alg_pull_tsgl+0xd70/0xd70 [ 452.083160] aead_sendmsg+0x103/0x150 [ 452.086973] ? crypto_aead_copy_sgl+0x350/0x350 [ 452.091645] sock_sendmsg+0xd5/0x120 [ 452.095367] sock_write_iter+0x35e/0x5c0 [ 452.099430] ? sock_sendmsg+0x120/0x120 [ 452.103414] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 452.108954] ? iov_iter_init+0xc2/0x1e0 [ 452.112932] __vfs_write+0x6b8/0x9f0 [ 452.116649] ? kernel_read+0x120/0x120 [ 452.120545] ? apparmor_path_rmdir+0x30/0x30 [ 452.124959] ? lock_release+0x970/0x970 [ 452.128943] ? check_preemption_disabled+0x48/0x200 [ 452.133972] ? apparmor_file_permission+0x24/0x30 [ 452.138822] ? rw_verify_area+0x118/0x360 [ 452.142975] vfs_write+0x1fc/0x560 [ 452.146521] ksys_write+0x101/0x260 [ 452.150151] ? __ia32_sys_read+0xb0/0xb0 [ 452.154228] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 452.159682] __x64_sys_write+0x73/0xb0 [ 452.163577] do_syscall_64+0x1b9/0x820 [ 452.167483] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 452.172852] ? syscall_return_slowpath+0x5e0/0x5e0 [ 452.177788] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.182637] ? trace_hardirqs_on_caller+0x310/0x310 [ 452.187658] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 452.192682] ? prepare_exit_to_usermode+0x291/0x3b0 [ 452.197710] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.202589] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.207783] RIP: 0033:0x457579 [ 452.210978] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 452.229875] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 452.237589] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 03:33:49 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200080000000001005307a33d6c390836be381b", 0x1f) [ 452.244859] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 452.252127] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 452.259392] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 452.266662] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:49 executing program 3 (fault-call:9 fault-nth:32): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:49 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000a0000000001005307a33d6c390836be381b", 0x1f) 03:33:49 executing program 0: fstat(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() getgroups(0x3, &(0x7f00000002c0)=[r0, r1, r2]) r3 = socket$inet(0xa, 0x801, 0x84) r4 = dup(r3) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000080)={0x4, 0x6, 0x19d06602, @local, 'irlan0\x00'}) fcntl$getflags(r3, 0x40a) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfc0004) r5 = accept4(r3, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) getpeername$netlink(r5, &(0x7f00000000c0), &(0x7f0000000100)=0xc) [ 452.404042] FAULT_INJECTION: forcing a failure. [ 452.404042] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 452.460399] CPU: 0 PID: 22881 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 452.468922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.478290] Call Trace: [ 452.480901] dump_stack+0x1d3/0x2c4 [ 452.484556] ? dump_stack_print_info.cold.2+0x52/0x52 [ 452.489798] should_fail.cold.4+0xa/0x17 [ 452.493893] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 452.499019] ? save_stack+0xa9/0xd0 [ 452.502660] ? save_stack+0x43/0xd0 [ 452.506298] ? kasan_kmalloc+0xc7/0xe0 [ 452.510195] ? __kmalloc+0x14e/0x760 [ 452.513919] ? sock_kmalloc+0x15a/0x1f0 [ 452.517904] ? af_alg_sendmsg+0xa1b/0x1260 [ 452.522152] ? aead_sendmsg+0x103/0x150 [ 452.526136] ? sock_sendmsg+0xd5/0x120 [ 452.530045] ? sock_write_iter+0x35e/0x5c0 [ 452.534292] ? __vfs_write+0x6b8/0x9f0 [ 452.534307] ? vfs_write+0x1fc/0x560 [ 452.534321] ? ksys_write+0x101/0x260 [ 452.534343] ? do_syscall_64+0x1b9/0x820 [ 452.541938] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.541970] ? fs_reclaim_acquire+0x20/0x20 [ 452.541993] ? lock_downgrade+0x900/0x900 [ 452.549842] ? lock_release+0x970/0x970 [ 452.549866] ? check_same_owner+0x330/0x330 [ 452.563684] ? trace_hardirqs_on+0xbd/0x310 [ 452.563701] ? lock_downgrade+0x900/0x900 [ 452.563721] ? sock_kmalloc+0x15a/0x1f0 [ 452.576850] ? __might_sleep+0x95/0x190 [ 452.576870] __alloc_pages_nodemask+0x34b/0xdd0 [ 452.576888] ? lock_downgrade+0x900/0x900 [ 452.576917] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 452.576937] ? check_same_owner+0x330/0x330 [ 452.589025] ? sock_kmalloc+0x18a/0x1f0 03:33:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x5c9, 0x0, 0x0, 0x7, 0x5, 0x8, 0xfffffffffffffff8}, &(0x7f0000000140)=0x20) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000001fc1)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) write(r2, &(0x7f0000002000)='/', 0x1) openat$cgroup_ro(r2, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x7f) sendfile(r2, r2, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000180)={0x7fffffff, 0xff, 0xfffffffffffffffa}, 0xc) quotactl(0x2080000201, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)) 03:33:49 executing program 2: r0 = socket$inet(0x15, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000003, 0x100000003) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="c9f36a8edcc98e6561e34c1889387b789fb4709b7c215b2ad7c5888e80701789483d7e32c707e492ca3296de61c15cc897a5fa80b3edf4ef833ed1e4e98f1f6cc69e42974fe027c569b1379669378ea8d16cdc10d3a252d87a2a44f46a8fec7b94d2271de510396a28f32eea27c8b5872e52a4a79db936aa2221fff64453cd7dd068cb2d9c61ab391ac0ba151a251b5d18ca1cb6b7ef3027da0af4e9cbcbab4ce099eb98499299b5ab37ef2986234d748551c09bb09f5628d2671dea6ebd6a2e1979a745f8009fc81319ff391f84", 0xce}], 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0xa3) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) [ 452.589047] ? iov_iter_npages+0xdd0/0xdd0 [ 452.589072] ? _copy_from_iter_full+0x2b8/0xc20 [ 452.597879] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 452.597898] ? af_alg_register_type+0x3f0/0x3f0 [ 452.597915] ? check_preemption_disabled+0x48/0x200 [ 452.597930] ? lock_sock_nested+0x9a/0x120 [ 452.597948] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 452.597968] alloc_pages_current+0x10c/0x210 [ 452.597986] af_alg_sendmsg+0xb08/0x1260 [ 452.598010] ? af_alg_pull_tsgl+0xd70/0xd70 [ 452.640064] aead_sendmsg+0x103/0x150 [ 452.640081] ? crypto_aead_copy_sgl+0x350/0x350 [ 452.640103] sock_sendmsg+0xd5/0x120 [ 452.650049] sock_write_iter+0x35e/0x5c0 [ 452.650074] ? sock_sendmsg+0x120/0x120 [ 452.678612] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 452.684152] ? iov_iter_init+0xc2/0x1e0 [ 452.688131] __vfs_write+0x6b8/0x9f0 [ 452.691850] ? kernel_read+0x120/0x120 [ 452.695741] ? apparmor_path_rmdir+0x30/0x30 [ 452.700158] ? lock_release+0x970/0x970 [ 452.704148] ? check_preemption_disabled+0x48/0x200 [ 452.709186] ? apparmor_file_permission+0x24/0x30 [ 452.714043] ? rw_verify_area+0x118/0x360 [ 452.718200] vfs_write+0x1fc/0x560 [ 452.721744] ksys_write+0x101/0x260 [ 452.725382] ? __ia32_sys_read+0xb0/0xb0 [ 452.729455] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 452.734911] __x64_sys_write+0x73/0xb0 [ 452.738807] do_syscall_64+0x1b9/0x820 [ 452.742699] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 452.748069] ? syscall_return_slowpath+0x5e0/0x5e0 [ 452.752998] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.757845] ? trace_hardirqs_on_caller+0x310/0x310 [ 452.762870] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 452.767889] ? prepare_exit_to_usermode+0x291/0x3b0 [ 452.772913] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.777796] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.782990] RIP: 0033:0x457579 [ 452.786185] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:33:49 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000500000001005307a33d6c390836be381b", 0x1f) [ 452.805094] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 452.812805] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 452.820077] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 452.827342] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 452.834609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 452.841889] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:49 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000980), 0xe67e) clock_gettime(0x0, &(0x7f0000000240)) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f0000000200)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), 0xc) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$void(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x7c, 0x42, &(0x7f0000000b40)="0af603cb8525fb9303613a0d271f65769fa01d0b82dacacdcfa96e1cf0f1419fb5eb697173fa57d609d85e38c9da210ff94b22b3b992d9245388616f6ec8fbcc39ff1913592efe1ec39ec7ec2336c859b70114afbaf486908a55d054b078d44a84861c66d5b7c2bc9aac047be8e814b7ce4050d516326c0c0ca1d7f3", &(0x7f0000000400)=""/66, 0x3ff}, 0x28) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000900)={{0xffffffffffffffff, 0x80000000000003, 0xc3d, 0x2, 0x1000}, 0x3f, 0x5}) readahead(r1, 0x2, 0xc6) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f00000006c0)="ffdc4ebdc3b3d6562e40a6ca377ab6e89d8517066a2beed6019433f5e7e2f791725d033e4cc934d362a5c1b174ba889a0504460fb9029e7c70984e21233a58c77c9ff60c5042a149a3f1ee811fb351211f6862", 0x53, 0x1000, &(0x7f0000000800)={r2, r3+30000000}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000840)=""/147) ppoll(&(0x7f0000000540)=[{r1, 0x20}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x3180}, {}, {0xffffffffffffffff, 0x8}, {r0, 0x40}, {r0, 0x4}, {r1, 0x8000}], 0x8, &(0x7f00000005c0), &(0x7f0000000600)={0xdf}, 0x8) close(r0) r4 = memfd_create(&(0x7f00000009c0)='cgroup.type\x00', 0x3) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000040)) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x101, 0x783000) 03:33:49 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000000ec00001005307a33d6c390836be381b", 0x1f) 03:33:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8dc, 0x20}, 0x4b93a7e1ffbd2be8) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='nr0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000001d000000000000000000008061181c00000000000000deffffffffff9400000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 03:33:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 03:33:49 executing program 4: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) sched_getaffinity(r1, 0xfffffffffffffedb, &(0x7f0000000000)) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x9, 0x20000) socketpair(0xa, 0x80000, 0xfffffffffffffffc, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f00000001c0)={'rose0\x00', 0x1}) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, r0+10000000}, &(0x7f00000000c0)) r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x105000, 0x40) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)=0x6) 03:33:49 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000300000001005307a33d6c390836be381b", 0x1f) 03:33:49 executing program 3 (fault-call:9 fault-nth:33): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:49 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) clone(0x0, &(0x7f0000000300), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000012c0)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x2d}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x25}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x11}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5c}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x3b969a21b4be862e}, 0x10) pread64(r0, &(0x7f0000000040)=""/12, 0xfffb, 0x0) 03:33:49 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x2, 0x6ac052065dbc0e75, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000e004500a, &(0x7f0000000000)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0xfffffffffffffd9c}], 0x1) 03:33:49 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200060000000001005307a33d6c390836be381b", 0x1f) 03:33:49 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x4, 0x0, 0x6]}}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x0, 0x0, 0x4, 0x3}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0), 0x4) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0xfffffffffffffffe, 0x80000000, &(0x7f0000000000)="d7485618c281b738c7b7e91b1cfdf581c12c09", 0x9, 0x93, 0x2, 0x4, 0x3, 0x8001, 0x2, "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"}) socket$inet6_udplite(0xa, 0x2, 0x88) 03:33:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000440)="2f65786500000000000409004bddd9de91be10ee9ed554fa07424adee9cbc699ec2ca576e50000bcd7a071fb35331ce39c5ad0cf73770bd4246847a1914e4fb0aa9b15eaa94bcd0e700ed63b44338e84ad4ec2f11f6f2adb8dc2fdb18231446f43142ebe700b2231e8fceed6b22a373c9409675ac8d0b53033123fb3037d66241aafe0f880e7a51d1b036ade31d2544d2581fe8653d0cff54369df8c2fce21dcb1cb965669f9a75345ac3479cd51dc7de364c9c272c83ed9e666ca25aad2e7a26e3d6c62d0f8b9065cfca311c06d0744db265aa0e486707c51fd108c0c6ccae6ff42274af94d30fce8836ff9d00bdd") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x400000) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100), 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x1d, 0x1) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x0) 03:33:50 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200fffffff00001005307a33d6c390836be381b", 0x1f) 03:33:50 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x8) r1 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x1, @loopback}, 0x1c) [ 453.270045] FAULT_INJECTION: forcing a failure. [ 453.270045] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 453.326090] CPU: 0 PID: 22947 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 453.334617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.343970] Call Trace: [ 453.346569] dump_stack+0x1d3/0x2c4 [ 453.350209] ? dump_stack_print_info.cold.2+0x52/0x52 [ 453.355412] should_fail.cold.4+0xa/0x17 [ 453.359483] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 453.364591] ? save_stack+0xa9/0xd0 [ 453.368224] ? save_stack+0x43/0xd0 [ 453.371853] ? kasan_kmalloc+0xc7/0xe0 [ 453.375738] ? __kmalloc+0x14e/0x760 [ 453.379458] ? sock_kmalloc+0x15a/0x1f0 [ 453.383436] ? af_alg_sendmsg+0xa1b/0x1260 [ 453.387671] ? aead_sendmsg+0x103/0x150 [ 453.391648] ? sock_sendmsg+0xd5/0x120 [ 453.395535] ? sock_write_iter+0x35e/0x5c0 [ 453.399774] ? __vfs_write+0x6b8/0x9f0 [ 453.403659] ? vfs_write+0x1fc/0x560 [ 453.407388] ? ksys_write+0x101/0x260 [ 453.411192] ? do_syscall_64+0x1b9/0x820 [ 453.415269] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 453.420641] ? cache_grow_end+0xa8/0x190 [ 453.424710] ? fs_reclaim_acquire+0x20/0x20 [ 453.429043] ? lock_downgrade+0x900/0x900 [ 453.433198] ? lock_release+0x970/0x970 [ 453.437175] ? check_same_owner+0x330/0x330 [ 453.441500] ? trace_hardirqs_on+0xbd/0x310 [ 453.445823] ? kasan_check_write+0x14/0x20 [ 453.450060] ? sock_kmalloc+0x15a/0x1f0 [ 453.454063] ? __might_sleep+0x95/0x190 [ 453.458043] __alloc_pages_nodemask+0x34b/0xdd0 [ 453.463220] ? lock_downgrade+0x900/0x900 [ 453.467373] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 453.472393] ? check_same_owner+0x330/0x330 [ 453.476720] ? sock_kmalloc+0x18a/0x1f0 [ 453.480714] ? iov_iter_npages+0xdd0/0xdd0 [ 453.484973] ? _copy_from_iter_full+0x2b8/0xc20 [ 453.489653] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 453.495625] ? af_alg_register_type+0x3f0/0x3f0 [ 453.500299] ? check_preemption_disabled+0x48/0x200 [ 453.505318] ? lock_sock_nested+0x9a/0x120 [ 453.509558] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 453.515104] alloc_pages_current+0x10c/0x210 [ 453.519534] af_alg_sendmsg+0xb08/0x1260 [ 453.523610] ? af_alg_pull_tsgl+0xd70/0xd70 [ 453.527940] aead_sendmsg+0x103/0x150 [ 453.531763] ? crypto_aead_copy_sgl+0x350/0x350 [ 453.536437] sock_sendmsg+0xd5/0x120 [ 453.540181] sock_write_iter+0x35e/0x5c0 [ 453.544250] ? sock_sendmsg+0x120/0x120 [ 453.548238] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 453.553782] ? iov_iter_init+0xc2/0x1e0 [ 453.557773] __vfs_write+0x6b8/0x9f0 [ 453.561492] ? kernel_read+0x120/0x120 [ 453.565386] ? apparmor_path_rmdir+0x30/0x30 [ 453.569824] ? lock_release+0x970/0x970 [ 453.573808] ? check_preemption_disabled+0x48/0x200 [ 453.578836] ? apparmor_file_permission+0x24/0x30 [ 453.583687] ? rw_verify_area+0x118/0x360 [ 453.587842] vfs_write+0x1fc/0x560 [ 453.591394] ksys_write+0x101/0x260 [ 453.595020] ? __ia32_sys_read+0xb0/0xb0 [ 453.599088] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 453.604558] __x64_sys_write+0x73/0xb0 [ 453.608462] do_syscall_64+0x1b9/0x820 [ 453.612349] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 453.617715] ? syscall_return_slowpath+0x5e0/0x5e0 [ 453.622644] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 453.627489] ? trace_hardirqs_on_caller+0x310/0x310 [ 453.632505] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 453.637538] ? prepare_exit_to_usermode+0x291/0x3b0 [ 453.642577] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 453.647434] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 453.652623] RIP: 0033:0x457579 [ 453.655834] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:33:50 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x40000, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_KICK(r0, 0x330f, &(0x7f0000000000)) [ 453.674733] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 453.682448] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 453.689724] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 453.697009] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 453.704274] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 453.711539] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:50 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80001, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000040)) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000180)={0x1, 0x5}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x9) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) symlinkat(&(0x7f0000000280)='./file0\x00', r0, &(0x7f00000002c0)='./file0\x00') fremovexattr(r0, &(0x7f0000000300)=@known='system.sockprotoname\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x1ff) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000380)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'L+', 0x1a}, 0x28, 0x1) init_module(&(0x7f0000000400)="28656d3073656c696e75787b62646576766d6e65743021757365727d0424776c616e305d2376626f786e65743100", 0x2e, &(0x7f0000000440)='trusted.overlay.nlink\x00') ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000480)={{0x1, 0x3, 0x0, 0x4, 0x9, 0x401}, 0x1bf, 0xf1e, 0x7, 0x7, 0xb60, "acaf6928b4ae656e555341e3796a762040376bac2054fc8bf45163de79916eda11304a149b4d2aa39973831c7f2e0e585b87eac40ca04e63acba8b144e49f94bf4bc4846b4b1e23c8dcf1e6d7300b5ad994612b31d77b42daaad101089a37ca09b01653a87c1f97e7a6f67bdff39bbf6eb2a5a26b2cf805398938c40c4bcc51e"}) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000540)=""/226) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000640)=""/80, &(0x7f00000006c0)=0x50) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000740)=""/113, &(0x7f00000007c0)=0x71) syz_mount_image$minix(&(0x7f0000000800)='minix\x00', &(0x7f0000000840)='./file0\x00', 0xfa7, 0x8, &(0x7f0000000c40)=[{&(0x7f0000000880)="42b365460f5648e594534d0210f7e1d58ad6c38a98e6af029f923f5aa171aa6cba5df2209af34e9b00087c239a75c35a46f9feb679bedcb36bb1f22f8187244b423a63b1fd9524981c963047aa19dd75734511b3126b6d4afcf85457080f9249fe72c91538754afd67fd26b517515b911dba5afa1f6a6e55106341d45dbee5fd58fdc9795ff1d73bb2", 0x89, 0x7}, {&(0x7f0000000940)="fdd2ac9ffccfb2c6d95a81631f290ca1ae937ed04ac6f2ffb00c6c6db5f5e82200310ace86352de164d10148443c6ebce8a44b4e7da7b5aef8cc8fa27543aad5c2b03a5d9e15166367a9704a7ffdae6d2c31500b903341daa2bbb0913d34651cfcb2f953de9d612dee6732262bb868c09d02cef9e2a54342299aac5e025de04474f8e6974622", 0x86, 0x3}, {&(0x7f0000000a00)="b17b249e00aa9dfc68ebd5d910ee1ed9b8df24f6142444ceb5562341cfd50e536b9f27d3842b7ab46057dc972559d4970a1bb578f91267b8b3a5356e989ed523c901ce482601c1fea6ae8fdefcd098a75c49f52d697b16dfe98a959386c1633f", 0x60, 0xffffffffffffff91}, {&(0x7f0000000a80)="7dc070f91801bb", 0x7, 0x9}, {&(0x7f0000000ac0), 0x0, 0x4}, {&(0x7f0000000b00)="6fc9c78a9c4ee28edf6f1fbb160630cc47deba061ce9d2122e405c75d04da3d962163d1f8b265c3165afbe503fe33292", 0x30}, {&(0x7f0000000b40)="27e4bc5027168c39504b24255cf4e9b264605db29d2c92c5b1604f69bf1f29fda6428f4f54f7a4f051ddd02a5ca763ee2604a98e02348c664029b91c7d3e60a0a47dfd1f85d7b82910afc5c791792386e6854ecc03b0cbf4087a072f164716b90e3b9472b90242d72d65f6f24bd46c44ae4bdeb22b0a892f348859dec2b5118c7f1770405def4ab6935e69de3f21be00983a89bb9aafcd049e8b", 0x9a, 0x101}, {&(0x7f0000000c00)="1e56710a51c90353208a16092d848b9d10aa5bd902eb69196670f5ec617412b86fef", 0x22, 0x100000000}], 0x10000, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000d00)=0x2, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r1, 0x50, &(0x7f0000000d40)}, 0x10) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000e00)=""/94) r2 = memfd_create(&(0x7f0000000e80)='@-self$vmnet0\x00', 0x2) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000ec0)='ip6gre0\x00') getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000f00), &(0x7f0000000f40)=0x8) syz_open_dev$sndtimer(&(0x7f0000000f80)='/dev/snd/timer\x00', 0x0, 0x100) r3 = accept$unix(r0, &(0x7f0000000fc0)=@abs, &(0x7f0000001040)=0x6e) ioctl$KDADDIO(r2, 0x4b34, 0x20) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000001080)={{0x2, 0x374, 0x7, 0x1, 0x2, 0x100000001}, 0x9, 0x3f, 0xfffffffffffffeff, 0x0, 0x0, "f64504f636a8f32a17f0462971ce719cb211d957c3f1f0d18b28d8a55b55cea9b11c9f604d2afa07574f75854387884622947efb6049293c8c4fa8ad029483825e113c3029e976bf17776558cb6050c65a731efec7782abfee45e12556433d0c37124487fc9cf2c5f7a599f76b942fffe1fc1a2c689add2c640e5d4e07fd8b08"}) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001140)=0xc2) recvmsg(r3, &(0x7f0000001700)={&(0x7f0000001180)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001200)=""/9, 0x9}, {&(0x7f0000001240)=""/221, 0xdd}, {&(0x7f0000001340)=""/156, 0x9c}, {&(0x7f0000001400)=""/191, 0xbf}, {&(0x7f00000014c0)=""/252, 0xfc}], 0x5, &(0x7f0000001640)=""/179, 0xb3, 0x1ff}, 0x10000) bind$packet(r0, &(0x7f0000001740)={0x11, 0x8, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001780)={&(0x7f0000bff000/0x400000)=nil, 0x400000}, &(0x7f00000017c0)=0x10) 03:33:50 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000340000001005307a33d6c390836be381b", 0x1f) 03:33:50 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x802000000002) ioctl(r0, 0x8912, &(0x7f0000000040)="153f62344885d25d766070") r1 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) unshare(0x2000400) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x401870cc, &(0x7f0000000000)) [ 453.836067] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. 03:33:50 executing program 3 (fault-call:9 fault-nth:34): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:50 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000900000001005307a33d6c390836be381b", 0x1f) 03:33:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') r1 = fcntl$getown(r0, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r0, 0x0, 0x3, &(0x7f0000000000)='!%\x00', 0xffffffffffffffff}, 0x30) lseek(r0, 0x0, 0x3) 03:33:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000017, 0x3f00000000000000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0xad1}}, 0x6, 0x1, 0x0, 0x2, 0x40}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="6c000000123a31c60c5097146fb23f7882d762ddfba1bdb3b8cbd53781245e64e717959cef68711871a1b09efd956ff7b2f4b6a862a11a89aad6992dd3a665c0a179f119de569df13c5b65d72ef0635d2c6bc3d31a84d63798c9598cf0b34958d08d9ba2223cee80390485933ee82ca4"], &(0x7f0000000200)=0x74) 03:33:50 executing program 5: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x20000, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) clock_gettime(0x8, &(0x7f0000000200)) write$evdev(0xffffffffffffffff, &(0x7f0000000400), 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000540)=""/153) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000440), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000180)={0xa, 0xfffffffffffffea4}, 0xfffffffffffffe98) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x800}, 0x8) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x101, 0x8}, 0x2) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000340)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:33:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000240), 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xc0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000040)=0x5) 03:33:50 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200140600000001005307a33d6c390836be381b", 0x1f) 03:33:50 executing program 4: mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="c42139dc759fb9dd080000b8d6510000ba000000000f30f2406db805000000b9080000000f01c166baa00066edb805000000b9df0000000f01d966420f38829100000000400f073666440f388160c9c463457a40dbdb", 0x56}], 0x1, 0x0, &(0x7f0000000280), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f00000002c0)="8dcb21145c22495ff517f799ed2399d9c0e8e095288ce7447d44b8d24bc82ceac7fa0bbd58bc216658f78ae693eedffeb1f5b2d692fefe5c06012f13c0229a98c5af79000b5b02a03d889023cbd12fa2ebcc77dd53af912e12acba281a2c3b84347e643243c210c56a") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x72, 0x80) r6 = fcntl$dupfd(r0, 0x406, r1) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000080)={0x3, r6}) close(r0) 03:33:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendfile(r0, r0, &(0x7f0000000040), 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0xf0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xf0ffff, 0xff66}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0xff8e}}, 0x0) [ 454.026917] FAULT_INJECTION: forcing a failure. [ 454.026917] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 454.111014] CPU: 1 PID: 23007 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 454.119554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.128914] Call Trace: [ 454.131512] dump_stack+0x1d3/0x2c4 [ 454.135157] ? dump_stack_print_info.cold.2+0x52/0x52 [ 454.140383] should_fail.cold.4+0xa/0x17 [ 454.144469] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 454.149586] ? save_stack+0xa9/0xd0 [ 454.153222] ? save_stack+0x43/0xd0 [ 454.156878] ? kasan_kmalloc+0xc7/0xe0 [ 454.160770] ? __kmalloc+0x14e/0x760 [ 454.164494] ? sock_kmalloc+0x15a/0x1f0 [ 454.168477] ? af_alg_sendmsg+0xa1b/0x1260 [ 454.172718] ? aead_sendmsg+0x103/0x150 [ 454.176695] ? sock_sendmsg+0xd5/0x120 [ 454.176710] ? sock_write_iter+0x35e/0x5c0 [ 454.176724] ? __vfs_write+0x6b8/0x9f0 [ 454.176752] ? vfs_write+0x1fc/0x560 [ 454.192454] ? ksys_write+0x101/0x260 [ 454.196268] ? do_syscall_64+0x1b9/0x820 [ 454.200346] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.205730] ? cache_grow_end+0xa8/0x190 [ 454.209817] ? fs_reclaim_acquire+0x20/0x20 [ 454.214161] ? lock_downgrade+0x900/0x900 [ 454.218310] ? lock_release+0x970/0x970 [ 454.222289] ? check_same_owner+0x330/0x330 [ 454.226615] ? trace_hardirqs_on+0xbd/0x310 [ 454.230950] ? kasan_check_write+0x14/0x20 [ 454.235187] ? sock_kmalloc+0x15a/0x1f0 [ 454.239165] ? __might_sleep+0x95/0x190 [ 454.243143] __alloc_pages_nodemask+0x34b/0xdd0 [ 454.247816] ? lock_downgrade+0x900/0x900 [ 454.251968] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 454.256982] ? check_same_owner+0x330/0x330 [ 454.261309] ? sock_kmalloc+0x18a/0x1f0 [ 454.265293] ? iov_iter_npages+0xdd0/0xdd0 [ 454.269540] ? _copy_from_iter_full+0x2b8/0xc20 [ 454.274229] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 454.280236] ? af_alg_register_type+0x3f0/0x3f0 [ 454.284914] ? check_preemption_disabled+0x48/0x200 [ 454.289930] ? lock_sock_nested+0x9a/0x120 [ 454.294170] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 454.299711] alloc_pages_current+0x10c/0x210 [ 454.304126] af_alg_sendmsg+0xb08/0x1260 [ 454.308200] ? af_alg_pull_tsgl+0xd70/0xd70 [ 454.312528] aead_sendmsg+0x103/0x150 [ 454.316334] ? crypto_aead_copy_sgl+0x350/0x350 [ 454.321010] sock_sendmsg+0xd5/0x120 [ 454.324727] sock_write_iter+0x35e/0x5c0 [ 454.328793] ? sock_sendmsg+0x120/0x120 [ 454.332783] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 454.338321] ? iov_iter_init+0xc2/0x1e0 [ 454.342296] __vfs_write+0x6b8/0x9f0 [ 454.346012] ? kernel_read+0x120/0x120 [ 454.349902] ? apparmor_path_rmdir+0x30/0x30 [ 454.354337] ? lock_release+0x970/0x970 [ 454.358317] ? check_preemption_disabled+0x48/0x200 [ 454.363364] ? apparmor_file_permission+0x24/0x30 [ 454.368209] ? rw_verify_area+0x118/0x360 [ 454.372364] vfs_write+0x1fc/0x560 [ 454.375909] ksys_write+0x101/0x260 [ 454.379538] ? __ia32_sys_read+0xb0/0xb0 [ 454.383608] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 454.389065] __x64_sys_write+0x73/0xb0 [ 454.392980] do_syscall_64+0x1b9/0x820 [ 454.396878] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 454.402247] ? syscall_return_slowpath+0x5e0/0x5e0 [ 454.407197] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 454.412050] ? trace_hardirqs_on_caller+0x310/0x310 [ 454.417074] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 454.422112] ? prepare_exit_to_usermode+0x291/0x3b0 [ 454.427134] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 454.431986] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.437173] RIP: 0033:0x457579 [ 454.440378] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:33:50 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000040001005307a33d6c390836be381b", 0x1f) [ 454.459280] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 454.466994] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 454.474264] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 454.481530] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 454.488804] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 454.496072] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:51 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x3, &(0x7f0000000180), 0x4) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x8080) dup3(r0, r1, 0x80000) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000d29000/0x1000)=nil, 0x8001, 0x3, 0x0, &(0x7f0000085000/0x2000)=nil, 0xec6}) 03:33:51 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000000501005307a33d6c390836be381b", 0x1f) 03:33:51 executing program 3 (fault-call:9 fault-nth:35): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000280), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0xd19, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x2}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0xffe8}}, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000003000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) 03:33:51 executing program 2: r0 = socket(0x20004000000015, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x2712, &(0x7f0000001000)=""/1, &(0x7f0000000000)=0xf000) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:33:51 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000009000001005307a33d6c390836be381b", 0x1f) 03:33:51 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f00000000c0)='security}\x00'}, 0x30) ptrace$setopts(0x4206, r1, 0x100000001, 0x24) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x3, 0x0) ptrace(0x4207, r3) r4 = memfd_create(&(0x7f0000000040)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r2, &(0x7f0000000140)='B', 0xfffffffffffffed9) write$binfmt_aout(r4, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYRES32=0x0], @ANYRESHEX=r1, @ANYRES16=r4, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRESOCT=r3], @ANYRESHEX=r2]], 0xffffffffffffffd3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000180)={&(0x7f0000004100)=""/4096, 0x1000}) 03:33:51 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0xfffffffffffffffd, 0x401, 0x0, 0x8, 0x6, 0x0, 0x7, 0x9, 0x300000000, 0x11b}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000000)={'bpq0\x00', {0x2, 0x0, @multicast2}}) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', r1}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x0) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="722b2701ab4feb0000"], 0x1) r5 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x3) close(r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x0) unlink(&(0x7f00000002c0)='./file0\x00') r6 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000000) r7 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x7fff, 0x200000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000380)=0x1b, 0x4) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup3(r0, r6, 0x80000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000400)={0x0, 0x0, 0x40}, &(0x7f0000000440)=0x14) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000480)={0x1, {{0xa, 0x4e20, 0x7, @empty, 0x4}}, {{0xa, 0x4e24, 0x1, @remote, 0x800}}}, 0x108) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'team0\x00', @dev={[], 0x19}}) [ 454.706969] netlink: 'syz-executor4': attribute type 21 has an invalid length. [ 454.736726] netlink: 'syz-executor4': attribute type 21 has an invalid length. 03:33:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r3 = getpid() clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(r3, 0x5, &(0x7f0000000200)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0), &(0x7f0000000540)=0x4) renameat2(r2, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000140)) recvfrom$packet(r2, &(0x7f0000000440)=""/91, 0x5b, 0x10062, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x7fff, 0x6, @link_local}, 0x14) accept4(r0, &(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x80, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000040)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000005c0)={0x5, &(0x7f0000000580)=[{0xfffffffeffffffff, 0x7ff, 0x5, 0x6}, {0x9, 0x8b7, 0x20, 0x80000001}, {0x9eb, 0x1dc, 0x81, 0x8}, {0x101, 0x400, 0x80}, {0xfffffffffffffff9, 0x0, 0x2, 0x9}]}) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000600)={0x0, 0x0, {0x0, 0x2, 0x15, 0x15, 0x7, 0x0, 0x5, 0xe3, 0xffffffffffffffff}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04000000000000000563044000000000"], 0xb8, 0x0, &(0x7f0000000280)="bb2db273d9af275a914a2b75ed59cc9b6e0b4acbe661d40276f290ad49f9997764b1070f32647aa7de548cf927f08c14142b19cbe6c7df3c1ae122150a6c2a287a3c3205b0fd6b90dfbb211499d413903a1987a0d51dd5dea71177dad54efdb6071b01bd9b73efb73ca07e70a6976b3a08a8b23b35a507efcfcb99f4729b9c8f4462f15a3fe5fb08a08cc9a6b9333b9f0a9b939e2f610bb8c5c3734dca902db963af4e239309c75060b5da99c43f8ebfab26fcebf3e6ffb5"}) sendfile(r1, r2, &(0x7f0000000180), 0x100000001) [ 454.753308] FAULT_INJECTION: forcing a failure. [ 454.753308] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 454.788430] CPU: 1 PID: 23053 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 454.796953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.806309] Call Trace: [ 454.806350] dump_stack+0x1d3/0x2c4 [ 454.806376] ? dump_stack_print_info.cold.2+0x52/0x52 [ 454.817804] should_fail.cold.4+0xa/0x17 [ 454.821881] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 454.827000] ? save_stack+0xa9/0xd0 [ 454.830639] ? save_stack+0x43/0xd0 [ 454.834284] ? kasan_kmalloc+0xc7/0xe0 [ 454.838186] ? __kmalloc+0x14e/0x760 [ 454.841914] ? sock_kmalloc+0x15a/0x1f0 [ 454.845903] ? af_alg_sendmsg+0xa1b/0x1260 [ 454.845918] ? aead_sendmsg+0x103/0x150 [ 454.845934] ? sock_sendmsg+0xd5/0x120 [ 454.845955] ? sock_write_iter+0x35e/0x5c0 [ 454.862267] ? __vfs_write+0x6b8/0x9f0 [ 454.862286] ? vfs_write+0x1fc/0x560 [ 454.869883] ? ksys_write+0x101/0x260 [ 454.873695] ? do_syscall_64+0x1b9/0x820 [ 454.877786] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.883177] ? fs_reclaim_acquire+0x20/0x20 [ 454.887517] ? lock_downgrade+0x900/0x900 [ 454.891684] ? lock_release+0x970/0x970 [ 454.891702] ? check_same_owner+0x330/0x330 [ 454.891727] ? trace_hardirqs_on+0xbd/0x310 [ 454.904349] ? sock_kmalloc+0x15a/0x1f0 [ 454.908340] ? __might_sleep+0x95/0x190 [ 454.912340] __alloc_pages_nodemask+0x34b/0xdd0 [ 454.917030] ? lock_downgrade+0x900/0x900 [ 454.921196] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 454.921212] ? check_same_owner+0x330/0x330 [ 454.921236] ? sock_kmalloc+0x18a/0x1f0 [ 454.934555] ? iov_iter_npages+0xdd0/0xdd0 [ 454.938818] ? _copy_from_iter_full+0x2b8/0xc20 [ 454.943508] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 454.949495] ? af_alg_register_type+0x3f0/0x3f0 [ 454.954188] ? check_preemption_disabled+0x48/0x200 [ 454.959218] ? lock_sock_nested+0x9a/0x120 [ 454.963479] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 454.969034] alloc_pages_current+0x10c/0x210 [ 454.973458] af_alg_sendmsg+0xb08/0x1260 [ 454.977540] ? af_alg_pull_tsgl+0xd70/0xd70 [ 454.981883] aead_sendmsg+0x103/0x150 [ 454.985698] ? crypto_aead_copy_sgl+0x350/0x350 [ 454.990379] sock_sendmsg+0xd5/0x120 [ 454.990399] sock_write_iter+0x35e/0x5c0 [ 454.990427] ? sock_sendmsg+0x120/0x120 [ 455.002167] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 455.007717] ? iov_iter_init+0xc2/0x1e0 [ 455.011709] __vfs_write+0x6b8/0x9f0 [ 455.015439] ? kernel_read+0x120/0x120 [ 455.015458] ? apparmor_path_rmdir+0x30/0x30 [ 455.015480] ? lock_release+0x970/0x970 [ 455.027734] ? check_preemption_disabled+0x48/0x200 [ 455.032774] ? apparmor_file_permission+0x24/0x30 [ 455.037633] ? rw_verify_area+0x118/0x360 [ 455.037652] vfs_write+0x1fc/0x560 [ 455.037678] ksys_write+0x101/0x260 [ 455.037698] ? __ia32_sys_read+0xb0/0xb0 [ 455.053050] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 455.058521] __x64_sys_write+0x73/0xb0 [ 455.062428] do_syscall_64+0x1b9/0x820 [ 455.066331] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 455.071712] ? syscall_return_slowpath+0x5e0/0x5e0 [ 455.071729] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 455.071750] ? trace_hardirqs_on_caller+0x310/0x310 [ 455.071778] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 455.091564] ? prepare_exit_to_usermode+0x291/0x3b0 [ 455.096602] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 455.101461] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.101474] RIP: 0033:0x457579 [ 455.101494] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 455.128750] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 455.136472] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 455.143753] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 455.151066] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 03:33:51 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000000b000001005307a33d6c390836be381b", 0x1f) 03:33:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/userio\x00', 0x2001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() capget(&(0x7f00000000c0)={0x20071026, r2}, &(0x7f0000000140)={0x2, 0x3, 0xdd, 0x4, 0x7}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002a40)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000002980)=0xe8) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0xc3) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)={'syz1'}, 0x1200e) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10000000) ptrace$poke(0x5, r2, &(0x7f0000000080), 0x80) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000680)) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x40, 0x0) 03:33:51 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000000f0ffff01005307a33d6c390836be381b", 0x1f) 03:33:51 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000000001a001005307a33d6c390836be381b", 0x1f) 03:33:51 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000a001000001005307a33d6c390836be381b", 0x1f) [ 455.158345] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 455.165622] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:52 executing program 3 (fault-call:9 fault-nth:36): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:52 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="0a5cc8070031afa8b40a08d5bd805d55438ca8ca2fb3b088626fc887ca8cdaf34f4b3dfc7281f3a8267ad879e68792") openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) epoll_create(0x1) write$FUSE_POLL(r1, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x1ff}}, 0x18) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) r3 = mq_open(&(0x7f0000000080)='bdev\x00', 0x41, 0xc4, &(0x7f00000000c0)={0x3f, 0x6, 0x94, 0xffffffff, 0x3, 0x10000, 0x1, 0x7}) mq_timedsend(r3, &(0x7f0000000000)="e1bd6cd0afde34321df09a6d21a196923c8789fbec2ea693ba8964b3fe243e2d42cdc1b9eef3721daa36ba559839d6", 0x2f, 0x6, &(0x7f0000000040)={0x1000000000, 0x989680}) mq_timedsend(r3, &(0x7f0000000100)="73b3cafec3dbd277099115feb843043bcd21914a3dd770451ca1844af1702112de1c7734850769393d14c839755a14d817df51fee3f9c0eb552a2c2ed1587ddc4541f459edf88ac4aeb604daa86338ecf4a9ac6ff010cf7c5811", 0x5a, 0x5, &(0x7f00000001c0)) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000900)=0x6) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000240)) socket$vsock_dgram(0x28, 0x2, 0x0) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB="8300000016d45041858856dc4d387b5a5208037801ce1d2edf1564df32f4d8561b6d867f3f42c418daa5f6019bdb5f08740d9671a6ce8aee41f79032b35760a6112546ce45da07121f92afae57b9dfcc7d37fcd4214c040a07b346ddeeccef6b27454e341dbaa774142d89d945a7b417ccee1943bd5ec5d80e2b2a4ff682719285fda4d53f81ddf40e35a39a6a66b2d55485c2fc6bd2303c0f2e34e18910e04b0a2e2bc418861e18081835f36e293bad37f262665169e4593367fa282e0502c05dd944770d8b1ab6da35d1bafc8abfa88f2713cac42f17bbb9e27226529e17fcb3f27bf84a51d684f52385f6d7db000000"], &(0x7f0000000180)=0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000300)={0x0, 0x7, 0x8}, 0x8) 03:33:52 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x1, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000880)={0x0, 0x0, 0x101}) sendmsg$nl_crypto(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="000100001100240025bd7000fddbdf257368613235362d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002400000020000000000000000000000800010004000000080001000900000008000100050000000800010006000000"], 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000980)) r2 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000b80)={0x0, 0x70, 0x22, 0x0, 0xc5, 0x3, 0x0, 0x2, 0x2000, 0xe, 0x5, 0x9, 0x8000, 0x6, 0x8, 0x8, 0x8, 0x8001, 0x401, 0x6, 0x101, 0xa5, 0x6, 0x3, 0x3f, 0x1, 0x80000001, 0x1, 0x0, 0x1ff, 0x6, 0x7f, 0x0, 0x20, 0x100, 0x0, 0x8000, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x10000, 0x1200000000}, 0x80, 0x7, 0xfffffffffffffffe, 0x3, 0x6ee, 0xffffffff, 0x1f}, r2, 0x5, r0, 0x3) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0xa0000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000680)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd29, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000440)={0x3, 0x3f, 0x6d, 0x9}, 0xba) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x40002, 0x0) write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[], 0x0) fcntl$notify(r3, 0x402, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') sendfile(r4, r4, &(0x7f00000000c0), 0x8080ffffff10) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f00000008c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') r6 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x40) ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f00000009c0)={[], 0x100, 0x1, 0x8, 0x0, 0x100000000, 0xd002, 0xf002, [], 0x1}) pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000300)="765bac7828191357a246981483", 0xd}], 0x1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, {0x80000001, 0x0, 0x6, 0x8000, 0x1, 0x400}}, 0x8) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x60000008}) 03:33:52 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000000000ec001005307a33d6c390836be381b", 0x1f) 03:33:52 executing program 2: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x204000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0x7, 0x2}, {0x6, 0x401}, 0x1, 0x5, 0x800}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f00000002c0)={r2}) setns(r0, 0x20000) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x1) setsockopt$inet6_tcp_int(r4, 0x6, 0x3, &(0x7f0000000040)=0x9, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, r0, 0x101, 0xd9ec, 0x8, 0x3}) [ 455.876444] FAULT_INJECTION: forcing a failure. [ 455.876444] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 455.907593] FAT-fs (loop4): Unrecognized mount option "msdos" or missing value [ 455.930038] CPU: 1 PID: 23092 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 455.938551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.947913] Call Trace: [ 455.950519] dump_stack+0x1d3/0x2c4 [ 455.954161] ? dump_stack_print_info.cold.2+0x52/0x52 [ 455.959368] should_fail.cold.4+0xa/0x17 [ 455.963439] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 455.968575] ? save_stack+0xa9/0xd0 [ 455.972227] ? save_stack+0x43/0xd0 [ 455.975866] ? kasan_kmalloc+0xc7/0xe0 [ 455.979753] ? __kmalloc+0x14e/0x760 [ 455.983469] ? sock_kmalloc+0x15a/0x1f0 [ 455.987459] ? af_alg_sendmsg+0xa1b/0x1260 [ 455.991695] ? aead_sendmsg+0x103/0x150 [ 455.995685] ? sock_sendmsg+0xd5/0x120 [ 455.999572] ? sock_write_iter+0x35e/0x5c0 [ 456.003808] ? __vfs_write+0x6b8/0x9f0 [ 456.007699] ? vfs_write+0x1fc/0x560 [ 456.011414] ? ksys_write+0x101/0x260 [ 456.015223] ? do_syscall_64+0x1b9/0x820 [ 456.019298] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.024682] ? fs_reclaim_acquire+0x20/0x20 [ 456.029009] ? lock_downgrade+0x900/0x900 [ 456.033176] ? lock_release+0x970/0x970 [ 456.037155] ? check_same_owner+0x330/0x330 [ 456.041483] ? trace_hardirqs_on+0xbd/0x310 [ 456.045805] ? lock_downgrade+0x900/0x900 [ 456.049957] ? sock_kmalloc+0x15a/0x1f0 [ 456.053937] ? __might_sleep+0x95/0x190 [ 456.057918] __alloc_pages_nodemask+0x34b/0xdd0 [ 456.062594] ? lock_downgrade+0x900/0x900 [ 456.066748] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 456.071772] ? check_same_owner+0x330/0x330 [ 456.076098] ? sock_kmalloc+0x18a/0x1f0 [ 456.080077] ? iov_iter_npages+0xdd0/0xdd0 [ 456.084336] ? _copy_from_iter_full+0x2b8/0xc20 [ 456.089024] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 456.094999] ? af_alg_register_type+0x3f0/0x3f0 [ 456.099671] ? check_preemption_disabled+0x48/0x200 [ 456.104693] ? lock_sock_nested+0x9a/0x120 [ 456.108936] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 456.114483] alloc_pages_current+0x10c/0x210 [ 456.118896] af_alg_sendmsg+0xb08/0x1260 [ 456.122970] ? af_alg_pull_tsgl+0xd70/0xd70 [ 456.127300] aead_sendmsg+0x103/0x150 [ 456.131101] ? crypto_aead_copy_sgl+0x350/0x350 [ 456.135777] sock_sendmsg+0xd5/0x120 [ 456.139495] sock_write_iter+0x35e/0x5c0 [ 456.143559] ? sock_sendmsg+0x120/0x120 [ 456.147545] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 456.153088] ? iov_iter_init+0xc2/0x1e0 [ 456.157066] __vfs_write+0x6b8/0x9f0 [ 456.160784] ? kernel_read+0x120/0x120 [ 456.164675] ? apparmor_path_rmdir+0x30/0x30 [ 456.169088] ? lock_release+0x970/0x970 [ 456.173067] ? check_preemption_disabled+0x48/0x200 [ 456.178094] ? apparmor_file_permission+0x24/0x30 [ 456.182951] ? rw_verify_area+0x118/0x360 [ 456.187105] vfs_write+0x1fc/0x560 [ 456.190653] ksys_write+0x101/0x260 [ 456.194294] ? __ia32_sys_read+0xb0/0xb0 [ 456.198366] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 456.203822] __x64_sys_write+0x73/0xb0 [ 456.207716] do_syscall_64+0x1b9/0x820 [ 456.211616] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 456.216987] ? syscall_return_slowpath+0x5e0/0x5e0 [ 456.221921] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 456.226773] ? trace_hardirqs_on_caller+0x310/0x310 [ 456.231798] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 456.236820] ? prepare_exit_to_usermode+0x291/0x3b0 [ 456.241844] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 456.246748] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.251943] RIP: 0033:0x457579 [ 456.255139] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 456.274038] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 456.281751] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 456.289021] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 456.296291] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 456.303559] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 456.310828] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 [ 456.660332] FAT-fs (loop4): Unrecognized mount option "msdos" or missing value 03:33:53 executing program 3 (fault-call:9 fault-nth:37): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:53 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000007000001005307a33d6c390836be381b", 0x1f) 03:33:53 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 03:33:53 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000050c0), &(0x7f0000005100)=0x8) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[]}}, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000340)={{0x0, @loopback, 0x4e23, 0x3, 'sh\x00', 0x8, 0x8}, {@dev, 0x4e22}}, 0x44) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8914, &(0x7f0000000080)="0a5ac80700315f85715070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x66, 0xc7bf, 0x84da, 0x401, 0x2, 0x6, 0x0, 0x120, 0x40, 0x37e, 0x6d, 0xffffffff, 0x38, 0x2, 0x8, 0x3, 0x401}, [{0x0, 0x2, 0x9d, 0x40, 0xffff, 0x71c, 0x2, 0x3ff}], "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", [[], [], [], [], []]}, 0x1578) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086610, &(0x7f0000000040)={0x7ff00, 0xfffffffefffffffe, 0x0, 0x2}) 03:33:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{}, {}, 0x0, {0x2, 0x0, @local}, 'veth0_to_team\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000006000)={{}, {0x0, @random="7eb1d5afe48f"}, 0x0, {0x2, 0x0, @remote}, 'veth0_to_team\x00'}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40000, 0x0) [ 456.786353] FAULT_INJECTION: forcing a failure. [ 456.786353] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 456.803270] CPU: 1 PID: 23120 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 456.811789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.821148] Call Trace: [ 456.823757] dump_stack+0x1d3/0x2c4 [ 456.827412] ? dump_stack_print_info.cold.2+0x52/0x52 [ 456.832630] should_fail.cold.4+0xa/0x17 [ 456.836743] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 456.841898] ? save_stack+0xa9/0xd0 [ 456.845536] ? save_stack+0x43/0xd0 [ 456.845552] ? kasan_kmalloc+0xc7/0xe0 [ 456.845571] ? __kmalloc+0x14e/0x760 [ 456.856795] ? sock_kmalloc+0x15a/0x1f0 [ 456.860789] ? af_alg_sendmsg+0xa1b/0x1260 [ 456.865039] ? aead_sendmsg+0x103/0x150 [ 456.869017] ? sock_sendmsg+0xd5/0x120 [ 456.872904] ? sock_write_iter+0x35e/0x5c0 [ 456.877140] ? __vfs_write+0x6b8/0x9f0 [ 456.881031] ? vfs_write+0x1fc/0x560 [ 456.884744] ? ksys_write+0x101/0x260 [ 456.888553] ? do_syscall_64+0x1b9/0x820 [ 456.892622] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.898002] ? fs_reclaim_acquire+0x20/0x20 [ 456.902329] ? lock_downgrade+0x900/0x900 [ 456.906483] ? lock_release+0x970/0x970 [ 456.910477] ? check_same_owner+0x330/0x330 [ 456.914817] ? trace_hardirqs_on+0xbd/0x310 [ 456.919143] ? sock_kmalloc+0x15a/0x1f0 [ 456.923126] ? __might_sleep+0x95/0x190 [ 456.927109] __alloc_pages_nodemask+0x34b/0xdd0 [ 456.931785] ? lock_downgrade+0x900/0x900 [ 456.935937] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 456.940952] ? check_same_owner+0x330/0x330 [ 456.945305] ? sock_kmalloc+0x18a/0x1f0 [ 456.949330] ? iov_iter_npages+0xdd0/0xdd0 [ 456.953580] ? _copy_from_iter_full+0x2b8/0xc20 [ 456.958284] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 456.964262] ? af_alg_register_type+0x3f0/0x3f0 [ 456.968939] ? check_preemption_disabled+0x48/0x200 [ 456.973959] ? lock_sock_nested+0x9a/0x120 [ 456.978201] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 456.983803] alloc_pages_current+0x10c/0x210 [ 456.988219] af_alg_sendmsg+0xb08/0x1260 [ 456.992321] ? af_alg_pull_tsgl+0xd70/0xd70 [ 456.996652] aead_sendmsg+0x103/0x150 [ 457.000464] ? crypto_aead_copy_sgl+0x350/0x350 [ 457.005151] sock_sendmsg+0xd5/0x120 [ 457.008871] sock_write_iter+0x35e/0x5c0 [ 457.012945] ? sock_sendmsg+0x120/0x120 [ 457.016976] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 457.022515] ? iov_iter_init+0xc2/0x1e0 [ 457.026495] __vfs_write+0x6b8/0x9f0 [ 457.030217] ? kernel_read+0x120/0x120 [ 457.034110] ? apparmor_path_rmdir+0x30/0x30 [ 457.038521] ? lock_release+0x970/0x970 [ 457.042508] ? check_preemption_disabled+0x48/0x200 [ 457.047533] ? apparmor_file_permission+0x24/0x30 [ 457.052381] ? rw_verify_area+0x118/0x360 [ 457.056536] vfs_write+0x1fc/0x560 [ 457.060079] ksys_write+0x101/0x260 [ 457.063714] ? __ia32_sys_read+0xb0/0xb0 [ 457.067785] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 457.073245] __x64_sys_write+0x73/0xb0 [ 457.077244] do_syscall_64+0x1b9/0x820 [ 457.081144] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 457.086511] ? syscall_return_slowpath+0x5e0/0x5e0 [ 457.091440] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 457.096291] ? trace_hardirqs_on_caller+0x310/0x310 [ 457.101315] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 457.106339] ? prepare_exit_to_usermode+0x291/0x3b0 [ 457.111376] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 457.116227] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.121423] RIP: 0033:0x457579 03:33:53 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000700000001005307a33d6c390836be381b", 0x1f) 03:33:53 executing program 5: bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) sendmsg$alg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002ac0)}], 0x1, &(0x7f0000000680)}, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'ovf\x00'}, 0x2c) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f00000003c0)=&(0x7f00000002c0)) write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, "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", 0x1000}, 0x1006) fcntl$setstatus(r1, 0x4, 0x4000) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) recvmmsg(0xffffffffffffffff, &(0x7f0000005580), 0x0, 0x0, 0x0) [ 457.124619] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 457.143518] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 457.151227] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 457.158496] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 457.165765] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 457.173035] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 457.180303] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{}, {}, 0x0, {0x2, 0x0, @local}, 'veth0_to_team\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000006000)={{}, {0x0, @random="7eb1d5afe48f"}, 0x0, {0x2, 0x0, @remote}, 'veth0_to_team\x00'}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40000, 0x0) 03:33:54 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000400000001005307a33d6c390836be381b", 0x1f) [ 457.258382] EXT4-fs warning (device sda1): ext4_resize_fs:1917: can't read last block, resize aborted 03:33:54 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x80440) getsockopt$inet6_tcp_buf(r0, 0x6, 0x16, &(0x7f00000000c0)=""/206, &(0x7f0000000000)=0xce) 03:33:54 executing program 3 (fault-call:9 fault-nth:38): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) [ 457.393530] FAULT_INJECTION: forcing a failure. [ 457.393530] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 457.394150] EXT4-fs warning (device sda1): ext4_resize_fs:1917: can't read last block, resize aborted 03:33:54 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x6, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)="10000000f0ffffffff00000000855da0", 0x10}]) 03:33:54 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000fffffff001005307a33d6c390836be381b", 0x1f) [ 457.481070] CPU: 1 PID: 23155 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 457.489638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.498998] Call Trace: [ 457.501612] dump_stack+0x1d3/0x2c4 [ 457.505287] ? dump_stack_print_info.cold.2+0x52/0x52 [ 457.510498] should_fail.cold.4+0xa/0x17 [ 457.514568] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 457.519673] ? save_stack+0xa9/0xd0 [ 457.523326] ? save_stack+0x43/0xd0 [ 457.526964] ? kasan_kmalloc+0xc7/0xe0 03:33:54 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = dup2(r0, r1) read(r2, &(0x7f00004b8fab)=""/85, 0x15) [ 457.530864] ? __kmalloc+0x14e/0x760 [ 457.534579] ? sock_kmalloc+0x15a/0x1f0 [ 457.538541] ? af_alg_sendmsg+0xa1b/0x1260 [ 457.542759] ? aead_sendmsg+0x103/0x150 [ 457.546721] ? sock_sendmsg+0xd5/0x120 [ 457.550594] ? sock_write_iter+0x35e/0x5c0 [ 457.554809] ? __vfs_write+0x6b8/0x9f0 [ 457.558679] ? vfs_write+0x1fc/0x560 [ 457.562373] ? ksys_write+0x101/0x260 [ 457.566179] ? do_syscall_64+0x1b9/0x820 [ 457.570267] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.575658] ? fs_reclaim_acquire+0x20/0x20 03:33:54 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000000a000001005307a33d6c390836be381b", 0x1f) 03:33:54 executing program 5: pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) splice(r0, &(0x7f0000000140), r1, 0x0, 0x8, 0x0) 03:33:54 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000800000001005307a33d6c390836be381b", 0x1f) [ 457.579996] ? lock_downgrade+0x900/0x900 [ 457.584157] ? lock_release+0x970/0x970 [ 457.588145] ? check_same_owner+0x330/0x330 [ 457.592489] ? trace_hardirqs_on+0xbd/0x310 [ 457.596827] ? lock_downgrade+0x900/0x900 [ 457.600983] ? sock_kmalloc+0x15a/0x1f0 [ 457.604971] ? __might_sleep+0x95/0x190 [ 457.608960] __alloc_pages_nodemask+0x34b/0xdd0 [ 457.613652] ? lock_downgrade+0x900/0x900 [ 457.617817] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 457.617833] ? check_same_owner+0x330/0x330 [ 457.617850] ? sock_kmalloc+0x18a/0x1f0 03:33:54 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000000601005307a33d6c390836be381b", 0x1f) [ 457.617873] ? iov_iter_npages+0xdd0/0xdd0 [ 457.627207] ? _copy_from_iter_full+0x2b8/0xc20 [ 457.627227] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 457.627248] ? af_alg_register_type+0x3f0/0x3f0 [ 457.650765] ? check_preemption_disabled+0x48/0x200 [ 457.655800] ? lock_sock_nested+0x9a/0x120 [ 457.660054] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 457.665608] alloc_pages_current+0x10c/0x210 [ 457.670037] af_alg_sendmsg+0xb08/0x1260 [ 457.674122] ? af_alg_pull_tsgl+0xd70/0xd70 [ 457.678457] aead_sendmsg+0x103/0x150 03:33:54 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000000e000001005307a33d6c390836be381b", 0x1f) [ 457.682285] ? crypto_aead_copy_sgl+0x350/0x350 [ 457.686973] sock_sendmsg+0xd5/0x120 [ 457.690701] sock_write_iter+0x35e/0x5c0 [ 457.694773] ? sock_sendmsg+0x120/0x120 [ 457.698772] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 457.704324] ? iov_iter_init+0xc2/0x1e0 [ 457.708314] __vfs_write+0x6b8/0x9f0 [ 457.712046] ? kernel_read+0x120/0x120 [ 457.715951] ? apparmor_path_rmdir+0x30/0x30 [ 457.720379] ? lock_release+0x970/0x970 [ 457.724365] ? check_preemption_disabled+0x48/0x200 [ 457.729397] ? apparmor_file_permission+0x24/0x30 [ 457.734264] ? rw_verify_area+0x118/0x360 [ 457.738440] vfs_write+0x1fc/0x560 [ 457.741994] ksys_write+0x101/0x260 [ 457.745632] ? __ia32_sys_read+0xb0/0xb0 [ 457.749726] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 457.755198] __x64_sys_write+0x73/0xb0 [ 457.759102] do_syscall_64+0x1b9/0x820 [ 457.763008] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 457.768386] ? syscall_return_slowpath+0x5e0/0x5e0 [ 457.773324] ? trace_hardirqs_off_thunk+0x1a/0x1c 03:33:54 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000f000000001005307a33d6c390836be381b", 0x1f) 03:33:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x802, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x10000, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8910, &(0x7f00000000c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x8040) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000300)={0x4, 0x4, 0x9, 0x28fd, 0x0}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000380)={r4, 0x4}, &(0x7f00000003c0)=0x8) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000140)={0x0, 0x3, 0x2, 'queue0\x00', 0x200}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) [ 457.778185] ? trace_hardirqs_on_caller+0x310/0x310 [ 457.783214] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 457.788262] ? prepare_exit_to_usermode+0x291/0x3b0 [ 457.793296] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 457.798170] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.803366] RIP: 0033:0x457579 [ 457.806568] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 457.825478] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 03:33:54 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0), 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+', 0x8}, 0x28, 0x3) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0xffffffffffffffff}, 0x14}}, 0x0) [ 457.833194] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 457.840472] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 457.847746] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 457.855023] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 457.862299] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:54 executing program 3 (fault-call:9 fault-nth:39): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:54 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x8, &(0x7f0000000040)) sysfs$1(0x1, &(0x7f00000001c0)='\x00') 03:33:54 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000900000001005307a33d6c390836be381b", 0x1f) 03:33:54 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000042800010b00000000008613d87de9c13e2486db74b4dd6471ad071dacbf60f799946690d042983af9d33d10f2297346e4b36dfb80dbef29c0930ace887c8e105b19c75aab24fbe27a937b016a0420657ba3939cd943d2f45db7c17b091eaca24c1e612c5c80758a7e855f8ee1ac701f092c716767aed3702ba723ef83e802206a9441adc5cbe6348ccf4c665661438e3b960439d81eb6e0505320bf28ffb04b0bc0cecfb4e1da8750ddbaa4420c53c4a73da8cced9950dcd2d64740c739a248"], 0x14}}, 0x0) 03:33:54 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@ipv4={[], [], @broadcast}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={"fd72653700", r1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x198) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000305000000000000000002000000", @ANYRES32=r2, @ANYBLOB="0000f0000c00011effffffffffff0000"], 0x28}}, 0x0) recvfrom$inet(r4, &(0x7f0000000180)=""/49, 0x31, 0x1, 0x0, 0x0) 03:33:54 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0x14, 0x2e, 0xc01}, 0x14}}, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0xef7e, 0x8, 0x6, 0x10000000}, 0x8) 03:33:54 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000a00000001005307a33d6c390836be381b", 0x1f) 03:33:54 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a300000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000ebff00"}) r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000000c0)=""/131) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000000)=""/26) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x40000, 0x0) write$FUSE_GETXATTR(r3, &(0x7f0000000200)={0x18, 0x0, 0x1, {0x1}}, 0x18) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000040)={'ah\x00'}, &(0x7f00000001c0)=0x1e) [ 458.037515] FAULT_INJECTION: forcing a failure. [ 458.037515] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 458.095738] CPU: 0 PID: 23210 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 458.104268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.113634] Call Trace: [ 458.116249] dump_stack+0x1d3/0x2c4 [ 458.119905] ? dump_stack_print_info.cold.2+0x52/0x52 [ 458.125129] should_fail.cold.4+0xa/0x17 [ 458.125165] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 458.134316] ? save_stack+0xa9/0xd0 [ 458.137959] ? save_stack+0x43/0xd0 [ 458.141595] ? kasan_kmalloc+0xc7/0xe0 [ 458.141610] ? __kmalloc+0x14e/0x760 [ 458.141625] ? sock_kmalloc+0x15a/0x1f0 [ 458.141646] ? af_alg_sendmsg+0xa1b/0x1260 [ 458.153205] ? aead_sendmsg+0x103/0x150 [ 458.153223] ? sock_sendmsg+0xd5/0x120 [ 458.153249] ? sock_write_iter+0x35e/0x5c0 [ 458.153288] ? __vfs_write+0x6b8/0x9f0 [ 458.161496] ? vfs_write+0x1fc/0x560 [ 458.161511] ? ksys_write+0x101/0x260 [ 458.161529] ? do_syscall_64+0x1b9/0x820 [ 458.161553] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.167410] input: syz1 as /devices/virtual/input/input259 [ 458.169676] ? cache_grow_end+0xa8/0x190 [ 458.169699] ? fs_reclaim_acquire+0x20/0x20 [ 458.169722] ? lock_downgrade+0x900/0x900 [ 458.177316] ? lock_release+0x970/0x970 [ 458.177334] ? check_same_owner+0x330/0x330 [ 458.177353] ? trace_hardirqs_on+0xbd/0x310 [ 458.177368] ? kasan_check_write+0x14/0x20 [ 458.177382] ? sock_kmalloc+0x15a/0x1f0 [ 458.177405] ? __might_sleep+0x95/0x190 [ 458.185257] __alloc_pages_nodemask+0x34b/0xdd0 [ 458.185276] ? lock_downgrade+0x900/0x900 [ 458.185294] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 458.185314] ? check_same_owner+0x330/0x330 [ 458.196294] ? sock_kmalloc+0x18a/0x1f0 [ 458.196321] ? iov_iter_npages+0xdd0/0xdd0 [ 458.229594] ? _copy_from_iter_full+0x2b8/0xc20 [ 458.229618] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 458.238247] ? af_alg_register_type+0x3f0/0x3f0 [ 458.238266] ? check_preemption_disabled+0x48/0x200 [ 458.238282] ? lock_sock_nested+0x9a/0x120 [ 458.238303] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 458.238325] alloc_pages_current+0x10c/0x210 [ 458.275290] af_alg_sendmsg+0xb08/0x1260 [ 458.275316] ? af_alg_pull_tsgl+0xd70/0xd70 [ 458.275349] aead_sendmsg+0x103/0x150 [ 458.290123] ? crypto_aead_copy_sgl+0x350/0x350 [ 458.290144] sock_sendmsg+0xd5/0x120 [ 458.290162] sock_write_iter+0x35e/0x5c0 [ 458.290183] ? sock_sendmsg+0x120/0x120 [ 458.306770] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 458.306788] ? iov_iter_init+0xc2/0x1e0 [ 458.306807] __vfs_write+0x6b8/0x9f0 [ 458.306831] ? kernel_read+0x120/0x120 [ 458.315207] ? apparmor_path_rmdir+0x30/0x30 [ 458.315225] ? lock_release+0x970/0x970 [ 458.315247] ? check_preemption_disabled+0x48/0x200 [ 458.353798] ? apparmor_file_permission+0x24/0x30 [ 458.353826] ? rw_verify_area+0x118/0x360 [ 458.362822] vfs_write+0x1fc/0x560 [ 458.366381] ksys_write+0x101/0x260 [ 458.370018] ? __ia32_sys_read+0xb0/0xb0 [ 458.374093] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 458.374113] __x64_sys_write+0x73/0xb0 [ 458.383462] do_syscall_64+0x1b9/0x820 [ 458.383482] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 03:33:55 executing program 0: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x18, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x6611, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r1, 0x101, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x24008011}, 0x94) 03:33:55 executing program 5: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@loopback, @in6=@dev}}, {{@in=@rand_addr}, 0x0, @in=@multicast1}}, &(0x7f0000000ac0)=0xe8) syz_mount_image$gfs2(&(0x7f000000de80)='gfs2\x00', &(0x7f000000dec0)='./file0\x00', 0x0, 0x0, &(0x7f000000e300), 0x0, &(0x7f0000000000)={[{@hostdata={'hostdata', 0x3d, 'lockproto=dlm'}}, {@lockproto_dlm='lockproto=dlm'}]}) 03:33:55 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000480)={[0x8, 0x5, 0x5, 0x9, 0x10000, 0xfffffffffffffff8, 0x10000, 0x3, 0x55, 0x9, 0x7d0f2160, 0x1f, 0x5, 0x10000, 0x9, 0x40], 0xf000, 0x81000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="2f6465762f8a8d1c621c9c6cf931da9a75ed56577e581e333fc24660b2370886460106070eedb866ab65b63a52940a4ed09e40ae9c25a9d8765b3f9a737ec521bd440636e8642c41fbf19a6b6f5198fe1be67d7bbddd3ed7c84a5c2625ab6a9497daca02b394fe84edaecb6e2d49aca442579f942707ed79d863"], &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='hugetlbfs\x00', 0x400, 0x0) getxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)=@known='system.sockprotoname\x00', &(0x7f0000000380)=""/208, 0xd0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) bind$unix(r1, &(0x7f0000000240)=@file={0x1, './file1\x00'}, 0x6e) [ 458.383504] ? syscall_return_slowpath+0x5e0/0x5e0 [ 458.392738] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 458.392768] ? trace_hardirqs_on_caller+0x310/0x310 [ 458.392789] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 458.412603] ? prepare_exit_to_usermode+0x291/0x3b0 [ 458.417650] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 458.422531] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.427764] RIP: 0033:0x457579 [ 458.430986] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 458.449895] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 458.457607] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 458.464877] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 458.472143] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 458.479413] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 458.486680] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:55 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000000901005307a33d6c390836be381b", 0x1f) [ 458.501550] gfs2: not a GFS2 filesystem 03:33:55 executing program 3 (fault-call:9 fault-nth:40): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:55 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000003000001005307a33d6c390836be381b", 0x1f) 03:33:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc00000000200000000000000004000000000000b6ff01000001c3deca0500000000a3a100000000800000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000a609000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013000c0010000100000000000000"], 0x4}, 0x1, 0x0, 0x0, 0x40804}, 0x0) 03:33:55 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x10, &(0x7f00000004c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x5f, 0x1, @buffer={0x0, 0x6e, &(0x7f0000000100)=""/110}, &(0x7f0000000200)="7e2278a73456e66f8279dde09787a0b54d2cef6e04b33a735b225056fb37395ee59b625b6e2921990d0a9d0b83a1d572977f11184199a565112da3dbe2d5ae540254ccf564c8cee9729ac328dde4a8303195559c453c1c2bee2f0b9bd15f3c", &(0x7f00000004c0)=""/4096, 0xfffffffffffffffa, 0x4, 0x3, &(0x7f00000002c0)}) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@remote, 0x51, r5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:33:55 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000040)="725d80330745d3772b88d80fd12ed6007ee55284c91cdb5d10de046d5f7541ec49a02f9360334f916e42beb185c0bdd92c4916f0f0cf45acd9094efc1888a95fcbb0ebe655da46d2f65b07dac5808b79d1c3cbc9557d910ee9293554", 0x5c}], 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r2) dup3(r0, r1, 0x0) 03:33:55 executing program 4: setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100), 0x4) r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffffffff) r2 = accept4(r1, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x8}, 0x14) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) 03:33:55 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000000f000001005307a33d6c390836be381b", 0x1f) [ 458.662804] FAULT_INJECTION: forcing a failure. [ 458.662804] name fail_page_alloc, interval 1, probability 0, space 0, times 0 03:33:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5409, 0x706ffc) 03:33:55 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000000c000001005307a33d6c390836be381b", 0x1f) [ 458.726705] CPU: 1 PID: 23265 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 458.735241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.744609] Call Trace: [ 458.747212] dump_stack+0x1d3/0x2c4 [ 458.750861] ? dump_stack_print_info.cold.2+0x52/0x52 [ 458.756081] should_fail.cold.4+0xa/0x17 [ 458.760171] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 458.765292] ? save_stack+0xa9/0xd0 [ 458.765309] ? save_stack+0x43/0xd0 [ 458.765330] ? kasan_kmalloc+0xc7/0xe0 [ 458.772577] ? __kmalloc+0x14e/0x760 [ 458.772593] ? sock_kmalloc+0x15a/0x1f0 [ 458.772614] ? af_alg_sendmsg+0xa1b/0x1260 [ 458.788405] ? aead_sendmsg+0x103/0x150 [ 458.792397] ? sock_sendmsg+0xd5/0x120 [ 458.796302] ? sock_write_iter+0x35e/0x5c0 [ 458.800552] ? __vfs_write+0x6b8/0x9f0 [ 458.804456] ? vfs_write+0x1fc/0x560 [ 458.808184] ? ksys_write+0x101/0x260 [ 458.808204] ? do_syscall_64+0x1b9/0x820 [ 458.808229] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.821441] ? fs_reclaim_acquire+0x20/0x20 03:33:55 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000500000001005307a33d6c390836be381b", 0x1f) [ 458.821464] ? lock_downgrade+0x900/0x900 [ 458.829935] ? lock_release+0x970/0x970 [ 458.833929] ? check_same_owner+0x330/0x330 [ 458.838277] ? trace_hardirqs_on+0xbd/0x310 [ 458.842619] ? lock_downgrade+0x900/0x900 [ 458.846783] ? sock_kmalloc+0x15a/0x1f0 [ 458.850782] ? __might_sleep+0x95/0x190 [ 458.854775] __alloc_pages_nodemask+0x34b/0xdd0 [ 458.854795] ? lock_downgrade+0x900/0x900 [ 458.854813] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 458.854833] ? check_same_owner+0x330/0x330 [ 458.863646] ? sock_kmalloc+0x18a/0x1f0 03:33:55 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200009effffff01005307a33d6c390836be381b", 0x1f) [ 458.863667] ? iov_iter_npages+0xdd0/0xdd0 [ 458.863692] ? _copy_from_iter_full+0x2b8/0xc20 [ 458.885885] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 458.891872] ? af_alg_register_type+0x3f0/0x3f0 [ 458.896569] ? check_preemption_disabled+0x48/0x200 [ 458.901600] ? lock_sock_nested+0x9a/0x120 [ 458.905857] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 458.911417] alloc_pages_current+0x10c/0x210 [ 458.915841] af_alg_sendmsg+0xb08/0x1260 [ 458.919937] ? af_alg_pull_tsgl+0xd70/0xd70 [ 458.924293] aead_sendmsg+0x103/0x150 [ 458.928113] ? crypto_aead_copy_sgl+0x350/0x350 [ 458.932797] sock_sendmsg+0xd5/0x120 [ 458.932818] sock_write_iter+0x35e/0x5c0 [ 458.932841] ? sock_sendmsg+0x120/0x120 [ 458.940615] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 458.940633] ? iov_iter_init+0xc2/0x1e0 [ 458.940653] __vfs_write+0x6b8/0x9f0 [ 458.957826] ? kernel_read+0x120/0x120 [ 458.961747] ? apparmor_path_rmdir+0x30/0x30 [ 458.966182] ? lock_release+0x970/0x970 [ 458.970197] ? check_preemption_disabled+0x48/0x200 03:33:55 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000061401005307a33d6c390836be381b", 0x1f) [ 458.975235] ? apparmor_file_permission+0x24/0x30 [ 458.980098] ? rw_verify_area+0x118/0x360 [ 458.984272] vfs_write+0x1fc/0x560 [ 458.987830] ksys_write+0x101/0x260 [ 458.991471] ? __ia32_sys_read+0xb0/0xb0 [ 458.995546] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 459.001025] __x64_sys_write+0x73/0xb0 [ 459.004933] do_syscall_64+0x1b9/0x820 [ 459.008847] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 459.014234] ? syscall_return_slowpath+0x5e0/0x5e0 [ 459.019192] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 459.024051] ? trace_hardirqs_on_caller+0x310/0x310 [ 459.029084] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 459.034121] ? prepare_exit_to_usermode+0x291/0x3b0 [ 459.039158] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 459.044025] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 459.049227] RIP: 0033:0x457579 [ 459.052449] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 459.071348] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 459.071365] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 459.071381] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 459.093620] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 459.100911] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 459.100921] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:56 executing program 3 (fault-call:9 fault-nth:41): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:56 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000081000001005307a33d6c390836be381b", 0x1f) 03:33:56 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r1, 0x401, 0x3, [0xff, 0x9, 0x5]}, &(0x7f0000000100)=0xe) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000140)={'eql\x00', {0x2, 0x4e22, @multicast2}}) close(r0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000180)={0x0, 0x200}, 0x2) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x1000000, 0x4) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) write$P9_RSTATu(r0, &(0x7f0000000400)={0x56, 0x7d, 0x2, {{0x0, 0x3d, 0x0, 0x5, {0x0, 0x4, 0x6}, 0x80090000, 0x0, 0x167, 0x1, 0x0, "", 0x0, "", 0x0, "", 0xa, '/dev/zero\x00'}, 0x4, 'eql\x00', r3, r6, r7}}, 0x56) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000480)={'mangle\x00', 0xca, "45dc59374261c46804fee9c0aa77877ebb11d97256aeaa85d3dce88a0c66d2c9143eeae3bbd2b3428f084e932048d77a2cce69afa027977be8fc694bc8543300ffb09c8f41c1e3194da8e1a2a20062e13fcd77b9f86682874fddee25f8a3a2a1adf27791031b4992ce4db918e1076f5b45e34c0d33b9ead1582913032423be6701e7154db76bad25156467029e18ce955a82166899a40bdcde078aac9f65ca9ebb7a44a2fd323d7fd808dcf990427b83b4502b90c27da16f1db3a2630dccf393e9ce6183d3011c54b9ea"}, &(0x7f0000000580)=0xee) write$P9_RWRITE(r0, &(0x7f00000005c0)={0xb, 0x77, 0x2, 0x7fa}, 0xb) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r9) r10 = fanotify_init(0x4, 0x1) write$P9_RMKNOD(r0, &(0x7f00000006c0)={0x14, 0x13, 0x2, {0x9, 0x4, 0x7}}, 0x14) bind$netlink(r0, &(0x7f0000000700)={0x10, 0x0, 0x25dfdbff, 0x80020000}, 0xc) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x80000, 0x0) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00') sendmsg$nl_generic(r11, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x84404000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x268, 0x15, 0x310, 0x70bd2a, 0x25dfdbff, {0xf}, [@nested={0x4, 0x7a}, @nested={0x120, 0x0, [@generic="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", @typed={0x8, 0x12, @ipv4=@loopback}, @typed={0x14, 0x53, @ipv6=@mcast2}]}, @generic="16ebf1fa1d8a90b03e63e6bfb04dbe43be890e2c52eec0a7337b63319fe82c020b6c2f51cb6976237472ecef63f30082564417e6b24fb61c57f19743443e3dc0d50a5c74600f3ce9f7c517567e2edc5f97689bfe79cc9f84ddf901686d12774c3d45da8d84666e39a5d5d8ba873de16d2ead92ef7df433f7bd13cc3b", @nested={0x38, 0x37, [@typed={0x14, 0x80, @ipv6=@local}, @typed={0x8, 0x29, @u32=0x5}, @typed={0x18, 0x37, @str='\']eth0em0_+wlan1\x00'}]}, @typed={0x8, 0x8f, @uid=r7}, @nested={0x74, 0x27, [@typed={0x10, 0x60, @str='/dev/zero\x00'}, @typed={0x8, 0x78, @uid=r5}, @typed={0x14, 0x8b, @ipv6=@dev={0xfe, 0x80, [], 0x1e}}, @typed={0x8, 0x5a, @fd=r10}, @generic="a1f46d608e3e88679b25c5a8c57b05a8cb8e21711e7ffda074e297e8a945aaea0c0ac26e0243a179bacc1b3e1e0a5df3dd6fb969a560b5345f7ad8"]}]}, 0x268}, 0x1, 0x0, 0x0, 0x854}, 0x80) connect$pppoe(r11, &(0x7f0000000b00)={0x18, 0x0, {0x3, @empty, 'gre0\x00'}}, 0x1e) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000bc0)={r2, 0x4c, &(0x7f0000000b40)=[@in6={0xa, 0x4e20, 0xfffffffffffff001, @mcast2, 0x1ff}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e20, @multicast2}]}, &(0x7f0000000c00)=0x10) ioctl$KVM_SET_SIGNAL_MASK(r11, 0x4004ae8b, &(0x7f0000000c40)={0x2, "d488"}) listxattr(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)=""/131, 0x83) pipe(&(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(r14, &(0x7f0000002100)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000020c0)={&(0x7f0000000e00)={0x12a8, 0x34, 0x400, 0x70bd2c, 0x25dfdbfe, {0x1f}, [@typed={0x8, 0x66, @u32}, @typed={0xc, 0xd, @binary="e00e54d546"}, @typed={0x8, 0x3d, @uid=r8}, @nested={0x13c, 0x8d, [@generic="a34446a488a9e90684bc25ae5eb76ff45aab64c2eb46e49dddbed484102412345f78d4c3e6b17a7a7e6b39c8767b90dd417827f2dc22a13b4fee61de58b8a5d41ce590640b46523b14872cceb25c0ad6e68969794ad5d3a6cbd255bbf84d8601fb02c4c8a72e3cb0a215244fb2b04564581d5def572528d32d3b5ee86def5079d6562aab018849eeb781ada5a5e06e9b62c2fabae4ee1897ff8a5a828c02e18596ed4b832fe3f67a7fc6e69664389885d0de605d44c30f0f6f9436bcc4c40e40", @generic="af54e44695702fa155b4afd87b03bf8ec5fc5e701874aaffafe36afe515efd16e748e9f8efe6a9e977030a8cbf9c55954616dc620a9452526c9e956f28b0cb5462c5a29108010e4db2a571b40c4a0a5f59d5b85fa41782a1a72c5c3de1c50c7f4bba675bf74c410b4cbfb2198095edb75c2a81d7402243e6"]}, @nested={0x3c, 0x54, [@generic="23f9330cc964c267421f2832ddc6136e7933918ac290cbc4408cea1fadaa50abbb9f96bc8a6d23f0a86bfab59bee3043b7cba374dc85858e"]}, @nested={0x1100, 0x95, [@typed={0x18, 0x94, @str='\']eth0em0_+wlan1\x00'}, @generic="e5ab3ad741f6ccefa6bc9b907afd92a493f4d4963b54cba9f595484be4c7db3a028c0b3761661f8f8b4adb563bce174c711b72b3d0c5449f0fedd37b82aecd018588fb070a93485a294e933bb661909984d5c122b42134c96eed5ed4a75a513a2c7bad6080f9c4e4c75372b9926f72be6f7e6f2a0c981774911da4c61bd2d9021e1a81b9f4edcd343719d3ec0c047caa95bc8255654d497faade619f0132baf36bbe8078d1778690c59328d46b3468d1af18f545872bf343f05ba9934ec844b505389c0cd40ed170ea2565ac89c3b0dbc7cc972a9fe1f04132842570a44ed56592", @generic="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"]}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x1}, 0x8001) write$FUSE_CREATE_OPEN(r14, &(0x7f0000002140)={0xa0, 0xfffffffffffffffe, 0x5, {{0x6, 0x3, 0x7, 0x0, 0x9, 0x6, {0x4, 0x4, 0xe6b1, 0x8, 0x10001, 0x35, 0x7, 0xfffffffffffffff8, 0x3ff, 0x7, 0x4000, r5, r4, 0x7, 0x4}}, {0x0, 0x1}}}, 0xa0) flistxattr(r13, &(0x7f0000002200)=""/7, 0x7) sendmsg$IPVS_CMD_GET_SERVICE(r14, &(0x7f0000002340)={&(0x7f0000002240), 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x70, r12, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6b}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040891}, 0x10) [ 459.271245] FAULT_INJECTION: forcing a failure. [ 459.271245] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 459.284271] CPU: 0 PID: 23301 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 459.292793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.302156] Call Trace: [ 459.304779] dump_stack+0x1d3/0x2c4 [ 459.308440] ? dump_stack_print_info.cold.2+0x52/0x52 [ 459.313663] should_fail.cold.4+0xa/0x17 [ 459.317750] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 459.322875] ? save_stack+0xa9/0xd0 [ 459.326516] ? save_stack+0x43/0xd0 [ 459.330148] ? kasan_kmalloc+0xc7/0xe0 [ 459.334043] ? __kmalloc+0x14e/0x760 [ 459.337794] ? sock_kmalloc+0x15a/0x1f0 [ 459.341787] ? af_alg_sendmsg+0xa1b/0x1260 [ 459.346034] ? aead_sendmsg+0x103/0x150 [ 459.350018] ? sock_sendmsg+0xd5/0x120 [ 459.353910] ? sock_write_iter+0x35e/0x5c0 [ 459.358156] ? __vfs_write+0x6b8/0x9f0 [ 459.362051] ? vfs_write+0x1fc/0x560 [ 459.365791] ? ksys_write+0x101/0x260 [ 459.369606] ? do_syscall_64+0x1b9/0x820 [ 459.373693] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 459.379091] ? cache_grow_end+0xa8/0x190 [ 459.383177] ? fs_reclaim_acquire+0x20/0x20 [ 459.387517] ? lock_downgrade+0x900/0x900 [ 459.391682] ? lock_release+0x970/0x970 [ 459.395683] ? check_same_owner+0x330/0x330 [ 459.400023] ? trace_hardirqs_on+0xbd/0x310 [ 459.404356] ? kasan_check_write+0x14/0x20 [ 459.408606] ? sock_kmalloc+0x15a/0x1f0 [ 459.412597] ? __might_sleep+0x95/0x190 [ 459.416590] __alloc_pages_nodemask+0x34b/0xdd0 [ 459.421275] ? lock_downgrade+0x900/0x900 [ 459.425444] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 459.430479] ? check_same_owner+0x330/0x330 [ 459.434825] ? sock_kmalloc+0x18a/0x1f0 [ 459.438807] ? iov_iter_npages+0xdd0/0xdd0 [ 459.443042] ? _copy_from_iter_full+0x2b8/0xc20 [ 459.447706] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 459.453672] ? af_alg_register_type+0x3f0/0x3f0 [ 459.458327] ? check_preemption_disabled+0x48/0x200 [ 459.463597] ? lock_sock_nested+0x9a/0x120 [ 459.467829] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 459.473368] alloc_pages_current+0x10c/0x210 [ 459.477797] af_alg_sendmsg+0xb08/0x1260 [ 459.481890] ? af_alg_pull_tsgl+0xd70/0xd70 [ 459.486241] aead_sendmsg+0x103/0x150 [ 459.490065] ? crypto_aead_copy_sgl+0x350/0x350 [ 459.494753] sock_sendmsg+0xd5/0x120 [ 459.498493] sock_write_iter+0x35e/0x5c0 [ 459.502571] ? sock_sendmsg+0x120/0x120 [ 459.506556] ? proc_fail_nth_write+0x19f/0x210 [ 459.511158] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 459.516704] ? iov_iter_init+0xc2/0x1e0 [ 459.516722] __vfs_write+0x6b8/0x9f0 [ 459.516739] ? kernel_read+0x120/0x120 [ 459.516768] ? apparmor_path_rmdir+0x30/0x30 [ 459.524463] ? lock_release+0x970/0x970 [ 459.524516] ? check_preemption_disabled+0x48/0x200 [ 459.541804] ? apparmor_file_permission+0x24/0x30 [ 459.546649] ? rw_verify_area+0x118/0x360 [ 459.550788] vfs_write+0x1fc/0x560 [ 459.554315] ksys_write+0x101/0x260 [ 459.557929] ? __ia32_sys_read+0xb0/0xb0 [ 459.561979] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 459.567417] __x64_sys_write+0x73/0xb0 [ 459.571294] do_syscall_64+0x1b9/0x820 [ 459.575168] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 459.580518] ? syscall_return_slowpath+0x5e0/0x5e0 [ 459.585432] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 459.590269] ? trace_hardirqs_on_caller+0x310/0x310 [ 459.595274] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 459.600285] ? prepare_exit_to_usermode+0x291/0x3b0 [ 459.605305] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 459.610151] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 459.615337] RIP: 0033:0x457579 [ 459.618528] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 459.637412] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 459.645103] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 459.652383] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 459.659731] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 459.666998] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 459.674249] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xffffffff, 0x1) r2 = fcntl$dupfd(r0, 0x0, r0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x280, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x80000000003) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000004c0)={0x0, {0x0, 0x200000, 0x0, 0xfff0000000000000, 0x6}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xe, 0x4, 0x4, 0x7}, 0x2c) r5 = memfd_create(&(0x7f0000000140)=')\x00', 0x3) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYBLOB="92c38b9f769f3a807e4bf700"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000280)={@loopback, 0x2c, r7}) setsockopt$inet6_int(r6, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x890c, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3ac, 0x3ef, 0x5, 0x30c, 0x32b, 0x0, 0xe003, 0x33c, 0x0, 0x0, 0xf4, 0x15, 0x8]}, 0x75, r8}) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={@local, @empty, @local, 0x3, 0x0, 0x0, 0x100, 0x0, 0x4, r8}) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000300)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r9, 0x5382, &(0x7f0000000480)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$inet6_sctp(0xa, 0x0, 0x84) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) sendto$inet6(r10, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000180)={0x78e0, 0x8, 0xffffffffffffff7a, 0x1000}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000340)={0xe0000000}) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000040)={r4, &(0x7f0000000000), &(0x7f000089b000)}, 0x1ec) 03:33:56 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000340)) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2b, 0x3, 0x0, {0x1, 0xa, 0x0, '/dev/fuse\x00'}}, 0x2b) r2 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8008550e, &(0x7f00000000c0)) 03:33:56 executing program 3 (fault-call:9 fault-nth:42): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:56 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x20000004e20}, 0x1c) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x100000001, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100000000, 0x4, 0x0, 0x5, 0x8a5f, 0x7fffffff, 0x1800000000, 0x40, 0x8, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0xff, 0x1, 0x8, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0xfff}, 0x0, 0x8000, 0x8, 0x0, 0x0, 0x8}, r1, 0x10, r0, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000100)=0x59aa, 0x4) r3 = dup(r2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$nl_netfilter(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="84000000030721b612cae7276b5b8194c963a401910029bd7000ffdbdf250000000808006100ffffffff0c001f0008001700250000000800000000af07204fccf7684231a78d5a269e2f0138d9eb3c46778518062ac0f52fa3e12e8d9958a1b038f997aaf22b050000004450c06cdb4dac5e9176889839f7b05f4f920e54a3c281"], 0x84}, 0x1, 0x0, 0x0, 0xc1}, 0x14) timerfd_settime(r3, 0x1, &(0x7f0000000040)={{r4, r5+10000000}}, &(0x7f00000000c0)) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @remote, [{[{0x9100, 0x1, 0x8, 0x3}], {0x8100, 0xfffffffffffffffd, 0xfff, 0x3}}], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x10, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000001780)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 03:33:56 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x25c0e947fedbf635) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f0000000580)}) socketpair$unix(0x1, 0x8, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f0000000600)=[@acquire, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000280)}}], 0x0, 0x0, &(0x7f0000000500)}) 03:33:56 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000f0ffffff01005307a33d6c390836be381b", 0x1f) [ 459.785135] FAULT_INJECTION: forcing a failure. [ 459.785135] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 459.806385] binder: 23320:23321 got transaction to context manager from process owning it [ 459.815733] CPU: 1 PID: 23316 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 459.824243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 03:33:56 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000c00e000001005307a33d6c390836be381b", 0x1f) [ 459.827400] binder: 23320:23321 transaction failed 29201/-22, size 0-0 line 2825 [ 459.833596] Call Trace: [ 459.833634] dump_stack+0x1d3/0x2c4 [ 459.833670] ? dump_stack_print_info.cold.2+0x52/0x52 [ 459.847382] ? debug_smp_processor_id+0x1c/0x20 [ 459.847400] ? perf_trace_lock_acquire+0x15b/0x800 [ 459.847421] should_fail.cold.4+0xa/0x17 [ 459.866248] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 459.871357] ? save_stack+0xa9/0xd0 [ 459.874989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 459.880531] ? check_preemption_disabled+0x48/0x200 [ 459.885566] ? debug_smp_processor_id+0x1c/0x20 [ 459.890239] ? perf_trace_lock_acquire+0x15b/0x800 [ 459.895174] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 459.900543] ? perf_trace_lock+0x7a0/0x7a0 [ 459.904787] ? fs_reclaim_acquire+0x20/0x20 [ 459.909116] ? lock_downgrade+0x900/0x900 [ 459.913274] ? lock_release+0x970/0x970 [ 459.917248] ? check_same_owner+0x330/0x330 [ 459.921579] ? trace_hardirqs_on+0xbd/0x310 [ 459.925911] ? perf_trace_lock+0x7a0/0x7a0 [ 459.930159] ? sock_kmalloc+0x15a/0x1f0 [ 459.934147] ? __might_sleep+0x95/0x190 [ 459.938125] __alloc_pages_nodemask+0x34b/0xdd0 [ 459.942796] ? lock_downgrade+0x900/0x900 [ 459.946946] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 459.951961] ? check_same_owner+0x330/0x330 [ 459.956303] ? sock_kmalloc+0x18a/0x1f0 [ 459.960295] ? iov_iter_npages+0xdd0/0xdd0 [ 459.964549] ? _copy_from_iter_full+0x2b8/0xc20 [ 459.969221] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 459.975208] ? af_alg_register_type+0x3f0/0x3f0 [ 459.979886] ? check_preemption_disabled+0x48/0x200 [ 459.984902] ? lock_sock_nested+0x9a/0x120 [ 459.989174] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 459.994716] alloc_pages_current+0x10c/0x210 [ 459.999131] af_alg_sendmsg+0xb08/0x1260 [ 460.003199] ? af_alg_pull_tsgl+0xd70/0xd70 [ 460.007528] aead_sendmsg+0x103/0x150 [ 460.011325] ? crypto_aead_copy_sgl+0x350/0x350 [ 460.015994] sock_sendmsg+0xd5/0x120 [ 460.019738] sock_write_iter+0x35e/0x5c0 [ 460.023807] ? sock_sendmsg+0x120/0x120 [ 460.027790] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 460.033328] ? iov_iter_init+0xc2/0x1e0 [ 460.037305] __vfs_write+0x6b8/0x9f0 [ 460.041021] ? kernel_read+0x120/0x120 [ 460.044908] ? apparmor_path_rmdir+0x30/0x30 [ 460.049314] ? lock_release+0x970/0x970 [ 460.053299] ? check_preemption_disabled+0x48/0x200 [ 460.058317] ? apparmor_file_permission+0x24/0x30 [ 460.063158] ? rw_verify_area+0x118/0x360 [ 460.067317] vfs_write+0x1fc/0x560 [ 460.070866] ksys_write+0x101/0x260 [ 460.074494] ? __ia32_sys_read+0xb0/0xb0 [ 460.078557] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 460.084011] __x64_sys_write+0x73/0xb0 [ 460.087901] do_syscall_64+0x1b9/0x820 [ 460.091797] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 460.097181] ? syscall_return_slowpath+0x5e0/0x5e0 [ 460.102113] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 460.106959] ? trace_hardirqs_on_caller+0x310/0x310 [ 460.111979] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 460.116996] ? prepare_exit_to_usermode+0x291/0x3b0 [ 460.122015] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 460.126866] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 460.132051] RIP: 0033:0x457579 [ 460.135247] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 460.154154] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 460.161864] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 460.169132] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 460.176409] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 460.183675] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 460.190940] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 [ 460.222723] binder_alloc: binder_alloc_mmap_handler: 23320 20001000-20004000 already mapped failed -16 03:33:57 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000300), 0x0, 0x20000000) 03:33:57 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000008101005307a33d6c390836be381b", 0x1f) 03:33:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = geteuid() syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x3ff, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="bea412affc5ce957ebd09a6207bc1789c786daf9ae72e5bacda35002519ff76cfae424a5ee6f95266ba1fbe3ad513c82539cd151b5ca", 0x36, 0xffff}], 0x24009, &(0x7f0000000240)=ANY=[@ANYBLOB='errors=continue,mft_zone_multiplier=0x0000000000000002,errors=recover,f000000000000000000263,rootcontext=user_u,pcr=00000000000000000059,euid>', @ANYRESDEC=r2, @ANYBLOB=',dont_appraise,\x00']) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={'bridge0\x00', {0x2, 0x4e24, @loopback}}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000400)="1b3f5edfe1bdffe411b4d98ab361868dbff065d0d63562c261", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300), &(0x7f0000000340)=0xb) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r5, &(0x7f0000000680)={0x67446698, 0x0, 0x2, 0x2, 0x4, "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"}, 0x1010) ioctl$TIOCGLCKTRMIOS(r3, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r3, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0x5, 0x200000) ioctl$NBD_SET_SOCK(r6, 0xab00, r4) [ 460.238787] binder: BINDER_SET_CONTEXT_MGR already set [ 460.258085] binder: 23320:23321 ioctl 40046207 0 returned -16 03:33:57 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000fffff00001005307a33d6c390836be381b", 0x1f) [ 460.287995] binder_alloc: 23320: binder_alloc_buf, no vma [ 460.302249] binder: release 23320:23321 transaction 39 out, still active [ 460.309060] binder: 23320:23332 transaction failed 29189/-3, size 24-8 line 2973 [ 460.312197] binder: unexpected work type, 4, not freed 03:33:57 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x9}, 0x2c) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1b, 0x4, 0x100000001, 0x0, r0}, 0x2c) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x501000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f00000000c0)}, 0x10) r3 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x1, 0xc83b2c24b3c6edf3) r4 = getuid() ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000300)=0x0) fcntl$lock(r1, 0x7, &(0x7f0000000340)={0x1, 0x4, 0x4, 0x3, r5}) connect$rds(r2, &(0x7f0000000400)={0x2, 0x4e22, @rand_addr=0x8}, 0x10) getgroups(0x6, &(0x7f0000000180)=[0xee01, 0x0, 0xffffffffffffffff, 0x0, 0xee00, 0xee01]) write$P9_RGETATTR(r3, &(0x7f00000001c0)={0xa0, 0x19, 0x2, {0x2040, {0x90, 0x0, 0x7}, 0x8, r4, r6, 0x7fff, 0x0, 0x800, 0x2, 0x6, 0x2, 0xffffffffffffd93a, 0x3, 0x0, 0x8000, 0xd725, 0x80000000, 0xfffffffffffffff9, 0x7, 0x1004000}}, 0xa0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) [ 460.333719] input input261: cannot allocate more than FF_MAX_EFFECTS effects [ 460.343556] binder: undelivered TRANSACTION_COMPLETE [ 460.369658] binder: undelivered TRANSACTION_ERROR: 29201 03:33:57 executing program 2: r0 = getpgrp(0xffffffffffffffff) sched_setscheduler(0x0, 0x0, &(0x7f0000000140)=0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000023c0)='/dev/vsock\x00', 0x200, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000002400)={0x7f, 0x20, 0x80000001, 0xff, 0x8001, 0xfffffffffffffc01, 0xefce, 0xfffffffeffffffff, 0x3ff, 0x4, 0x1, 0x7fffffff}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x16) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) sendmsg$inet_sctp(r2, &(0x7f0000002380)={&(0x7f0000000040)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000002280)=[{&(0x7f0000000180)="a92c37385df0317b03be93e942322daffc28c26337fd5f98d6e5b884f9f2a13dc9f19beda66bde092292781740bd7d886c1f9ab7ee19ff8e2ec38295840b47cdf00504ec9cc19e9c907150a1e0c4c9bebd83f045fa39345e55bb3826b80be9463d67e5d27fa3a4716537fb921b67c3a8f0aaf0501bb000297b6bb3061a9976f25fafd1a91ab82163214a624b720488d2cfb243f15db30248a3f266153ce4960745cacaa7f39e73eee011c2fd93824aa17eaceef0902aff0a9265ce9c0f7dc599b923c3f55522", 0xc6}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000000080)="90f81c25854c38", 0x7}], 0x4, &(0x7f00000022c0)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x1}, @authinfo={0x18, 0x84, 0x6, {0x9c6}}, @init={0x18, 0x84, 0x0, {0x800, 0x6, 0x61, 0x3}}, @authinfo={0x18, 0x84, 0x6, {0x100000000}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x9}}, @authinfo={0x18, 0x84, 0x6, {0x1000}}], 0x90, 0x40}, 0x4000) tkill(r0, 0x13) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) 03:33:57 executing program 3 (fault-call:9 fault-nth:43): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x121000, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000140)=0x72e6) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000100)=0x14) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 460.410785] binder: send failed reply for transaction 39, target dead 03:33:57 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000000301005307a33d6c390836be381b", 0x1f) [ 460.467087] binder: undelivered TRANSACTION_ERROR: 29189 03:33:57 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000000f01005307a33d6c390836be381b", 0x1f) 03:33:57 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendto$inet6(r0, &(0x7f0000000040)="fc46eee4d1a1dd086d2016b8773762e6b7865b3f634295382425a481fe4c69dc70754d73a1d1d0545d3d6ee43acbdf32b189e3e237e0ec363a7fbba0c6c558d69f3697730b45d39d09f119f7c5de6d3dd59f4d29638593f4c43e7f07cb672371d75c34d4df133cd1bc56f911a7dd9a09fd6e52855caa3335313ae50bcb724c32c9596c38de71bc7f08f3c0ad218bad8b3a96c97da4156a97565d94c54d45dfa861e5b4836085e298b8", 0xa9, 0x20000000, &(0x7f0000000100)={0xa, 0x4e24, 0x3f, @mcast1, 0x3}, 0x1c) r3 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f00000002c0), 0xc, &(0x7f00000056c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000014000b0900000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe800000000000000000000000000014040100ff010000000000000000000000000001"], 0x40}}, 0x0) 03:33:57 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000080)={0x7, 0x7}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x6, 0x46c}, {0x3ff, 0x200}, {0x80, 0x3}, {0x6, 0x6}, {0x2, 0x10001}, {0x7, 0x1c94}, {0x2, 0x3ff}, {0x1f, 0x1}, {0x2, 0xb54c}, {0xab98, 0x1}]}) [ 460.559847] FAULT_INJECTION: forcing a failure. [ 460.559847] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 460.598069] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. [ 460.603562] *** Guest State *** [ 460.610334] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 460.620571] CPU: 1 PID: 23379 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 460.629075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.629084] Call Trace: [ 460.629116] dump_stack+0x1d3/0x2c4 [ 460.644698] ? dump_stack_print_info.cold.2+0x52/0x52 [ 460.644745] should_fail.cold.4+0xa/0x17 [ 460.651101] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. [ 460.653971] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 460.653988] ? save_stack+0xa9/0xd0 [ 460.654009] ? save_stack+0x43/0xd0 [ 460.674867] ? kasan_kmalloc+0xc7/0xe0 [ 460.678784] ? __kmalloc+0x14e/0x760 [ 460.682509] ? sock_kmalloc+0x15a/0x1f0 [ 460.686487] ? af_alg_sendmsg+0xa1b/0x1260 [ 460.690721] ? aead_sendmsg+0x103/0x150 [ 460.694713] ? sock_sendmsg+0xd5/0x120 [ 460.698613] ? sock_write_iter+0x35e/0x5c0 [ 460.702852] ? __vfs_write+0x6b8/0x9f0 [ 460.706749] ? vfs_write+0x1fc/0x560 [ 460.710465] ? ksys_write+0x101/0x260 [ 460.714280] ? do_syscall_64+0x1b9/0x820 [ 460.718349] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 460.723739] ? fs_reclaim_acquire+0x20/0x20 [ 460.728075] ? lock_downgrade+0x900/0x900 [ 460.732227] ? lock_release+0x970/0x970 [ 460.736221] ? check_same_owner+0x330/0x330 [ 460.740573] ? trace_hardirqs_on+0xbd/0x310 [ 460.744906] ? lock_downgrade+0x900/0x900 [ 460.749061] ? sock_kmalloc+0x15a/0x1f0 [ 460.753046] ? __might_sleep+0x95/0x190 [ 460.757028] __alloc_pages_nodemask+0x34b/0xdd0 [ 460.761750] ? lock_downgrade+0x900/0x900 [ 460.765908] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 460.770932] ? check_same_owner+0x330/0x330 [ 460.775275] ? sock_kmalloc+0x18a/0x1f0 [ 460.779267] ? iov_iter_npages+0xdd0/0xdd0 [ 460.783516] ? _copy_from_iter_full+0x2b8/0xc20 [ 460.788191] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 460.794166] ? af_alg_register_type+0x3f0/0x3f0 [ 460.798838] ? check_preemption_disabled+0x48/0x200 [ 460.803870] ? lock_sock_nested+0x9a/0x120 [ 460.808153] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 460.813716] alloc_pages_current+0x10c/0x210 [ 460.818141] af_alg_sendmsg+0xb08/0x1260 [ 460.822220] ? af_alg_pull_tsgl+0xd70/0xd70 [ 460.826559] aead_sendmsg+0x103/0x150 [ 460.830367] ? crypto_aead_copy_sgl+0x350/0x350 [ 460.835050] sock_sendmsg+0xd5/0x120 [ 460.838776] sock_write_iter+0x35e/0x5c0 [ 460.842852] ? sock_sendmsg+0x120/0x120 [ 460.846849] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 460.852393] ? iov_iter_init+0xc2/0x1e0 [ 460.856379] __vfs_write+0x6b8/0x9f0 [ 460.860104] ? kernel_read+0x120/0x120 [ 460.863999] ? apparmor_path_rmdir+0x30/0x30 [ 460.868431] ? lock_release+0x970/0x970 [ 460.872415] ? check_preemption_disabled+0x48/0x200 [ 460.877445] ? apparmor_file_permission+0x24/0x30 [ 460.882302] ? rw_verify_area+0x118/0x360 [ 460.886474] vfs_write+0x1fc/0x560 [ 460.890025] ksys_write+0x101/0x260 [ 460.893660] ? __ia32_sys_read+0xb0/0xb0 [ 460.897741] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 460.903204] __x64_sys_write+0x73/0xb0 [ 460.907104] do_syscall_64+0x1b9/0x820 [ 460.911007] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 460.916379] ? syscall_return_slowpath+0x5e0/0x5e0 [ 460.921315] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 460.926180] ? trace_hardirqs_on_caller+0x310/0x310 [ 460.931206] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 460.936245] ? prepare_exit_to_usermode+0x291/0x3b0 [ 460.941284] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 460.946148] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 460.951342] RIP: 0033:0x457579 [ 460.954544] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 460.973461] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 460.981182] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 460.988455] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 460.995733] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 461.003005] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 03:33:57 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000000401005307a33d6c390836be381b", 0x1f) 03:33:57 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000f3afc339240000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x3e, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, 0x108) getsockopt$netlink(r2, 0x10e, 0x9, &(0x7f0000000000)=""/167, &(0x7f0000000240)=0xa7) [ 461.010278] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 [ 461.021419] Unknown ioctl 21508 03:33:57 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000000d000001005307a33d6c390836be381b", 0x1f) [ 461.053762] Unknown ioctl 21508 [ 461.059936] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 461.083913] CR3 = 0x0000000000000000 [ 461.095502] RSP = 0x0000000000000000 RIP = 0x0000000000000000 03:33:57 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000000a01005307a33d6c390836be381b", 0x1f) 03:33:57 executing program 3 (fault-call:9 fault-nth:44): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) [ 461.109360] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 461.124569] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 461.141430] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 03:33:57 executing program 2: listen(0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f00000003c0)="4c0000001300ff09fffd956fa283b70000b87200000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 03:33:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000300)=""/150, &(0x7f0000000000)=0x96) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") sendmsg$key(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000200)={0x2, 0x4000000000000d, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}}, @sadb_lifetime={0x4, 0x3, 0x8000a0ffffffff}]}, 0xa0}}, 0x0) [ 461.180297] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 461.189115] FAULT_INJECTION: forcing a failure. [ 461.189115] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 461.199221] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 461.232041] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 461.246331] CPU: 1 PID: 23411 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 461.250682] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 461.254845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.254852] Call Trace: [ 461.254878] dump_stack+0x1d3/0x2c4 [ 461.254915] ? dump_stack_print_info.cold.2+0x52/0x52 [ 461.263082] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 461.272221] should_fail.cold.4+0xa/0x17 [ 461.272240] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 461.272263] ? save_stack+0xa9/0xd0 [ 461.272282] ? save_stack+0x43/0xd0 [ 461.275008] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 461.278471] ? kasan_kmalloc+0xc7/0xe0 [ 461.278484] ? __kmalloc+0x14e/0x760 [ 461.278499] ? sock_kmalloc+0x15a/0x1f0 [ 461.278513] ? af_alg_sendmsg+0xa1b/0x1260 [ 461.278532] ? aead_sendmsg+0x103/0x150 [ 461.283895] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 461.291670] ? sock_sendmsg+0xd5/0x120 [ 461.291685] ? sock_write_iter+0x35e/0x5c0 [ 461.291697] ? __vfs_write+0x6b8/0x9f0 [ 461.291709] ? vfs_write+0x1fc/0x560 [ 461.291735] ? ksys_write+0x101/0x260 [ 461.295937] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 461.300874] ? do_syscall_64+0x1b9/0x820 [ 461.300893] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.300915] ? cache_grow_end+0xa8/0x190 [ 461.300937] ? fs_reclaim_acquire+0x20/0x20 [ 461.304732] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 461.308169] ? lock_downgrade+0x900/0x900 [ 461.308188] ? lock_release+0x970/0x970 [ 461.308204] ? check_same_owner+0x330/0x330 [ 461.308221] ? trace_hardirqs_on+0xbd/0x310 [ 461.308240] ? kasan_check_write+0x14/0x20 [ 461.316411] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 461.320074] ? sock_kmalloc+0x15a/0x1f0 [ 461.320094] ? __might_sleep+0x95/0x190 [ 461.320112] __alloc_pages_nodemask+0x34b/0xdd0 [ 461.320134] ? lock_downgrade+0x900/0x900 [ 461.323983] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 461.327801] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 461.327816] ? check_same_owner+0x330/0x330 [ 461.327833] ? sock_kmalloc+0x18a/0x1f0 [ 461.327852] ? iov_iter_npages+0xdd0/0xdd0 [ 461.327877] ? _copy_from_iter_full+0x2b8/0xc20 [ 461.332222] Interruptibility = 00000000 ActivityState = 00000000 [ 461.336063] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 461.336080] ? af_alg_register_type+0x3f0/0x3f0 [ 461.336109] ? check_preemption_disabled+0x48/0x200 [ 461.336128] ? lock_sock_nested+0x9a/0x120 [ 461.344215] *** Host State *** [ 461.347972] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 461.347993] alloc_pages_current+0x10c/0x210 [ 461.348020] af_alg_sendmsg+0xb08/0x1260 [ 461.352449] RIP = 0xffffffff811f3487 RSP = 0xffff88018a8af350 [ 461.356165] ? af_alg_pull_tsgl+0xd70/0xd70 [ 461.356187] aead_sendmsg+0x103/0x150 [ 461.356203] ? crypto_aead_copy_sgl+0x350/0x350 [ 461.356224] sock_sendmsg+0xd5/0x120 [ 461.360126] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 461.363753] sock_write_iter+0x35e/0x5c0 [ 461.363772] ? sock_sendmsg+0x120/0x120 [ 461.363803] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 461.371912] FSBase=00007ff8c5140700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 461.375808] ? iov_iter_init+0xc2/0x1e0 [ 461.375826] __vfs_write+0x6b8/0x9f0 [ 461.375843] ? kernel_read+0x120/0x120 [ 461.375861] ? apparmor_path_rmdir+0x30/0x30 [ 461.375881] ? lock_release+0x970/0x970 [ 461.381404] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 461.385296] ? check_preemption_disabled+0x48/0x200 [ 461.385318] ? apparmor_file_permission+0x24/0x30 [ 461.385339] ? rw_verify_area+0x118/0x360 [ 461.389897] CR0=0000000080050033 CR3=00000001d1e19000 CR4=00000000001426e0 [ 461.397606] vfs_write+0x1fc/0x560 [ 461.397626] ksys_write+0x101/0x260 [ 461.397642] ? __ia32_sys_read+0xb0/0xb0 [ 461.397662] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 461.397681] __x64_sys_write+0x73/0xb0 [ 461.402031] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c01360 [ 461.406521] do_syscall_64+0x1b9/0x820 [ 461.406540] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 461.406570] ? syscall_return_slowpath+0x5e0/0x5e0 [ 461.406585] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 461.406606] ? trace_hardirqs_on_caller+0x310/0x310 [ 461.411102] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 461.415240] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 461.415265] ? prepare_exit_to_usermode+0x291/0x3b0 [ 461.415296] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 461.419655] *** Control State *** [ 461.425922] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.425935] RIP: 0033:0x457579 [ 461.425952] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 461.425960] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 461.430067] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 461.433896] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 461.433905] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 461.433914] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 461.433922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 461.433931] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 [ 461.491339] EntryControls=0000d1ff ExitControls=002fefff [ 461.572238] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 03:33:58 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000540)='veth1_to_bridge\x00', 0x38f) sendto(r0, &(0x7f0000000100)="85bd804049710d54555b0d5576c680eba75871369668524f223fabc29b65314c8a4118e3567112e7b59adc98b8ec569ecd72a3e06dd068a2556757134dbc514ca1d25d67e8fb05734158ca35ec3b7b20be77138276f6b2ff8b2953d0f946d11a9afdc30dded303061ca7773fb780259a7709b0dfd019ef573743c4a16970b802f62fc92dbf9494a7ead7719c3e9600f9108b4b92b93d35d3e2662808733716034795cb565a3c61997f5247733c5641c8f90cbdaeb515a5998505b7615c8f024ee9253405420413dc1228a90be61936d466425fe54f2bbb5320999ae6942bfda4f4", 0xe1, 0x4000, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x2, 0x0, 0x2, {0xa, 0x4e20, 0x1, @empty, 0x51}}}, 0x80) shutdown(r1, 0x2) 03:33:58 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000000c01005307a33d6c390836be381b", 0x1f) 03:33:58 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x4000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80002, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000140)={0x3, r1}) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x400000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) fsetxattr(r2, &(0x7f00000000c0)=@random={'user.', 'com.apple.system.Security\x00'}, &(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x15, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x8008550e, &(0x7f00000001c0)) 03:33:58 executing program 2: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "01000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x1, 0x1, 0x5, 0x7, 0x1, "d33724ed7c027929260ca345c68959718d7dd7825d4d2b7d049012d664bc60aafc83c0991bb033caf232468f582b671d5b73c7317e7a3ae84df7daf0b9613c", 0x1a}, 0x60) 03:33:58 executing program 3 (fault-call:9 fault-nth:45): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000340), 0x800) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast1, @multicast1}, &(0x7f00000003c0)=0xc) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000400)={@loopback, @mcast1, @loopback, 0x6, 0x8191, 0x1, 0x100, 0x4, 0x300, r3}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x40000, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r5, 0x8250aea6, &(0x7f0000000240)=""/239) ioctl$KVM_SMI(r5, 0xaeb7) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000140)={@empty, @local, r6}, 0x1) [ 461.576439] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 461.599923] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 461.648427] reason=80000021 qualification=0000000000000000 [ 461.657147] IDTVectoring: info=00000000 errcode=00000000 [ 461.657153] TSC Offset = 0xffffff0713b5cb2f [ 461.657159] TPR Threshold = 0x00 [ 461.657170] EPT pointer = 0x000000018863001e [ 461.861782] FAULT_INJECTION: forcing a failure. [ 461.861782] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 461.891379] CPU: 1 PID: 23431 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 461.899891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.909242] Call Trace: [ 461.909279] dump_stack+0x1d3/0x2c4 [ 461.909305] ? dump_stack_print_info.cold.2+0x52/0x52 [ 461.920701] should_fail.cold.4+0xa/0x17 [ 461.924769] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 461.929881] ? save_stack+0xa9/0xd0 [ 461.933518] ? save_stack+0x43/0xd0 [ 461.937148] ? kasan_kmalloc+0xc7/0xe0 [ 461.941034] ? __kmalloc+0x14e/0x760 [ 461.944761] ? sock_kmalloc+0x15a/0x1f0 [ 461.948753] ? af_alg_sendmsg+0xa1b/0x1260 [ 461.952989] ? aead_sendmsg+0x103/0x150 [ 461.957003] ? sock_sendmsg+0xd5/0x120 [ 461.960893] ? sock_write_iter+0x35e/0x5c0 [ 461.965129] ? __vfs_write+0x6b8/0x9f0 [ 461.969017] ? vfs_write+0x1fc/0x560 [ 461.972727] ? ksys_write+0x101/0x260 [ 461.976533] ? do_syscall_64+0x1b9/0x820 [ 461.980597] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.985965] ? cache_grow_end+0xa8/0x190 [ 461.990044] ? fs_reclaim_acquire+0x20/0x20 [ 461.994369] ? lock_downgrade+0x900/0x900 [ 461.998520] ? lock_release+0x970/0x970 [ 462.002495] ? check_same_owner+0x330/0x330 [ 462.006825] ? trace_hardirqs_on+0xbd/0x310 [ 462.011148] ? kasan_check_write+0x14/0x20 [ 462.015379] ? sock_kmalloc+0x15a/0x1f0 [ 462.019373] ? __might_sleep+0x95/0x190 [ 462.023356] __alloc_pages_nodemask+0x34b/0xdd0 [ 462.028027] ? lock_downgrade+0x900/0x900 [ 462.032180] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 462.037227] ? check_same_owner+0x330/0x330 [ 462.041556] ? sock_kmalloc+0x18a/0x1f0 [ 462.045533] ? iov_iter_npages+0xdd0/0xdd0 [ 462.050460] ? _copy_from_iter_full+0x2b8/0xc20 [ 462.055392] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 462.061378] ? af_alg_register_type+0x3f0/0x3f0 [ 462.066173] ? check_preemption_disabled+0x48/0x200 [ 462.071193] ? lock_sock_nested+0x9a/0x120 [ 462.075433] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 462.080994] alloc_pages_current+0x10c/0x210 [ 462.085737] af_alg_sendmsg+0xb08/0x1260 [ 462.090084] ? af_alg_pull_tsgl+0xd70/0xd70 [ 462.094697] aead_sendmsg+0x103/0x150 [ 462.098504] ? crypto_aead_copy_sgl+0x350/0x350 [ 462.103179] sock_sendmsg+0xd5/0x120 [ 462.107116] sock_write_iter+0x35e/0x5c0 [ 462.111703] ? sock_sendmsg+0x120/0x120 [ 462.116226] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 462.122145] ? iov_iter_init+0xc2/0x1e0 [ 462.126133] __vfs_write+0x6b8/0x9f0 [ 462.129862] ? kernel_read+0x120/0x120 [ 462.133752] ? apparmor_path_rmdir+0x30/0x30 [ 462.138166] ? lock_release+0x970/0x970 [ 462.142167] ? check_preemption_disabled+0x48/0x200 [ 462.147202] ? apparmor_file_permission+0x24/0x30 [ 462.152061] ? rw_verify_area+0x118/0x360 [ 462.156217] vfs_write+0x1fc/0x560 [ 462.159764] ksys_write+0x101/0x260 [ 462.163396] ? __ia32_sys_read+0xb0/0xb0 [ 462.167818] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 462.173452] __x64_sys_write+0x73/0xb0 [ 462.177374] do_syscall_64+0x1b9/0x820 [ 462.181708] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 462.187091] ? syscall_return_slowpath+0x5e0/0x5e0 [ 462.192021] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 462.196868] ? trace_hardirqs_on_caller+0x310/0x310 [ 462.202328] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 462.207498] ? prepare_exit_to_usermode+0x291/0x3b0 [ 462.212533] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 462.217409] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 462.222707] RIP: 0033:0x457579 [ 462.225909] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 462.245203] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 462.252917] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 03:33:59 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000200000001005307a33d6c390836be381b", 0x1f) 03:33:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0xffffffffffffff52) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffec8, 0x80000) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000001c0)={0x0, 0x7ffd, 0x6}, 0xfffffd39) sendmmsg(r1, &(0x7f0000006f40)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000002840)}}, {{&(0x7f0000001340)=@hci, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 03:33:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="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", 0x141, 0x7fff, &(0x7f0000357000)={0x2, 0x14e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x355, 0x0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x0) 03:33:59 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000000b01005307a33d6c390836be381b", 0x1f) [ 462.260185] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 462.267451] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 462.274716] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 462.281983] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x40) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0xbbe, 0x7, 0x23, &(0x7f0000ffc000/0x4000)=nil, 0x3f}) io_submit(r1, 0x39a, &(0x7f0000000240)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)}]) io_getevents(r1, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000040)={0x77359400}) 03:33:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000300)='system_u:object_r:audisp_exec_t:s0\x00', 0x23, 0x1) r2 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000003c0)=0xf) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x3ffff9, 0x0) r4 = accept4$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', r5}) setns(r3, 0x44000000) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000340)={0x3, 0x1000, 0x401}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="3ef00fc78b95cfb807008ee065650f06f36ebaf80c66b889c52e8f66efbafc0cec66b8186e00000f23d00f21f866350000000e0f23f80f01cbd03d670fc75d622e0f01cb", 0x44}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x2000}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x40}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f00000002c0)=@generic={0x3, 0x80, 0x5}) 03:33:59 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fdinfo/3\x00') r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x20802100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x5, &(0x7f00000001c0)=0xfffffffffffffffe) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), 0x6) 03:33:59 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff02000000f0000001005307a33d6c390836be381b", 0x1f) 03:33:59 executing program 0: socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2000000003, 0x5) connect$inet6(r0, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2, 0x200000007}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) socket$key(0xf, 0x3, 0x2) sendmsg(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002800)}, 0x0) 03:33:59 executing program 3 (fault-call:9 fault-nth:46): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:33:59 executing program 4: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x3, 0x2}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x7f, 0x7, 0x826, 0x3, 0x1, 0x3, 0x8, {0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={[], [], @broadcast}, 0x417a}}, 0x10cc, 0x9, 0x2, 0x4, 0x6}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x9}, 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) wait4(r1, &(0x7f0000000040), 0xa0000001, 0x0) 03:33:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) clock_gettime(0x6, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000), 0x1, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f00000000c0)={0x4}, 0x228) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet6(0xa, 0x3, 0x1ff) 03:33:59 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000614000001005307a33d6c390836be381b", 0x1f) 03:33:59 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000000701005307a33d6c390836be381b", 0x1f) [ 462.610829] FAULT_INJECTION: forcing a failure. [ 462.610829] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 462.645782] CPU: 0 PID: 23494 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 462.654303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.663667] Call Trace: [ 462.666283] dump_stack+0x1d3/0x2c4 [ 462.669935] ? dump_stack_print_info.cold.2+0x52/0x52 [ 462.675175] ? __switch_to_asm+0x34/0x70 [ 462.679292] ? __switch_to_asm+0x34/0x70 [ 462.683403] should_fail.cold.4+0xa/0x17 [ 462.687506] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 462.692618] ? __sched_text_start+0x8/0x8 [ 462.696798] ? kasan_kmalloc+0xc7/0xe0 [ 462.700692] ? __kmalloc+0x14e/0x760 [ 462.704415] ? sock_kmalloc+0x15a/0x1f0 [ 462.708403] ? af_alg_sendmsg+0xa1b/0x1260 [ 462.712649] ? aead_sendmsg+0x103/0x150 [ 462.716696] ? sock_sendmsg+0xd5/0x120 [ 462.720595] ? sock_write_iter+0x35e/0x5c0 [ 462.724839] ? __vfs_write+0x6b8/0x9f0 [ 462.728732] ? vfs_write+0x1fc/0x560 [ 462.732474] ? ksys_write+0x101/0x260 [ 462.736300] ? do_syscall_64+0x1b9/0x820 [ 462.740377] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 462.745753] ? retint_kernel+0x2d/0x2d [ 462.749675] ? trace_hardirqs_on_caller+0xc0/0x310 [ 462.754628] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 462.759399] ? trace_hardirqs_off+0x310/0x310 [ 462.763919] ? retint_kernel+0x1b/0x2d [ 462.767828] ? fs_reclaim_acquire+0x20/0x20 [ 462.772176] ? lock_downgrade+0x900/0x900 [ 462.776338] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 462.781119] ? lock_release+0x970/0x970 [ 462.785130] ? check_same_owner+0x330/0x330 [ 462.789475] ? __might_sleep+0x95/0x190 [ 462.793463] __alloc_pages_nodemask+0x34b/0xdd0 [ 462.798144] ? lock_downgrade+0x900/0x900 [ 462.802303] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 462.807328] ? check_same_owner+0x330/0x330 [ 462.811660] ? sock_kmalloc+0x18a/0x1f0 [ 462.815658] ? iov_iter_npages+0xdd0/0xdd0 [ 462.819916] ? _copy_from_iter_full+0x2b8/0xc20 [ 462.824598] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 462.830580] ? af_alg_register_type+0x3f0/0x3f0 [ 462.835255] ? check_preemption_disabled+0x48/0x200 [ 462.840287] ? lock_sock_nested+0x9a/0x120 [ 462.844529] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 462.850071] alloc_pages_current+0x10c/0x210 [ 462.854484] af_alg_sendmsg+0xb08/0x1260 [ 462.858556] ? af_alg_pull_tsgl+0xd70/0xd70 [ 462.862882] aead_sendmsg+0x103/0x150 [ 462.866682] ? crypto_aead_copy_sgl+0x350/0x350 [ 462.871353] sock_sendmsg+0xd5/0x120 [ 462.875071] sock_write_iter+0x35e/0x5c0 [ 462.879138] ? sock_sendmsg+0x120/0x120 [ 462.883139] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 462.888698] ? iov_iter_init+0xc2/0x1e0 [ 462.892686] __vfs_write+0x6b8/0x9f0 [ 462.896401] ? kernel_read+0x120/0x120 [ 462.900289] ? apparmor_path_rmdir+0x30/0x30 [ 462.904696] ? lock_release+0x970/0x970 [ 462.908671] ? check_preemption_disabled+0x48/0x200 [ 462.913688] ? apparmor_file_permission+0x24/0x30 [ 462.918532] ? rw_verify_area+0x118/0x360 [ 462.922684] vfs_write+0x1fc/0x560 [ 462.926227] ksys_write+0x101/0x260 [ 462.929860] ? __ia32_sys_read+0xb0/0xb0 [ 462.933924] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 462.939394] __x64_sys_write+0x73/0xb0 [ 462.943295] do_syscall_64+0x1b9/0x820 [ 462.947185] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 462.952548] ? syscall_return_slowpath+0x5e0/0x5e0 [ 462.957476] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 462.962334] ? trace_hardirqs_on_caller+0x310/0x310 [ 462.967351] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 462.972365] ? prepare_exit_to_usermode+0x291/0x3b0 [ 462.977386] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 462.982235] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 462.987434] RIP: 0033:0x457579 [ 462.990627] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:33:59 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000000801005307a33d6c390836be381b", 0x1f) [ 463.009524] RSP: 002b:00007fc640669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 463.017229] RAX: ffffffffffffffda RBX: 00007fc640669c90 RCX: 0000000000457579 [ 463.024495] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 463.031766] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 463.039044] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc64066a6d4 [ 463.046316] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:33:59 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff020000ffffff9e01005307a33d6c390836be381b", 0x1f) 03:33:59 executing program 3 (fault-call:9 fault-nth:47): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:34:00 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1fd, 0x1) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x400000, 0x309}]}) 03:34:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000140)) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000018000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007880)=[{{&(0x7f00000006c0)=@vsock, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000a00)=""/94, 0x5e}], 0x1, &(0x7f0000001c00)=""/150, 0x96}}], 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) io_getevents(r4, 0x7fff, 0x1, &(0x7f00000001c0)=[{}], &(0x7f0000000240)={r5, r6+30000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x4e4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000000)={r0, r2}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x40, &(0x7f00000065c0)={0x0, r7+30000000}) 03:34:00 executing program 2: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000080)={0x2, 0x404e23, @remote}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000100)={0x6, 0x1, 0x9, 'queue0\x00', 0x9}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f00000000c0)) write(r0, &(0x7f0000000900)="89", 0x1) sendto$inet(r0, &(0x7f00000003c0), 0xfffffdef, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr, [0x2000000]}, 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0xb0, "297e3f9abffa10ab40e5bbddf18c13ffa97d837829312e5839b9ac8a8fd3f6fc5249d93e8b680f863217b6d40aadb01fec07f9b61bf096b0367276b89fe5aae71cef6ee11f726804a1629eab90dd4f8abbbb8cd25b77618bd097e789174fcbcc6825ade2f310e0b67efd3486f30603e9e807d20a903d1de597ee8b9ae0e999eba0c74987b054e7e7c7e1f7d33825656d264e9b269554fd055bceac8e74b3136d7e437d2bbf71125350e8ab09baf78857"}, &(0x7f0000000200)=0xb8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r3, 0x100000001, 0x8}, 0xc) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:34:00 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000ec0000001005307a33d6c390836be381b", 0x1f) [ 463.350655] FAULT_INJECTION: forcing a failure. [ 463.350655] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 463.368759] CPU: 1 PID: 23525 Comm: syz-executor3 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 463.377286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.386649] Call Trace: [ 463.389276] dump_stack+0x1d3/0x2c4 [ 463.392940] ? dump_stack_print_info.cold.2+0x52/0x52 03:34:00 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000b00000001005307a33d6c390836be381b", 0x1f) [ 463.398171] should_fail.cold.4+0xa/0x17 [ 463.402272] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 463.407409] ? save_stack+0xa9/0xd0 [ 463.411050] ? save_stack+0x43/0xd0 [ 463.414690] ? kasan_kmalloc+0xc7/0xe0 [ 463.418602] ? __kmalloc+0x14e/0x760 [ 463.422331] ? sock_kmalloc+0x15a/0x1f0 [ 463.426320] ? af_alg_sendmsg+0xa1b/0x1260 [ 463.430567] ? aead_sendmsg+0x103/0x150 [ 463.434548] ? sock_sendmsg+0xd5/0x120 [ 463.438450] ? sock_write_iter+0x35e/0x5c0 [ 463.442702] ? __vfs_write+0x6b8/0x9f0 [ 463.446612] ? vfs_write+0x1fc/0x560 [ 463.450340] ? ksys_write+0x101/0x260 [ 463.454157] ? do_syscall_64+0x1b9/0x820 [ 463.458234] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 463.463773] ? fs_reclaim_acquire+0x20/0x20 [ 463.468113] ? lock_downgrade+0x900/0x900 [ 463.472287] ? lock_release+0x970/0x970 [ 463.476284] ? check_same_owner+0x330/0x330 [ 463.480629] ? trace_hardirqs_on+0xbd/0x310 [ 463.484968] ? lock_downgrade+0x900/0x900 [ 463.489131] ? sock_kmalloc+0x15a/0x1f0 [ 463.493120] ? __might_sleep+0x95/0x190 03:34:00 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000900)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) openat$nullb(0xffffffffffffff9c, &(0x7f0000000540)='/dev/nullb0\x00', 0x6, 0x0) syz_open_dev$midi(&(0x7f00000003c0)='/dev/midi#\x00', 0x0, 0x0) socket$inet6(0xa, 0x807, 0x80000000) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x8000000}, 0x1c) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000240)) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r6, 0x1}) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) [ 463.497106] __alloc_pages_nodemask+0x34b/0xdd0 [ 463.501797] ? lock_downgrade+0x900/0x900 [ 463.505976] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 463.511004] ? check_same_owner+0x330/0x330 [ 463.515348] ? sock_kmalloc+0x18a/0x1f0 [ 463.519352] ? iov_iter_npages+0xdd0/0xdd0 [ 463.523609] ? _copy_from_iter_full+0x2b8/0xc20 [ 463.528319] ? trace_raw_output_preemptirq_template+0x71/0x130 [ 463.534319] ? af_alg_register_type+0x3f0/0x3f0 [ 463.539008] ? check_preemption_disabled+0x48/0x200 [ 463.544046] ? lock_sock_nested+0x9a/0x120 [ 463.548310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 463.553870] alloc_pages_current+0x10c/0x210 [ 463.558305] af_alg_sendmsg+0xb08/0x1260 [ 463.562403] ? af_alg_pull_tsgl+0xd70/0xd70 [ 463.566759] aead_sendmsg+0x103/0x150 [ 463.570581] ? crypto_aead_copy_sgl+0x350/0x350 [ 463.575275] sock_sendmsg+0xd5/0x120 [ 463.579022] sock_write_iter+0x35e/0x5c0 [ 463.583103] ? sock_sendmsg+0x120/0x120 [ 463.587107] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 463.592663] ? iov_iter_init+0xc2/0x1e0 [ 463.596655] __vfs_write+0x6b8/0x9f0 [ 463.600386] ? kernel_read+0x120/0x120 [ 463.604304] ? apparmor_path_rmdir+0x30/0x30 [ 463.608729] ? lock_release+0x970/0x970 [ 463.612726] ? check_preemption_disabled+0x48/0x200 [ 463.617767] ? apparmor_file_permission+0x24/0x30 [ 463.622636] ? rw_verify_area+0x118/0x360 [ 463.626806] vfs_write+0x1fc/0x560 [ 463.630365] ksys_write+0x101/0x260 [ 463.634003] ? __ia32_sys_read+0xb0/0xb0 [ 463.638088] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 463.643557] __x64_sys_write+0x73/0xb0 [ 463.647467] do_syscall_64+0x1b9/0x820 [ 463.651371] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 463.656755] ? syscall_return_slowpath+0x5e0/0x5e0 [ 463.661708] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 463.666573] ? trace_hardirqs_on_caller+0x310/0x310 [ 463.671617] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 463.676652] ? prepare_exit_to_usermode+0x291/0x3b0 [ 463.681689] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 463.686579] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 463.691781] RIP: 0033:0x457579 [ 463.694987] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 463.713904] RSP: 002b:00007fc640627c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 463.721641] RAX: ffffffffffffffda RBX: 00007fc640627c90 RCX: 0000000000457579 [ 463.728920] RDX: 00000000ffffffaa RSI: 0000000020000300 RDI: 0000000000000005 [ 463.736200] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 463.743930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc6406286d4 [ 463.751221] R13: 00000000004c5560 R14: 00000000004d8e80 R15: 0000000000000006 03:34:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @remote}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80040, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000380)=0xc) rt_sigqueueinfo(r6, 0x20, &(0x7f00000003c0)={0x1, 0x5, 0xfffffffffffffffb, 0x8}) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@remote, @in6=@remote, 0x4e23, 0x400, 0x4e21, 0x69b, 0xa, 0x80, 0xa0, 0x0, r3, r5}, {0x100000001, 0x1000, 0x1ff, 0x3a2, 0x4, 0x7f, 0x3, 0x6}, {0x4, 0xffffffffffff9c1a, 0x3ff}, 0xbd77, 0x6e6bbb, 0x1, 0x1, 0x2}, {{@in6=@ipv4={[], [], @loopback}, 0x4d4, 0x3e}, 0xa, @in6, 0x3504, 0x6, 0x0, 0x0, 0x5, 0x9, 0x3c}}, 0xe8) write$P9_RATTACH(r4, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x20, 0x1, 0x4}}, 0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6}, 0x10) dup3(r1, r2, 0x0) 03:34:00 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000c00000001005307a33d6c390836be381b", 0x1f) 03:34:00 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000000000d01005307a33d6c390836be381b", 0x1f) 03:34:00 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000600000001005307a33d6c390836be381b", 0x1f) [ 463.929897] device veth0_to_bridge entered promiscuous mode [ 463.949032] device veth0_to_bridge left promiscuous mode 03:34:00 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@local, @loopback, @empty, 0x0, 0x40, 0x0, 0x100, 0x1}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xff, 0x400840) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x3, 0x0, [{0x981, 0x0, 0xffffffffffffff7f}, {0x9e4}, {0x3a9, 0x0, 0x3}]}) [ 464.015465] device veth0_to_bridge entered promiscuous mode [ 464.041104] device veth0_to_bridge left promiscuous mode [ 464.191272] cgroup: fork rejected by pids controller in /syz2 03:34:03 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) 03:34:03 executing program 0: fsetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='com.apple.system.Security\x00', &(0x7f0000000300)='mime_typevmnet0-wlan0(\x00', 0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={"6c6f0000000001fff300", 0x0}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000900)={0x0, 0xf0d, "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"}, &(0x7f00000001c0)=0xf15) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000880)={0x7, 0x10000, 0x9f, 0x0, 0xf}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r3, 0x100}, &(0x7f0000000280)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000380)={"62707130000b00000000000000faff00", r2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x502}) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000001940)) sendmsg$alg(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x4000080}, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x0, 0x2, 0x8cc, 0x6}, {0x0, 0xfffffffffffffeff, 0x81, 0xd54}, {0x7c67, 0x6, 0x1000, 0x33f}, {0x9, 0x400, 0x4, 0x8}, {0xfff, 0x3, 0x20, 0x7}, {0x9, 0x40, 0x6}, {0x1, 0x4, 0x1, 0x5}, {0x5, 0x7, 0x8000, 0x3}]}) 03:34:03 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000d00000001005307a33d6c390836be381b", 0x1f) 03:34:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_init() 03:34:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff030}, {0x6}]}, 0x10) 03:34:03 executing program 4: r0 = timerfd_create(0x20000000008, 0x80800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8000400200) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400100, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8d, 0x9, 0xb, 0x1, "37a88a9e18d9c06dd0c37f891404f07a69776a053d1e3a9859eb02ffb42a136008a88a1d67c8337d4b2da90c785e6042ea6eb7f88863194515a3d5db393a2dd3", "cb18e28983741741c077c8b423479c7c199fb8c2bfff9412abf381be62269545", [0x2, 0x100]}) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000100)) read(r0, &(0x7f0000a16000)=""/71, 0x47) 03:34:03 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200001406000001005307a33d6c390836be381b", 0x1f) 03:34:03 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100000000042040, 0x0) 03:34:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, "4f019b55a1be58df7b55762023ad56d08f16133d2099807ad4d300"}) 03:34:03 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x2, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000004c0)={@local, @multicast2}, &(0x7f0000000580)=0xc) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) mount$9p_rdma(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f00000005c0)}}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574ffffffc30000000000bd6800", 0x43732e5398416f17}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x100, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, &(0x7f0000000240)=""/190) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001a00)={0x0, 0x7}, &(0x7f0000001a40)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x5, 0x4, 0x5, 0x0, 0x5}, &(0x7f00000003c0)=0x14) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x200101, 0x0) 03:34:03 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000240)={0x1f, 0x8, 0x0, 0x5}) r1 = accept4(r0, &(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0xeb, "3e67aadf2128ccf14cefabcd04cbaf577d13d78d2a5f34cf68e4e95cc0aec22054975e124f77ddf8c981d35461d9769fe358fd6eb706b229ba8cfc14e8d0ab0bb481230d6daa49d028c01e1e7f9f231beb329bad8d6f3efaa7bff444827e5fc74a6f1e2c0751cb9d74ee4dd7711a8f5e98051ea42bfce11854a2080623892bbc8337a4bf8a7de56528ee30fe8338ce78343e58af02b6be9632552bb58824b588398d323ed0cc0724234da5bd578a98fdafb40694099d9c57ac75cb1a6263a415aee4eda8fb91c1158e4783a933f75b94052f8ba295c617410904765ba496dc676c76ec82589d45eae4f37b"}, &(0x7f0000000400)=0xf3) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000440)={r2, 0x3}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x17060000, 0x4000000000000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x500, 0x0, 0x0, 0x0, 0x0, 0xa00}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xf0ffffff00000000}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x84) signalfd(r0, &(0x7f0000000480), 0x8) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) 03:34:03 executing program 1: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e000ff1fff5ff0200000040030001005307a33d6c390836be381b", 0x1f) 03:34:03 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0x1200002aa) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/113, 0x7ffff000}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe71}}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000016) [ 466.704135] ================================================================== [ 466.711622] BUG: KASAN: use-after-free in rtnl_fill_ifinfo+0x420e/0x4670 [ 466.718480] Read of size 8 at addr ffff8801c1864498 by task syz-executor4/23613 [ 466.725920] [ 466.727670] CPU: 0 PID: 23613 Comm: syz-executor4 Not tainted 4.19.0-rc5-next-20180928+ #84 [ 466.736155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.745503] Call Trace: [ 466.748099] dump_stack+0x1d3/0x2c4 [ 466.751911] ? dump_stack_print_info.cold.2+0x52/0x52 [ 466.757265] ? printk+0xa7/0xcf [ 466.760551] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 466.765317] print_address_description.cold.8+0x9/0x1ff [ 466.770687] kasan_report.cold.9+0x242/0x309 [ 466.775148] ? rtnl_fill_ifinfo+0x420e/0x4670 [ 466.779647] __asan_report_load8_noabort+0x14/0x20 [ 466.784636] rtnl_fill_ifinfo+0x420e/0x4670 [ 466.789051] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 466.794143] ? rtnl_fill_vf+0x4c0/0x4c0 [ 466.798138] ? mark_held_locks+0x130/0x130 [ 466.802386] ? trace_hardirqs_off+0x310/0x310 [ 466.806895] ? write_comp_data+0x20/0x70 [ 466.811093] ? mark_held_locks+0x130/0x130 [ 466.815344] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 466.820137] ? retint_kernel+0x2d/0x2d [ 466.824041] ? retint_kernel+0x2d/0x2d [ 466.827932] ? trace_hardirqs_on_caller+0xc0/0x310 [ 466.832875] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 466.837661] ? trace_hardirqs_off+0x310/0x310 [ 466.842239] ? trace_hardirqs_on_caller+0xc0/0x310 [ 466.847199] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 466.852031] ? trace_hardirqs_off+0x310/0x310 [ 466.856542] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 466.861568] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 466.866645] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 466.871403] ? retint_kernel+0x2d/0x2d [ 466.875304] ? trace_hardirqs_on_caller+0xc0/0x310 [ 466.880249] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 466.885011] ? trace_hardirqs_off+0x310/0x310 [ 466.889509] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 466.894524] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 466.899343] ? is_bpf_text_address+0xac/0x170 [ 466.903843] ? lock_downgrade+0x900/0x900 [ 466.908003] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 466.912961] ? __module_address+0x8/0x720 [ 466.917171] ? is_bpf_text_address+0xd3/0x170 [ 466.921671] ? kernel_text_address+0x79/0xf0 [ 466.926083] ? __kernel_text_address+0xd/0x40 [ 466.930582] ? unwind_get_return_address+0x61/0xa0 [ 466.935578] ? __save_stack_trace+0x8d/0xf0 [ 466.939923] ? save_stack+0xa9/0xd0 [ 466.943552] ? save_stack+0x43/0xd0 [ 466.947179] ? kasan_kmalloc+0xc7/0xe0 [ 466.951229] ? __kmalloc_node_track_caller+0x47/0x70 [ 466.956348] ? __kmalloc_reserve.isra.39+0x41/0xe0 [ 466.961363] ? __alloc_skb+0x150/0x770 [ 466.965258] ? rtmsg_ifinfo_build_skb+0x74/0x190 [ 466.970041] ? rtmsg_ifinfo_event.part.31+0x45/0xe0 [ 466.975130] ? rtmsg_ifinfo+0x8c/0xa0 [ 466.978961] ? netdev_state_change+0x152/0x1a0 [ 466.983543] ? do_setlink+0x2680/0x3f20 [ 466.987526] ? rtnl_newlink+0x1573/0x1d40 [ 466.991690] ? rtnetlink_rcv_msg+0x46a/0xc20 [ 466.996097] ? netlink_rcv_skb+0x172/0x440 [ 467.000337] ? rtnetlink_rcv+0x1c/0x20 [ 467.004248] ? netlink_unicast+0x5a5/0x760 [ 467.008494] ? netlink_sendmsg+0xa18/0xfc0 [ 467.012772] ? sock_sendmsg+0xd5/0x120 [ 467.016662] ? ___sys_sendmsg+0x7fd/0x930 [ 467.020813] ? __sys_sendmsg+0x11d/0x280 [ 467.024876] ? __x64_sys_sendmsg+0x78/0xb0 [ 467.029113] ? do_syscall_64+0x1b9/0x820 [ 467.033293] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 467.038797] ? retint_kernel+0x2d/0x2d [ 467.042700] ? trace_hardirqs_on_caller+0xc0/0x310 [ 467.047770] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 467.052534] ? trace_hardirqs_off+0x310/0x310 [ 467.057029] ? retint_kernel+0x2d/0x2d [ 467.060923] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 467.065693] ? retint_kernel+0x2d/0x2d [ 467.069637] ? __phys_addr+0x5b/0x120 [ 467.073450] ? __phys_addr+0x8c/0x120 [ 467.077257] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 467.082801] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 467.088351] ? __alloc_skb+0x4c1/0x770 [ 467.092261] ? skb_scrub_packet+0x490/0x490 [ 467.096604] ? if_nlmsg_size+0x5d1/0xbb0 [ 467.100687] ? nla_put_ifalias+0x170/0x170 [ 467.104941] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 467.110493] ? notifier_call_chain+0x2d4/0x380 [ 467.115077] rtmsg_ifinfo_build_skb+0xc9/0x190 [ 467.119721] rtmsg_ifinfo_event.part.31+0x45/0xe0 [ 467.124609] rtmsg_ifinfo+0x8c/0xa0 [ 467.128271] netdev_state_change+0x152/0x1a0 [ 467.132804] ? arch_local_irq_restore+0x60/0x60 [ 467.137528] ? dev_change_flags+0x102/0x150 [ 467.141923] do_setlink+0x2680/0x3f20 [ 467.145775] ? lock_downgrade+0x900/0x900 [ 467.149944] ? validate_linkmsg+0xa50/0xa50 [ 467.154280] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 467.158989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 467.164599] ? check_preemption_disabled+0x48/0x200 [ 467.169630] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 467.175180] ? check_preemption_disabled+0x48/0x200 [ 467.180219] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 467.185801] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 467.191011] ? perf_sched_cb_inc+0x350/0x350 [ 467.195537] ? finish_task_switch+0x1f5/0x900 [ 467.200049] ? lock_downgrade+0x900/0x900 [ 467.204342] ? retint_kernel+0x2d/0x2d [ 467.208248] ? retint_kernel+0x2d/0x2d [ 467.212149] ? trace_hardirqs_on_caller+0xc0/0x310 [ 467.217135] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 467.221948] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 467.226707] ? trace_hardirqs_off+0x310/0x310 [ 467.231298] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 467.236327] ? validate_nla+0x33a/0x9c0 [ 467.240319] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 467.245137] ? retint_kernel+0x2d/0x2d [ 467.249101] rtnl_newlink+0x1573/0x1d40 [ 467.253214] ? rtnl_link_unregister+0x390/0x390 [ 467.257944] ? mutex_spin_on_owner+0x2e3/0x540 [ 467.262552] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 467.267544] ? __kprobes_text_end+0xc4388/0xc4388 [ 467.272400] ? retint_kernel+0x2d/0x2d [ 467.276303] ? trace_hardirqs_on_caller+0xc0/0x310 [ 467.281245] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 467.286007] ? __mutex_lock+0x854/0x1700 [ 467.290074] ? lock_downgrade+0x900/0x900 [ 467.294239] ? debug_mutex_add_waiter+0x230/0x230 [ 467.299091] ? kasan_check_read+0x11/0x20 [ 467.303241] ? do_raw_spin_unlock+0xa7/0x2f0 [ 467.307667] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 467.312265] ? debug_mutex_wake_waiter+0x630/0x630 [ 467.317205] ? kasan_check_write+0x14/0x20 [ 467.321450] ? do_raw_spin_lock+0xc1/0x200 [ 467.325805] ? _raw_spin_unlock+0x2c/0x50 [ 467.330043] ? __mutex_lock+0x85e/0x1700 [ 467.334108] ? rtnetlink_rcv_msg+0x40e/0xc20 [ 467.338526] ? mutex_trylock+0x2b0/0x2b0 [ 467.342614] ? _raw_spin_unlock_irq+0x60/0x80 [ 467.347129] ? finish_task_switch+0x1f5/0x900 [ 467.351637] ? finish_task_switch+0x1b5/0x900 [ 467.356158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 467.361771] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 467.367325] ? rtnl_get_link+0x170/0x370 [ 467.371405] ? rtnl_dump_all+0x570/0x570 [ 467.375492] ? rtnl_link_unregister+0x390/0x390 [ 467.380176] rtnetlink_rcv_msg+0x46a/0xc20 [ 467.384430] ? rtnetlink_put_metrics+0x690/0x690 [ 467.389209] netlink_rcv_skb+0x172/0x440 [ 467.393288] ? rtnetlink_put_metrics+0x690/0x690 [ 467.398062] ? netlink_ack+0xb80/0xb80 [ 467.402034] rtnetlink_rcv+0x1c/0x20 [ 467.405791] netlink_unicast+0x5a5/0x760 [ 467.409875] ? netlink_attachskb+0x9a0/0x9a0 [ 467.414301] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 467.419393] netlink_sendmsg+0xa18/0xfc0 [ 467.423473] ? netlink_unicast+0x760/0x760 [ 467.427722] ? aa_sock_msg_perm.isra.12+0xba/0x160 [ 467.432704] ? apparmor_socket_sendmsg+0x29/0x30 [ 467.437505] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 467.443058] ? security_socket_sendmsg+0x94/0xc0 [ 467.447830] ? netlink_unicast+0x760/0x760 [ 467.452088] sock_sendmsg+0xd5/0x120 [ 467.455820] ___sys_sendmsg+0x7fd/0x930 [ 467.459814] ? trace_hardirqs_off+0x310/0x310 [ 467.464813] ? copy_msghdr_from_user+0x580/0x580 [ 467.469589] ? retint_kernel+0x2d/0x2d [ 467.473492] ? trace_hardirqs_on_caller+0xc0/0x310 [ 467.478440] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 467.483215] ? __fget_light+0x2e9/0x430 [ 467.487203] ? fget_raw+0x20/0x20 [ 467.490677] ? lock_downgrade+0x900/0x900 [ 467.494844] ? lock_release+0x970/0x970 [ 467.498838] ? check_same_owner+0x330/0x330 [ 467.503183] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 467.508766] ? sockfd_lookup_light+0xc5/0x160 [ 467.513286] __sys_sendmsg+0x11d/0x280 [ 467.517194] ? __ia32_sys_shutdown+0x80/0x80 [ 467.521619] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 467.527171] ? put_timespec64+0x10f/0x1b0 [ 467.531345] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 467.536841] __x64_sys_sendmsg+0x78/0xb0 [ 467.540918] do_syscall_64+0x1b9/0x820 [ 467.544826] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 467.550210] ? syscall_return_slowpath+0x5e0/0x5e0 [ 467.555153] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 467.560010] ? trace_hardirqs_on_caller+0x310/0x310 [ 467.565040] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 467.570071] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 467.575687] ? prepare_exit_to_usermode+0x291/0x3b0 [ 467.580723] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 467.585687] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 467.590899] RIP: 0033:0x457579 [ 467.594110] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 467.613024] RSP: 002b:00007ff8c513fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.620772] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 467.628051] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 467.635331] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 467.642614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8c51406d4 [ 467.650058] R13: 00000000004c38b9 R14: 00000000004d5700 R15: 00000000ffffffff [ 467.657405] [ 467.659039] Allocated by task 7121: [ 467.662677] save_stack+0x43/0xd0 [ 467.666145] kasan_kmalloc+0xc7/0xe0 [ 467.669873] __kmalloc_node+0x47/0x70 [ 467.673683] qdisc_alloc+0x10f/0xb50 [ 467.677410] qdisc_create_dflt+0x7a/0x1e0 [ 467.681571] dev_activate+0x82f/0xcb0 [ 467.685394] __dev_open+0x2cb/0x410 [ 467.689032] __dev_change_flags+0x730/0x9b0 [ 467.693364] dev_change_flags+0x89/0x150 [ 467.697440] do_setlink+0xb5f/0x3f20 [ 467.701168] rtnl_newlink+0x136f/0x1d40 [ 467.705152] rtnetlink_rcv_msg+0x46a/0xc20 [ 467.709397] netlink_rcv_skb+0x172/0x440 [ 467.713467] rtnetlink_rcv+0x1c/0x20 [ 467.717196] netlink_unicast+0x5a5/0x760 [ 467.721271] netlink_sendmsg+0xa18/0xfc0 [ 467.725346] sock_sendmsg+0xd5/0x120 [ 467.729072] ___sys_sendmsg+0x7fd/0x930 [ 467.733060] __sys_sendmsg+0x11d/0x280 [ 467.736963] __x64_sys_sendmsg+0x78/0xb0 [ 467.741038] do_syscall_64+0x1b9/0x820 [ 467.744945] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 467.750133] [ 467.751782] Freed by task 19454: [ 467.755158] save_stack+0x43/0xd0 [ 467.758624] __kasan_slab_free+0x102/0x150 [ 467.762871] kasan_slab_free+0xe/0x10 [ 467.766773] kfree+0xcf/0x230 [ 467.769895] qdisc_free+0x89/0x100 [ 467.773448] qdisc_free_cb+0x19/0x20 [ 467.777173] rcu_process_callbacks+0xff9/0x1ad0 [ 467.781859] __do_softirq+0x30b/0xb03 [ 467.785663] [ 467.787300] The buggy address belongs to the object at ffff8801c1864480 [ 467.787300] which belongs to the cache kmalloc-2k of size 2048 [ 467.800031] The buggy address is located 24 bytes inside of [ 467.800031] 2048-byte region [ffff8801c1864480, ffff8801c1864c80) [ 467.811916] The buggy address belongs to the page: [ 467.816858] page:ffffea0007061900 count:1 mapcount:0 mapping:ffff8801da800c40 index:0xffff8801c1864480 compound_mapcount: 0 [ 467.828144] flags: 0x2fffc0000010200(slab|head) [ 467.832833] raw: 02fffc0000010200 ffffea000701ab88 ffffea000645cb88 ffff8801da800c40 [ 467.840764] raw: ffff8801c1864480 ffff8801c1864480 0000000100000002 0000000000000000 [ 467.848652] page dumped because: kasan: bad access detected [ 467.854362] [ 467.855991] Memory state around the buggy address: [ 467.860929] ffff8801c1864380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 467.868296] ffff8801c1864400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 467.875664] >ffff8801c1864480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 467.883026] ^ [ 467.887249] ffff8801c1864500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 467.894620] ffff8801c1864580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 467.901983] ================================================================== [ 467.910006] kernel tried to execute NX-protected page - exploit attempt? (uid: 0) [ 467.917795] BUG: unable to handle kernel paging request at ffff8801c3002a80 [ 467.925036] PGD bc01067 P4D bc01067 PUD 1d9461063 PMD 1b978a063 PTE 80000001c3002163 [ 467.932960] Oops: 0011 [#1] PREEMPT SMP KASAN [ 467.937456] CPU: 0 PID: 23613 Comm: syz-executor4 Tainted: G B 4.19.0-rc5-next-20180928+ #84 [ 467.947331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.956820] RIP: 0010:0xffff8801c3002a80 [ 467.960879] Code: ff ff 3e 44 a2 86 ff ff ff ff bc 42 a2 86 ff ff ff ff f5 43 a2 86 ff ff ff ff 3e 44 a2 86 ff ff ff ff bc 42 a2 86 ff ff ff ff 43 a2 86 ff ff ff ff 3e 44 a2 86 ff ff ff ff bc 42 a2 86 ff ff [ 467.979919] RSP: 0018:ffff8801dae06b78 EFLAGS: 00010292 [ 467.985281] RAX: ffff8801c3002a80 RBX: ffff8801c0d3a140 RCX: ffffffff860c7d0f [ 467.992547] RDX: ffff8801dae06d20 RSI: ffff8801c1864480 RDI: ffff8801c0d3a140 [ 467.999876] RBP: ffff8801dae070d0 R08: ffff88018aab8000 R09: 0000000000000000 [ 468.007160] R10: ffff8801dae070e8 R11: 0000000000000000 R12: 0000000000000000 [ 468.014428] R13: ffff8801c1864480 R14: 0000000000000100 R15: 0000000000000000 [ 468.021697] FS: 00007ff8c5140700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 468.029922] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.035861] CR2: ffff8801c3002a80 CR3: 00000001cd722000 CR4: 00000000001426f0 [ 468.043199] Call Trace: [ 468.045836] [ 468.047990] ? __dev_queue_xmit+0x1837/0x3950 [ 468.052557] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 468.057664] ? netdev_pick_tx+0x2d0/0x2d0 [ 468.061870] ? debug_object_free+0x690/0x690 [ 468.066282] ? save_stack+0x20/0xd0 [ 468.069909] ? save_stack+0x43/0xd0 [ 468.073536] ? kasan_kmalloc+0xc7/0xe0 [ 468.077433] ? __kmalloc+0x14e/0x760 [ 468.081153] ? __neigh_create+0x30b/0x2130 [ 468.085404] ? ip6_finish_output+0x4de/0xbc0 [ 468.089811] ? ip6_output+0x23e/0x9f0 [ 468.093669] ? mld_sendpack+0xae7/0xfb0 [ 468.097641] ? mld_ifc_timer_expire+0x447/0x8a0 [ 468.102309] ? call_timer_fn+0x26d/0x920 [ 468.106369] ? __run_timers+0x7e0/0xc60 [ 468.110340] ? run_timer_softirq+0x52/0xb0 [ 468.114573] ? irq_exit+0x17f/0x1c0 [ 468.118217] ? mark_held_locks+0x130/0x130 [ 468.122466] ? rtmsg_ifinfo+0x8c/0xa0 [ 468.126278] ? netdev_state_change+0x152/0x1a0 [ 468.130877] ? rtnl_newlink+0x1573/0x1d40 [ 468.135040] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 468.140579] ? refcount_sub_and_test_checked+0x203/0x310 [ 468.146039] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 468.151505] ? __neigh_create+0x1505/0x2130 [ 468.155829] ? lock_downgrade+0x900/0x900 [ 468.159988] ? trace_hardirqs_on+0xbd/0x310 [ 468.164335] ? lock_release+0x970/0x970 [ 468.168478] ? _raw_write_unlock_bh+0x30/0x40 [ 468.172982] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 468.178433] ? ndisc_constructor+0x756/0xc40 [ 468.182853] ? do_raw_write_trylock+0x1c0/0x1c0 [ 468.187520] ? __neigh_create+0x1505/0x2130 [ 468.191841] ? __local_bh_enable_ip+0x160/0x260 [ 468.196513] ? _raw_write_unlock_bh+0x30/0x40 [ 468.201071] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 468.206613] ? ip6_finish_output2+0xc91/0x27a0 [ 468.211202] ? lock_downgrade+0x900/0x900 [ 468.215354] ? trace_hardirqs_on+0xbd/0x310 [ 468.219676] ? memcpy+0x45/0x50 [ 468.222955] dev_queue_xmit+0x17/0x20 [ 468.226780] ? dev_queue_xmit+0x17/0x20 [ 468.230798] neigh_resolve_output+0x67e/0xae0 [ 468.235311] ? __neigh_event_send+0x1390/0x1390 [ 468.240008] ip6_finish_output2+0xc91/0x27a0 [ 468.244437] ? ip6_copy_metadata+0xe30/0xe30 [ 468.248849] ? ip6_mtu+0x39c/0x520 [ 468.252402] ? lock_downgrade+0x900/0x900 [ 468.256551] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 468.261609] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 468.267155] ? ipv6_confirm+0x46e/0x650 [ 468.271131] ? ipv6_helper+0x3ab/0x540 [ 468.275023] ? ip6_mtu+0x160/0x520 [ 468.278563] ? dst_hold+0x2f0/0x2f0 [ 468.282193] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 468.287767] ? nf_nat_ipv6_out+0x212/0x550 [ 468.292249] ip6_finish_output+0x4de/0xbc0 [ 468.296497] ? ip6_finish_output+0x4de/0xbc0 [ 468.300909] ip6_output+0x23e/0x9f0 [ 468.304540] ? ip6_finish_output+0xbc0/0xbc0 [ 468.308950] ? ip6_fragment+0x38e0/0x38e0 [ 468.313108] ? ip6_mtu_from_fib6+0x770/0x770 [ 468.317535] mld_sendpack+0xae7/0xfb0 [ 468.321353] ? nf_hook.constprop.41+0x960/0x960 [ 468.326050] ? _raw_read_unlock_bh+0x30/0x40 [ 468.330476] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 468.335986] ? __local_bh_enable_ip+0x160/0x260 [ 468.340656] mld_ifc_timer_expire+0x447/0x8a0 [ 468.345206] call_timer_fn+0x26d/0x920 [ 468.349180] ? mld_dad_timer_expire+0x1b0/0x1b0 [ 468.353878] ? process_timeout+0x40/0x40 [ 468.357952] ? trace_hardirqs_off+0xb8/0x310 [ 468.362420] ? kasan_check_read+0x11/0x20 [ 468.366578] ? do_raw_spin_unlock+0xa7/0x2f0 [ 468.371052] ? trace_hardirqs_on+0x310/0x310 [ 468.375461] ? __run_timers+0x7d5/0xc60 [ 468.379446] ? lock_downgrade+0x900/0x900 [ 468.383600] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 468.388716] ? trace_hardirqs_on+0xbd/0x310 [ 468.393125] ? kasan_check_read+0x11/0x20 [ 468.397273] ? __run_timers+0x7d5/0xc60 [ 468.401509] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 468.407027] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 468.412585] ? mld_dad_timer_expire+0x1b0/0x1b0 [ 468.417253] __run_timers+0x7e0/0xc60 [ 468.421073] ? __bpf_trace_timer_expire_entry+0x30/0x30 [ 468.426453] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 468.431477] ? timerqueue_add+0x207/0x2b0 [ 468.435655] ? enqueue_hrtimer+0x1a0/0x560 [ 468.439898] ? lock_release+0x970/0x970 [ 468.443876] ? hrtimer_update_softirq_timer+0xa0/0xa0 [ 468.449080] ? kasan_check_write+0x14/0x20 [ 468.453322] ? pvclock_read_flags+0x160/0x160 [ 468.457818] ? lock_downgrade+0x900/0x900 [ 468.461967] ? trace_hardirqs_on+0xbd/0x310 [ 468.466297] ? kvm_sched_clock_read+0x9/0x20 [ 468.470795] ? irq_exit+0x17f/0x1c0 [ 468.474436] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 468.479989] ? check_preemption_disabled+0x48/0x200 [ 468.485015] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 468.490625] run_timer_softirq+0x52/0xb0 [ 468.494833] ? __this_cpu_preempt_check+0x1c/0x1f [ 468.499692] __do_softirq+0x30b/0xb03 [ 468.503509] ? __irqentry_text_end+0x1f9698/0x1f9698 [ 468.508629] ? pvclock_read_flags+0x160/0x160 [ 468.513125] ? lapic_next_event+0x5a/0x90 [ 468.517278] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 468.522817] ? clockevents_program_event+0x140/0x370 [ 468.527924] ? kvm_clock_read+0x18/0x30 [ 468.531901] ? kvm_sched_clock_read+0x9/0x20 [ 468.536319] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 468.541871] ? check_preemption_disabled+0x48/0x200 [ 468.546904] irq_exit+0x17f/0x1c0 [ 468.550382] smp_apic_timer_interrupt+0x1cb/0x750 [ 468.555238] ? smp_call_function_single_interrupt+0x159/0x640 [ 468.561180] ? smp_call_function_single_interrupt+0x640/0x640 [ 468.567069] ? interrupt_entry+0xb5/0xc0 [ 468.571357] ? trace_hardirqs_off_caller+0xbb/0x300 [ 468.576387] ? trace_hardirqs_off_caller+0xbb/0x300 [ 468.581403] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 468.586257] ? trace_hardirqs_on_caller+0x310/0x310 [ 468.591286] ? trace_hardirqs_on_caller+0x310/0x310 [ 468.596305] ? task_prio+0x50/0x50 [ 468.599851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 468.605386] ? check_preemption_disabled+0x48/0x200 [ 468.610463] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 468.615319] apic_timer_interrupt+0xf/0x20 [ 468.619614] [ 468.621854] RIP: 0010:_raw_spin_unlock_irqrestore+0xaf/0xd0 [ 468.627617] Code: 70 f4 31 89 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 28 48 83 3d 58 3b 7e 01 00 74 15 48 89 df 57 9d <0f> 1f 44 00 00 eb ad e8 fc c5 4c f9 eb bb 0f 0b 0f 0b e8 aa 63 0d [ 468.646523] RSP: 0018:ffff880185405e28 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 468.654368] RAX: dffffc0000000000 RBX: 0000000000000286 RCX: ffffc90009ed2000 [ 468.661644] RDX: 1ffffffff1263e8e RSI: ffffffff818377a4 RDI: 0000000000000286 [ 468.668976] RBP: ffff880185405e38 R08: ffff88018aab8000 R09: fffffbfff1286ea4 [ 468.676358] R10: fffffbfff1286ea4 R11: ffffffff89437523 R12: ffffffff89437520 [ 468.683631] R13: 0000000000000000 R14: ffff8801c1864498 R15: 0000000000000000 [ 468.690915] ? trace_hardirqs_on+0xb4/0x310 [ 468.695248] kasan_end_report+0x32/0x4f [ 468.699357] kasan_report.cold.9+0x76/0x309 [ 468.703677] ? rtnl_fill_ifinfo+0x420e/0x4670 [ 468.708185] __asan_report_load8_noabort+0x14/0x20 [ 468.713117] rtnl_fill_ifinfo+0x420e/0x4670 [ 468.717450] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 468.722471] ? rtnl_fill_vf+0x4c0/0x4c0 [ 468.726447] ? mark_held_locks+0x130/0x130 [ 468.730683] ? trace_hardirqs_off+0x310/0x310 [ 468.735177] ? write_comp_data+0x20/0x70 [ 468.739246] ? mark_held_locks+0x130/0x130 [ 468.743482] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 468.748372] ? retint_kernel+0x2d/0x2d [ 468.752266] ? retint_kernel+0x2d/0x2d [ 468.756203] ? trace_hardirqs_on_caller+0xc0/0x310 [ 468.761133] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 468.765942] ? trace_hardirqs_off+0x310/0x310 [ 468.770439] ? trace_hardirqs_on_caller+0xc0/0x310 [ 468.775380] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 468.780323] ? trace_hardirqs_off+0x310/0x310 [ 468.784820] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 468.789581] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 468.794599] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 468.799407] ? retint_kernel+0x2d/0x2d [ 468.803312] ? trace_hardirqs_on_caller+0xc0/0x310 [ 468.808259] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 468.813015] ? trace_hardirqs_off+0x310/0x310 [ 468.817512] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 468.822524] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 468.827284] ? is_bpf_text_address+0xac/0x170 [ 468.831783] ? lock_downgrade+0x900/0x900 [ 468.835933] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 468.840869] ? __module_address+0x8/0x720 [ 468.845034] ? is_bpf_text_address+0xd3/0x170 [ 468.849559] ? kernel_text_address+0x79/0xf0 [ 468.853980] ? __kernel_text_address+0xd/0x40 [ 468.858476] ? unwind_get_return_address+0x61/0xa0 [ 468.863405] ? __save_stack_trace+0x8d/0xf0 [ 468.867762] ? save_stack+0xa9/0xd0 [ 468.871393] ? save_stack+0x43/0xd0 [ 468.875017] ? kasan_kmalloc+0xc7/0xe0 [ 468.878905] ? __kmalloc_node_track_caller+0x47/0x70 [ 468.884009] ? __kmalloc_reserve.isra.39+0x41/0xe0 [ 468.888938] ? __alloc_skb+0x150/0x770 [ 468.892830] ? rtmsg_ifinfo_build_skb+0x74/0x190 [ 468.897583] ? rtmsg_ifinfo_event.part.31+0x45/0xe0 [ 468.902604] ? rtmsg_ifinfo+0x8c/0xa0 [ 468.906418] ? netdev_state_change+0x152/0x1a0 [ 468.910999] ? do_setlink+0x2680/0x3f20 [ 468.914971] ? rtnl_newlink+0x1573/0x1d40 [ 468.919116] ? rtnetlink_rcv_msg+0x46a/0xc20 [ 468.923525] ? netlink_rcv_skb+0x172/0x440 [ 468.927782] ? rtnetlink_rcv+0x1c/0x20 [ 468.931668] ? netlink_unicast+0x5a5/0x760 [ 468.935904] ? netlink_sendmsg+0xa18/0xfc0 [ 468.940151] ? sock_sendmsg+0xd5/0x120 [ 468.944049] ? ___sys_sendmsg+0x7fd/0x930 [ 468.948201] ? __sys_sendmsg+0x11d/0x280 [ 468.952276] ? __x64_sys_sendmsg+0x78/0xb0 [ 468.956533] ? do_syscall_64+0x1b9/0x820 [ 468.960599] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 468.965963] ? retint_kernel+0x2d/0x2d [ 468.969853] ? trace_hardirqs_on_caller+0xc0/0x310 [ 468.974785] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 468.979554] ? trace_hardirqs_off+0x310/0x310 [ 468.984065] ? retint_kernel+0x2d/0x2d [ 468.987959] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 468.992719] ? retint_kernel+0x2d/0x2d [ 468.996643] ? __phys_addr+0x5b/0x120 [ 469.000453] ? __phys_addr+0x8c/0x120 [ 469.004269] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 469.009927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 469.015480] ? __alloc_skb+0x4c1/0x770 [ 469.019386] ? skb_scrub_packet+0x490/0x490 [ 469.023722] ? if_nlmsg_size+0x5d1/0xbb0 [ 469.027837] ? nla_put_ifalias+0x170/0x170 [ 469.032125] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 469.037672] ? notifier_call_chain+0x2d4/0x380 [ 469.042282] rtmsg_ifinfo_build_skb+0xc9/0x190 [ 469.046968] rtmsg_ifinfo_event.part.31+0x45/0xe0 [ 469.051841] rtmsg_ifinfo+0x8c/0xa0 [ 469.055528] netdev_state_change+0x152/0x1a0 [ 469.059938] ? arch_local_irq_restore+0x60/0x60 [ 469.064614] ? dev_change_flags+0x102/0x150 [ 469.068950] do_setlink+0x2680/0x3f20 [ 469.072783] ? lock_downgrade+0x900/0x900 [ 469.076931] ? validate_linkmsg+0xa50/0xa50 [ 469.081268] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 469.085852] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 469.091447] ? check_preemption_disabled+0x48/0x200 [ 469.096464] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 469.102002] ? check_preemption_disabled+0x48/0x200 [ 469.107021] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 469.112612] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 469.117825] ? perf_sched_cb_inc+0x350/0x350 [ 469.122249] ? finish_task_switch+0x1f5/0x900 [ 469.126826] ? lock_downgrade+0x900/0x900 [ 469.130975] ? retint_kernel+0x2d/0x2d [ 469.134862] ? retint_kernel+0x2d/0x2d [ 469.138863] ? trace_hardirqs_on_caller+0xc0/0x310 [ 469.143794] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 469.148551] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 469.153307] ? trace_hardirqs_off+0x310/0x310 [ 469.157805] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 469.162879] ? validate_nla+0x33a/0x9c0 [ 469.166868] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 469.171627] ? retint_kernel+0x2d/0x2d [ 469.175639] rtnl_newlink+0x1573/0x1d40 [ 469.179636] ? rtnl_link_unregister+0x390/0x390 [ 469.184308] ? mutex_spin_on_owner+0x2e3/0x540 [ 469.188937] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 469.193865] ? __kprobes_text_end+0xc4388/0xc4388 [ 469.198707] ? retint_kernel+0x2d/0x2d [ 469.202624] ? trace_hardirqs_on_caller+0xc0/0x310 [ 469.207558] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 469.212490] ? __mutex_lock+0x854/0x1700 [ 469.216554] ? lock_downgrade+0x900/0x900 [ 469.220701] ? debug_mutex_add_waiter+0x230/0x230 [ 469.225582] ? kasan_check_read+0x11/0x20 [ 469.229771] ? do_raw_spin_unlock+0xa7/0x2f0 [ 469.234178] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 469.238785] ? debug_mutex_wake_waiter+0x630/0x630 [ 469.243794] ? kasan_check_write+0x14/0x20 [ 469.248083] ? do_raw_spin_lock+0xc1/0x200 [ 469.252334] ? _raw_spin_unlock+0x2c/0x50 [ 469.256514] ? __mutex_lock+0x85e/0x1700 [ 469.260577] ? rtnetlink_rcv_msg+0x40e/0xc20 [ 469.264998] ? mutex_trylock+0x2b0/0x2b0 [ 469.269075] ? _raw_spin_unlock_irq+0x60/0x80 [ 469.273579] ? finish_task_switch+0x1f5/0x900 [ 469.278100] ? finish_task_switch+0x1b5/0x900 [ 469.282611] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 469.288165] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 469.293784] ? rtnl_get_link+0x170/0x370 [ 469.297958] ? rtnl_dump_all+0x570/0x570 [ 469.302023] ? rtnl_link_unregister+0x390/0x390 [ 469.306841] rtnetlink_rcv_msg+0x46a/0xc20 [ 469.311077] ? rtnetlink_put_metrics+0x690/0x690 [ 469.315906] netlink_rcv_skb+0x172/0x440 [ 469.319967] ? rtnetlink_put_metrics+0x690/0x690 [ 469.324723] ? netlink_ack+0xb80/0xb80 [ 469.328648] rtnetlink_rcv+0x1c/0x20 [ 469.332374] netlink_unicast+0x5a5/0x760 [ 469.336450] ? netlink_attachskb+0x9a0/0x9a0 [ 469.340917] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 469.345934] netlink_sendmsg+0xa18/0xfc0 [ 469.350005] ? netlink_unicast+0x760/0x760 [ 469.354291] ? aa_sock_msg_perm.isra.12+0xba/0x160 [ 469.359237] ? apparmor_socket_sendmsg+0x29/0x30 [ 469.364009] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 469.369556] ? security_socket_sendmsg+0x94/0xc0 [ 469.374337] ? netlink_unicast+0x760/0x760 [ 469.378586] sock_sendmsg+0xd5/0x120 [ 469.382309] ___sys_sendmsg+0x7fd/0x930 [ 469.386296] ? trace_hardirqs_off+0x310/0x310 [ 469.390846] ? copy_msghdr_from_user+0x580/0x580 [ 469.395617] ? retint_kernel+0x2d/0x2d [ 469.399529] ? trace_hardirqs_on_caller+0xc0/0x310 [ 469.404480] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 469.409293] ? __fget_light+0x2e9/0x430 [ 469.413313] ? fget_raw+0x20/0x20 [ 469.416788] ? lock_downgrade+0x900/0x900 [ 469.420938] ? lock_release+0x970/0x970 [ 469.424914] ? check_same_owner+0x330/0x330 [ 469.429256] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 469.434792] ? sockfd_lookup_light+0xc5/0x160 [ 469.439377] __sys_sendmsg+0x11d/0x280 [ 469.443337] ? __ia32_sys_shutdown+0x80/0x80 [ 469.447891] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 469.453448] ? put_timespec64+0x10f/0x1b0 [ 469.457672] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 469.463192] __x64_sys_sendmsg+0x78/0xb0 [ 469.467328] do_syscall_64+0x1b9/0x820 [ 469.471229] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 469.476595] ? syscall_return_slowpath+0x5e0/0x5e0 [ 469.481530] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 469.486433] ? trace_hardirqs_on_caller+0x310/0x310 [ 469.491450] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 469.496469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 469.502095] ? prepare_exit_to_usermode+0x291/0x3b0 [ 469.507130] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 469.512025] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 469.517301] RIP: 0033:0x457579 [ 469.520499] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 469.539512] RSP: 002b:00007ff8c513fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.547218] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 469.554484] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 469.561781] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 469.569063] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8c51406d4 [ 469.576329] R13: 00000000004c38b9 R14: 00000000004d5700 R15: 00000000ffffffff [ 469.583669] Modules linked in: [ 469.586879] CR2: ffff8801c3002a80 [ 469.590330] ---[ end trace d9510dfccc42b163 ]--- [ 469.595095] RIP: 0010:0xffff8801c3002a80 [ 469.599225] Code: ff ff 3e 44 a2 86 ff ff ff ff bc 42 a2 86 ff ff ff ff f5 43 a2 86 ff ff ff ff 3e 44 a2 86 ff ff ff ff bc 42 a2 86 ff ff ff ff 43 a2 86 ff ff ff ff 3e 44 a2 86 ff ff ff ff bc 42 a2 86 ff ff [ 469.618244] RSP: 0018:ffff8801dae06b78 EFLAGS: 00010292 [ 469.623608] RAX: ffff8801c3002a80 RBX: ffff8801c0d3a140 RCX: ffffffff860c7d0f [ 469.630873] RDX: ffff8801dae06d20 RSI: ffff8801c1864480 RDI: ffff8801c0d3a140 [ 469.638140] RBP: ffff8801dae070d0 R08: ffff88018aab8000 R09: 0000000000000000 [ 469.645585] R10: ffff8801dae070e8 R11: 0000000000000000 R12: 0000000000000000 [ 469.652864] R13: ffff8801c1864480 R14: 0000000000000100 R15: 0000000000000000 [ 469.660272] FS: 00007ff8c5140700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 469.668551] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.674477] CR2: ffff8801c3002a80 CR3: 00000001cd722000 CR4: 00000000001426f0 [ 469.681832] Kernel panic - not syncing: Fatal exception in interrupt [ 469.689464] Kernel Offset: disabled [ 469.693103] Rebooting in 86400 seconds..